This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft File: GzpBGgdaXbGixkL41KG8PLW8uxw.mft (raw, json) Hash identifier: xK3DgXnkhdQY2fEREP+kTeZ5c8veNFWFfsZ9URrfcww= Subject key identifier: 6D:21:BC:D9:81:03:61:CC:85:E3:94:78:37:E0:7F:BC:4E:17:02:37 Authority key identifier: 1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C Certificate issuer: /CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Certificate serial: 025C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft Manifest number: 0256 Signing time: Sun 07 Dec 2025 00:12:39 +0000 Manifest this update: Sun 07 Dec 2025 00:12:39 +0000 Manifest next update: Sun 14 Dec 2025 00:12:39 +0000 Files and hashes: 1: GzpBGgdaXbGixkL41KG8PLW8uxw.crl (hash: rmmk4EuMj8nCCWqOXD1vpQR+qQiuki0jAT4SbS8K+CQ=) 2: F1F8A98442D811ED854B9670C4F9AE02.roa (hash: TvztujTH0aF+f3+QnJDK+OdcTc4zPAtby3BUe4w8JhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 604 (0x25c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C3CC, serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C Validity Not Before: Dec 7 00:12:39 2025 GMT Not After : Dec 14 00:12:39 2025 GMT Subject: CN=6934c677-156a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:83:99:05:6a:7b:ca:bc:95:48:32:97:b6:4e: 27:fa:21:14:53:35:9a:c3:0d:5a:9a:c6:ff:2c:f4: b1:c9:6d:74:ae:dd:3f:6c:e9:9c:4b:0b:da:65:ee: cd:c2:c7:aa:9c:80:1b:a8:b8:f6:b4:ff:d8:02:f0: 99:f6:b9:d5:91:3b:9e:b9:07:07:d3:1b:7a:1c:24: 68:bf:3d:48:fc:27:f8:b6:8a:61:ab:1b:9d:5d:cc: 47:68:d0:2c:8e:d2:d5:33:2c:a0:5b:71:d3:4d:f5: b6:42:c3:14:e7:21:5f:bc:c5:ab:eb:31:b9:d5:cb: 70:d8:77:e2:9c:40:74:73:58:f2:cf:d4:a4:d9:0a: 86:93:1e:14:72:e7:f5:af:da:e4:d7:67:7e:15:37: ab:35:8f:ef:f0:76:3b:6c:07:1e:17:79:08:6b:64: 0f:33:82:fd:d7:6c:66:64:98:63:da:d0:80:82:dd: c3:15:eb:4a:c2:66:12:74:dc:ef:ca:b8:12:d7:fb: dc:8e:6d:c1:33:0d:48:6b:62:e9:09:69:0a:f1:ac: 82:5e:f8:c7:80:7c:f7:15:0b:9c:5d:d9:98:e5:1a: 1a:88:d9:4b:43:bd:bb:f8:be:14:12:24:1c:9d:d8: dc:cc:40:a9:2c:0a:d7:3b:a4:38:21:c1:f9:b5:3a: 11:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:21:BC:D9:81:03:61:CC:85:E3:94:78:37:E0:7F:BC:4E:17:02:37 X509v3 Authority Key Identifier: keyid:1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:c6:c7:f3:c0:93:a4:e7:ab:c3:15:1c:8d:ca:31:19:a8:5d: 78:12:e6:36:dd:d6:2a:5b:ce:c5:43:d5:78:d8:80:e2:6d:ce: 8d:f6:cf:65:28:4e:8b:35:fa:a1:b1:6e:3c:de:8d:19:13:f6: 86:54:67:cc:35:ea:6e:8f:46:21:d3:ec:29:a6:ae:69:38:3a: 32:e8:58:a0:53:cf:d3:a6:cc:d5:8a:80:a2:35:55:da:9b:54: d7:2b:ff:08:b9:2e:7f:6f:ab:be:2e:81:48:51:69:84:34:90: b7:36:46:4b:4a:1e:c5:7e:ef:67:e4:51:32:a6:35:8e:ec:e7: bd:2c:14:ff:a6:49:3e:ae:f4:75:92:e5:e3:38:41:9b:f6:11: 45:cd:d2:9e:e0:a7:ca:01:e7:a7:31:d4:55:9c:65:80:d8:be: 95:e4:8e:83:be:80:1a:1c:42:e5:da:6f:17:61:a8:e0:04:26: 20:e9:26:1d:a9:2b:28:aa:d7:92:09:b4:c6:e3:d9:07:0d:29: 90:b1:8c:4d:57:58:a5:56:a7:22:a3:f1:44:99:c1:90:92:16: 7f:21:aa:5e:81:79:31:6f:d7:28:41:cc:36:3e:a9:b9:72:98: 1b:17:2b:df:c7:ed:ab:ea:9b:e4:0c:3d:cc:6e:a6:b6:89:9b: af:56:4c:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzQ0MxMTAvBgNVBAUTKDFCM0E0MTFBMDc1QTVEQjFBMkM2NDJGOEQ0QTFCQzND QjVCQ0JCMUMwHhcNMjUxMjA3MDAxMjM5WhcNMjUxMjE0MDAxMjM5WjAYMRYwFAYD VQQDEw02OTM0YzY3Ny0xNTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooOZBWp7yryVSDKXtk4n+iEUUzWaww1amsb/LPSxyW10rt0/bOmcSwvaZe7N wseqnIAbqLj2tP/YAvCZ9rnVkTueuQcH0xt6HCRovz1I/Cf4tophqxudXcxHaNAs jtLVMyygW3HTTfW2QsMU5yFfvMWr6zG51ctw2HfinEB0c1jyz9Sk2QqGkx4Ucuf1 r9rk12d+FTerNY/v8HY7bAceF3kIa2QPM4L912xmZJhj2tCAgt3DFetKwmYSdNzv yrgS1/vcjm3BMw1Ia2LpCWkK8ayCXvjHgHz3FQucXdmY5RoaiNlLQ727+L4UEiQc ndjczECpLArXO6Q4IcH5tToROQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0hvNmB A2HMheOUeDfgf7xOFwI3MB8GA1UdIwQYMBaAFBs6QRoHWl2xosZC+NShvDy1vLsc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzNDQy80QTE0NzQwNDQy RDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhiR2l4a0w0MUtHOFBMVzh1 eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d6cEJHZ2RhWGJHaXhrTDQxS0c4UExXOHV4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzNDQy80QTE0NzQwNDQyRDQxMUVEQTEyNjBFNkFDNEY5QUUwMi9HenBCR2dkYVhi R2l4a0w0MUtHOFBMVzh1eHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYxsfzwJOk56vDFRyNyjEZqF14EuY23dYqW87FQ9V42IDibc6N9s9l KE6LNfqhsW483o0ZE/aGVGfMNepuj0Yh0+wppq5pODoy6FigU8/TpszVioCiNVXa m1TXK/8IuS5/b6u+LoFIUWmENJC3NkZLSh7Ffu9n5FEypjWO7Oe9LBT/pkk+rvR1 kuXjOEGb9hFFzdKe4KfKAeenMdRVnGWA2L6V5I6DvoAaHELl2m8XYajgBCYg6SYd qSsoqteSCbTG49kHDSmQsYxNV1ilVqcio/FEmcGQkhZ/IapegXkxb9coQcw2Pqm5 cpgbFyvfx+2r6pvkDD3Mbqa2iZuvVkwz -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:00 2025 by rpki-client