This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft File: GFGeK8SmT3vVic2WPfB0saMwXfU.mft (raw, json) Hash identifier: l244nFOhHFgdKL1NsQSS94LfDEffgc1UYHgNx4U6bYU= Subject key identifier: A2:02:2B:09:DF:80:D0:2D:8E:81:E0:A0:77:68:C0:66:4A:60:D0:3A Authority key identifier: 18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5 Certificate issuer: /CN=A9158635/serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5 Certificate serial: 089C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft Manifest number: 0895 Signing time: Sat 06 Dec 2025 19:40:51 +0000 Manifest this update: Sat 06 Dec 2025 19:40:50 +0000 Manifest next update: Sat 13 Dec 2025 19:40:50 +0000 Files and hashes: 1: GFGeK8SmT3vVic2WPfB0saMwXfU.crl (hash: 4JUFpFc7rZYjuLGyzKYBgGvJGNWUhJuvj3DpWwt8Ka8=) 2: EB96EEB2CFB111EA8E6F7029C4F9AE02.roa (hash: Mx6TdeWb7xQYRiw4RSx4+mjl75r/TBUYOnLqpN3UBjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2204 (0x89c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158635, serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5 Validity Not Before: Dec 6 19:40:50 2025 GMT Not After : Dec 13 19:40:50 2025 GMT Subject: CN=693486c2-5c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f7:00:15:71:18:3f:b9:71:c6:ec:b0:56:be: 63:89:56:68:65:27:55:95:27:30:a6:8c:16:81:a6: 93:2d:12:4f:8f:c8:0f:53:cf:76:94:83:36:8a:fd: b9:8a:fa:77:cf:dd:42:47:8c:55:7c:98:96:4c:bd: ac:8e:68:45:a5:6f:e7:39:d0:45:83:7a:83:a3:7d: 87:d8:87:f0:68:cc:c7:c2:4e:e7:3c:c4:17:0f:68: 18:10:25:e1:27:80:95:4f:39:5a:3f:a9:c8:86:b5: 24:eb:11:dc:49:af:f8:25:4c:22:93:88:72:ad:47: a2:4f:ca:bb:1d:90:bb:4d:86:c4:14:d2:19:19:5f: 1a:ba:fc:46:04:6f:64:56:8c:f0:a9:ae:81:79:af: 99:c1:96:4d:e0:84:58:13:98:25:01:01:69:ee:9d: 6f:d8:67:7e:50:f6:2d:d4:12:ba:27:9c:8c:3c:17: 98:e4:83:53:94:43:18:48:39:b4:b7:0e:0a:99:6f: 1d:8b:17:47:75:d9:23:b3:b9:c7:ad:bf:a1:45:e2: b8:4e:1a:59:ee:a1:2b:35:1d:2f:4e:17:b2:91:a9: f4:d3:d4:87:64:44:e7:28:0b:65:d0:aa:12:bf:a7: 7e:dc:61:e0:49:1e:fc:9c:b8:d7:73:00:88:47:ca: 77:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:02:2B:09:DF:80:D0:2D:8E:81:E0:A0:77:68:C0:66:4A:60:D0:3A X509v3 Authority Key Identifier: keyid:18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:fb:c6:c5:12:1c:ef:05:d2:3e:02:65:33:03:49:84:71:d1: bc:3f:5d:ae:d5:83:81:7e:36:1d:cc:19:a6:7e:e8:0c:70:ac: 7a:15:09:42:ac:36:08:f0:f4:07:08:b1:a6:5d:e1:0e:94:c2: e3:71:d5:d0:08:b4:fa:9d:72:5b:5f:22:a9:a9:84:fc:92:7a: 6f:96:cf:d3:55:47:b0:70:27:52:32:38:7b:30:12:13:57:17: 55:18:70:9d:83:30:54:b9:22:54:bb:37:db:b3:6b:c4:02:d6: e3:c4:a0:e8:d0:9a:46:87:53:4a:8b:f1:ce:4c:0d:d9:7b:6c: ca:58:05:9b:43:9d:07:2b:b6:91:e5:a2:a0:e8:f1:75:6b:37: 90:1d:23:67:12:28:96:e6:28:5b:2b:13:1e:15:91:a9:74:bf: aa:76:ab:5b:43:e4:d6:89:0f:ad:e4:6f:4c:09:b3:66:bf:04: e6:ae:5e:63:ee:46:e5:90:9a:2b:64:9a:4e:ba:03:55:7f:ee: 27:cd:e8:fa:d7:72:ec:3a:0e:82:3b:02:4e:73:0e:aa:cd:16: 42:16:1f:ad:96:30:86:d4:aa:bf:3c:7c:48:37:a0:c3:83:85: 2c:b8:25:ed:4f:93:ba:9b:9f:d4:85:d3:c0:ff:48:4e:58:e1: 8d:7d:7a:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2MzUxMTAvBgNVBAUTKDE4NTE5RTJCQzRBNjRGN0JENTg5Q0Q5NjNERjA3NEIx QTMzMDVERjUwHhcNMjUxMjA2MTk0MDUwWhcNMjUxMjEzMTk0MDUwWjAYMRYwFAYD VQQDEw02OTM0ODZjMi01YzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/cAFXEYP7lxxuywVr5jiVZoZSdVlScwpowWgaaTLRJPj8gPU892lIM2iv25 ivp3z91CR4xVfJiWTL2sjmhFpW/nOdBFg3qDo32H2IfwaMzHwk7nPMQXD2gYECXh J4CVTzlaP6nIhrUk6xHcSa/4JUwik4hyrUeiT8q7HZC7TYbEFNIZGV8auvxGBG9k Vozwqa6Bea+ZwZZN4IRYE5glAQFp7p1v2Gd+UPYt1BK6J5yMPBeY5INTlEMYSDm0 tw4KmW8dixdHddkjs7nHrb+hReK4ThpZ7qErNR0vTheykan009SHZETnKAtl0KoS v6d+3GHgSR78nLjXcwCIR8p3wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKICKwnf gNAtjoHgoHdowGZKYNA6MB8GA1UdIwQYMBaAFBhRnivEpk971YnNlj3wdLGjMF31 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODYzNS9BOTk3Nzk1NkNG QjAxMUVBQTg2QkVDMjdDNEY5QUUwMi9HRkdlSzhTbVQzdlZpYzJXUGZCMHNhTXdY ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dGR2VLOFNtVDN2VmljMldQZkIwc2FNd1hmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODYzNS9BOTk3Nzk1NkNGQjAxMUVBQTg2QkVDMjdDNEY5QUUwMi9HRkdlSzhTbVQz dlZpYzJXUGZCMHNhTXdYZlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp+8bFEhzvBdI+AmUzA0mEcdG8P12u1YOBfjYdzBmmfugMcKx6FQlC rDYI8PQHCLGmXeEOlMLjcdXQCLT6nXJbXyKpqYT8knpvls/TVUewcCdSMjh7MBIT VxdVGHCdgzBUuSJUuzfbs2vEAtbjxKDo0JpGh1NKi/HOTA3Ze2zKWAWbQ50HK7aR 5aKg6PF1azeQHSNnEiiW5ihbKxMeFZGpdL+qdqtbQ+TWiQ+t5G9MCbNmvwTmrl5j 7kblkJorZJpOugNVf+4nzej613LsOg6COwJOcw6qzRZCFh+tljCG1Kq/PHxIN6DD g4UsuCXtT5O6m5/UhdPA/0hOWOGNfXp9 -----END CERTIFICATE-----Generated at Sat Dec 6 21:01:07 2025 by rpki-client