This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft File: GaNgWeMX739niFziUq7bkZWPXmg.mft (raw, json) Hash identifier: m9BvybURBeCk/80ONRiPwyfrC0feFeLsfmNdCi8WU/U= Subject key identifier: AA:8F:EB:D7:BB:0C:4F:69:4B:D8:D3:F6:57:1F:54:04:73:B6:0A:DB Authority key identifier: 19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68 Certificate issuer: /CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft Manifest number: 01A3 Signing time: Fri 05 Dec 2025 01:30:27 +0000 Manifest this update: Fri 05 Dec 2025 01:30:26 +0000 Manifest next update: Fri 12 Dec 2025 01:30:26 +0000 Files and hashes: 1: GaNgWeMX739niFziUq7bkZWPXmg.crl (hash: 4zeVwg7OIAnm/8gUI8xJJGkdiBhPaTA4Td2WVWYdCkg=) 2: BD9131004E2811EEBC65304DC4F9AE02.roa (hash: mDyA8en4O2HoFPMoiw1GIv6+nKDmPcew5/y5uXwGm88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D857, serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68 Validity Not Before: Dec 5 01:30:26 2025 GMT Not After : Dec 12 01:30:26 2025 GMT Subject: CN=693235b2-7746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f5:cc:8f:74:4c:c8:44:32:6c:5a:a1:7e:24: 2b:e9:8e:e9:a1:7f:ae:e5:10:6a:83:ba:b0:2a:ae: 21:f2:eb:cb:18:2e:01:d0:e8:3c:fb:77:bf:32:54: 4a:4d:05:5f:c7:2f:a4:61:77:d7:da:f6:79:dd:ee: b0:29:1b:16:c9:23:51:59:3b:ed:05:84:6e:34:81: a6:7c:40:0a:79:97:92:89:cc:d0:51:b0:13:18:0e: 27:ce:a6:41:bd:94:5c:c3:fd:72:67:4d:07:18:86: 8c:fe:50:8c:9a:1e:b2:7e:c8:8f:59:80:b2:c7:9d: 6e:89:12:52:6b:3f:8a:e9:55:fb:2e:89:8d:66:df: 7f:17:55:8d:60:8e:dc:5a:4f:29:24:70:4a:fe:77: 2e:f4:3e:bc:c7:c5:e5:eb:9d:13:43:6c:f8:1d:a6: 34:13:9d:bd:87:06:77:12:3e:4d:14:dc:39:32:07: 1c:8f:74:3f:81:2f:03:62:df:02:d0:18:72:47:57: 57:28:04:09:83:9a:1a:3b:51:89:d5:75:7b:d7:66: 26:5a:89:fb:a0:4f:23:1e:38:e1:33:21:a5:85:19: 34:a7:ae:78:d4:09:76:26:97:bb:51:bc:d6:8e:6d: 4b:1e:8b:8d:32:62:58:5b:8a:90:82:52:9d:c9:26: 02:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:8F:EB:D7:BB:0C:4F:69:4B:D8:D3:F6:57:1F:54:04:73:B6:0A:DB X509v3 Authority Key Identifier: keyid:19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:3f:98:a1:36:43:67:56:3d:7b:8c:11:b7:60:7b:f2:3e:f6: 2b:5f:a7:ec:c2:c6:97:d0:c0:20:b8:d7:b6:4e:be:0e:b3:fd: 35:d1:df:74:ca:14:81:3f:27:c6:50:91:6b:ef:86:57:90:18: 61:4b:9a:6a:23:f7:2b:ad:bf:bd:35:f3:29:7e:c7:a8:93:1c: d9:e7:34:b6:0f:22:d8:b6:15:1a:73:25:f3:7b:a4:c5:cb:2c: f4:94:e6:8f:39:65:3d:c8:f0:0a:27:03:e5:03:b2:00:a2:e9: a3:a0:87:d2:3a:1a:ad:91:81:3b:c5:b1:b1:ad:87:0c:c7:d0: 3b:9e:e7:cf:d9:9f:3e:5d:4b:f0:6e:c8:3a:57:be:19:f6:5c: 16:2d:11:99:a0:71:25:9d:31:84:91:b4:f8:66:87:1b:cb:ab: 2f:ed:5d:c4:cf:40:75:4b:f1:8c:89:79:e1:21:bd:86:32:e7: 1f:58:5d:0e:c0:9d:65:a4:96:cf:2a:53:88:61:8b:a3:7f:80: b0:51:3f:24:1e:dd:c3:68:36:ba:6b:b4:18:eb:98:fe:f7:69: 38:fd:1b:f5:3b:71:a5:7e:04:af:23:9a:d3:b8:bc:3f:a0:0b: 6b:7a:20:23:82:f0:1e:2b:41:c9:8a:6a:71:5b:93:02:43:18: b4:84:1b:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q4NTcxMTAvBgNVBAUTKDE5QTM2MDU5RTMxN0VGN0Y2Nzg4NUNFMjUyQUVEQjkx OTU4RjVFNjgwHhcNMjUxMjA1MDEzMDI2WhcNMjUxMjEyMDEzMDI2WjAYMRYwFAYD VQQDEw02OTMyMzViMi03NzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPXMj3RMyEQybFqhfiQr6Y7poX+u5RBqg7qwKq4h8uvLGC4B0Og8+3e/MlRK TQVfxy+kYXfX2vZ53e6wKRsWySNRWTvtBYRuNIGmfEAKeZeSiczQUbATGA4nzqZB vZRcw/1yZ00HGIaM/lCMmh6yfsiPWYCyx51uiRJSaz+K6VX7LomNZt9/F1WNYI7c Wk8pJHBK/ncu9D68x8Xl650TQ2z4HaY0E529hwZ3Ej5NFNw5Mgccj3Q/gS8DYt8C 0BhyR1dXKAQJg5oaO1GJ1XV712YmWon7oE8jHjjhMyGlhRk0p6541Al2Jpe7UbzW jm1LHouNMmJYW4qQglKdySYCjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKqP69e7 DE9pS9jT9lcfVARztgrbMB8GA1UdIwQYMBaAFBmjYFnjF+9/Z4hc4lKu25GVj15o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDg1Ny82MUM1Q0RCODRF MjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDczOW5pRnppVXE3YmtaV1BY bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dhTmdXZU1YNzM5bmlGemlVcTdia1pXUFhtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDg1Ny82MUM1Q0RCODRFMjgxMUVFOTRGREIzNENDNEY5QUUwMi9HYU5nV2VNWDcz OW5pRnppVXE3YmtaV1BYbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdP5ihNkNnVj17jBG3YHvyPvYrX6fswsaX0MAguNe2Tr4Os/010d90 yhSBPyfGUJFr74ZXkBhhS5pqI/crrb+9NfMpfseokxzZ5zS2DyLYthUacyXze6TF yyz0lOaPOWU9yPAKJwPlA7IAoumjoIfSOhqtkYE7xbGxrYcMx9A7nufP2Z8+XUvw bsg6V74Z9lwWLRGZoHElnTGEkbT4Zocby6sv7V3Ez0B1S/GMiXnhIb2GMucfWF0O wJ1lpJbPKlOIYYujf4CwUT8kHt3DaDa6a7QY65j+92k4/Rv1O3GlfgSvI5rTuLw/ oAtreiAjgvAeK0HJimpxW5MCQxi0hBtT -----END CERTIFICATE-----Generated at Sat Dec 6 19:15:22 2025 by rpki-client