This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft File: -GGkJMXdlLdB2BgJtff_OVVjdl4.mft (raw, json) Hash identifier: JTKw1aQ+9qtSzro3DqXeFC1x5HjgYcE0wHBAiPzysk4= Subject key identifier: F8:84:05:AB:D5:48:B9:BA:D8:C1:B6:0E:0F:B6:E3:D1:A5:00:A9:83 Authority key identifier: F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E Certificate issuer: /CN=A915B6E9/serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E Certificate serial: 0444 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft Manifest number: 043D Signing time: Sat 20 Dec 2025 23:32:03 +0000 Manifest this update: Sat 20 Dec 2025 23:32:02 +0000 Manifest next update: Sat 27 Dec 2025 23:32:02 +0000 Files and hashes: 1: -GGkJMXdlLdB2BgJtff_OVVjdl4.crl (hash: Rj7l2knZHAfCatHq7/BU3YnJCYBqb36dGR6O4025I7c=) 2: D2438C7C4B1F11EDAF41BC7FC4F9AE02.roa (hash: tt7O9YQ0p71DCEEFVfdI/EIIH0WIFOY0otBzHdQ0+Os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1092 (0x444) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B6E9, serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E Validity Not Before: Dec 20 23:32:02 2025 GMT Not After : Dec 27 23:32:02 2025 GMT Subject: CN=694731f2-0aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:ae:a1:16:13:34:43:91:88:09:76:7a:15: 75:9b:5b:0b:a2:e4:89:45:9c:b9:28:b3:4e:91:e5: bd:67:66:9d:a2:57:17:63:f1:0f:bd:a7:f2:ca:8f: 61:c2:61:4c:2f:9f:46:92:db:e4:75:a0:8a:a0:e6: fe:75:70:35:1e:80:b7:39:bf:74:dd:a1:f2:ed:21: 2e:d2:50:00:9c:9a:ce:bd:ab:59:9b:83:39:ac:9d: 8b:2f:be:f0:06:f1:e6:a8:c1:f7:ae:90:7c:12:f6: a7:a3:27:f9:df:e4:4b:69:cb:ce:4c:4e:6e:5d:e3: 19:63:7a:94:8e:dd:b3:b0:b1:88:4c:e2:eb:20:c2: 32:ed:42:09:3c:2b:57:2e:16:77:3c:88:c9:d1:db: 02:95:b8:ee:30:ce:db:98:c2:6f:02:0b:64:f9:c7: 08:ad:58:c0:50:69:eb:04:96:2a:e2:31:d3:32:38: 10:e1:31:93:1a:e8:d3:cb:e8:0a:66:8b:51:0c:2a: 70:ec:f5:61:03:35:10:bf:1e:61:6e:fc:36:8a:fb: 23:6d:36:c0:69:64:cd:f2:60:2a:a5:7f:f4:9b:39: 26:f0:e8:6a:0c:f7:c3:c6:e5:b0:80:d7:b5:c3:45: ad:67:16:e0:ac:9a:ae:d7:70:12:2c:0f:56:94:d2: 52:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:84:05:AB:D5:48:B9:BA:D8:C1:B6:0E:0F:B6:E3:D1:A5:00:A9:83 X509v3 Authority Key Identifier: keyid:F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:38:3c:47:05:6c:4c:18:42:96:a8:ec:34:81:2f:6f:c9:5f: 72:08:00:fb:a2:a2:14:64:db:57:c6:29:54:4f:7e:31:45:07: 07:71:3a:29:14:75:17:9a:2c:b3:09:d8:d6:49:c7:0d:9b:7d: 04:6b:b0:74:80:81:b5:97:93:60:d4:8e:46:1b:bb:22:e3:45: ea:f0:b6:cd:dd:41:61:06:83:7c:d1:9c:19:4e:12:35:61:47: a7:f1:f0:84:57:15:48:55:80:6a:9d:b0:d3:d1:4f:75:cc:58: 52:5c:54:62:d2:ed:e1:9a:80:1e:27:61:14:ce:8f:b0:37:a3: 9c:4b:9e:84:2c:2d:16:45:5e:8b:60:fe:32:22:b8:15:e4:70: 91:94:2f:8b:b2:d5:c1:3e:25:91:31:27:f3:da:bc:8a:95:68: f9:6a:68:0a:ba:1a:14:4e:2e:21:52:98:f1:3e:b7:0a:aa:a1: ec:f2:df:76:a8:93:e3:9d:dd:46:80:1d:ef:f2:35:33:78:c0: da:1c:25:2a:32:39:44:f5:18:ac:99:f5:11:af:16:55:4d:76: 05:d1:be:52:59:76:c2:ca:e8:82:b6:76:b6:23:6c:12:80:47: 77:d6:d1:50:4a:1b:3e:bd:fd:5f:a0:68:2a:30:95:78:51:48: 79:f0:a6:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI2RTkxMTAvBgNVBAUTKEY4NjFBNDI0QzVERDk0Qjc0MUQ4MTgwOUI1RjdGRjM5 NTU2Mzc2NUUwHhcNMjUxMjIwMjMzMjAyWhcNMjUxMjI3MjMzMjAyWjAYMRYwFAYD VQQDDA02OTQ3MzFmMi0wYWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgOuoRYTNEORiAl2ehV1m1sLouSJRZy5KLNOkeW9Z2adolcXY/EPvafyyo9h wmFML59GktvkdaCKoOb+dXA1HoC3Ob903aHy7SEu0lAAnJrOvatZm4M5rJ2LL77w BvHmqMH3rpB8Evanoyf53+RLacvOTE5uXeMZY3qUjt2zsLGITOLrIMIy7UIJPCtX LhZ3PIjJ0dsClbjuMM7bmMJvAgtk+ccIrVjAUGnrBJYq4jHTMjgQ4TGTGujTy+gK ZotRDCpw7PVhAzUQvx5hbvw2ivsjbTbAaWTN8mAqpX/0mzkm8OhqDPfDxuWwgNe1 w0WtZxbgrJqu13ASLA9WlNJS7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPiEBavV SLm62MG2Dg+249GlAKmDMB8GA1UdIwQYMBaAFPhhpCTF3ZS3QdgYCbX3/zlVY3Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjZFOS8wQTE2OTE5Qzg1 OEUxMUVDOUMwMjg0NTRDNEY5QUUwMi8tR0drSk1YZGxMZEIyQmdKdGZmX09WVmpk bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1HR2tKTVhkbExkQjJCZ0p0ZmZfT1ZWamRsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjZFOS8wQTE2OTE5Qzg1OEUxMUVDOUMwMjg0NTRDNEY5QUUwMi8tR0drSk1YZGxM ZEIyQmdKdGZmX09WVmpkbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlODxHBWxMGEKWqOw0gS9vyV9yCAD7oqIUZNtXxilUT34xRQcHcTop FHUXmiyzCdjWSccNm30Ea7B0gIG1l5Ng1I5GG7si40Xq8LbN3UFhBoN80ZwZThI1 YUen8fCEVxVIVYBqnbDT0U91zFhSXFRi0u3hmoAeJ2EUzo+wN6OcS56ELC0WRV6L YP4yIrgV5HCRlC+LstXBPiWRMSfz2ryKlWj5amgKuhoUTi4hUpjxPrcKqqHs8t92 qJPjnd1GgB3v8jUzeMDaHCUqMjlE9RismfURrxZVTXYF0b5SWXbCyuiCtna2I2wS gEd31tFQShs+vf1foGgqMJV4UUh58KZn -----END CERTIFICATE-----Generated at Sun Dec 21 20:57:31 2025 by rpki-client