This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft File: Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft (raw, json) Hash identifier: S9CDo+ZgdRnqPkQMyvJNHUoa8/WLFfD5kjHrY/ue3NA= Subject key identifier: 92:15:E9:4E:94:3A:4B:32:57:BE:93:8D:EC:A9:AC:4F:9D:56:11:C7 Authority key identifier: 1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4 Certificate issuer: /CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4 Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft Manifest number: 01EE Signing time: Fri 05 Dec 2025 00:52:18 +0000 Manifest this update: Fri 05 Dec 2025 00:52:18 +0000 Manifest next update: Fri 12 Dec 2025 00:52:18 +0000 Files and hashes: 1: Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl (hash: KY4Mex47OjPXzqJppY/1zMRHAAjU/c2ekhEAmfCzfnY=) 2: 4D6D5554DB8011ED91D54A2BC4F9AE02.roa (hash: txIJm5SN5mj5ufLae9sOD2bwnfe8kYJIqTNAvBL7Uwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E951, serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4 Validity Not Before: Dec 5 00:52:18 2025 GMT Not After : Dec 12 00:52:18 2025 GMT Subject: CN=69322cc2-575d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:76:11:e0:fe:07:b7:b8:08:9c:fe:0b:d5:d8: d3:f0:0f:5e:82:0c:68:c2:59:99:6e:fc:0b:8a:c1: 47:47:05:0b:8a:99:fc:2e:5d:3e:79:1e:44:5f:41: 76:38:28:e1:20:eb:46:91:dc:4d:2a:f1:be:fb:7d: 00:9e:8c:e2:7e:cc:5a:5a:c8:b1:3b:ac:02:73:76: 7d:3d:9e:e3:08:b0:fc:a2:c7:d2:72:70:c8:98:af: 52:69:92:04:d9:26:87:96:82:3a:46:ff:a6:aa:ac: 7e:d5:15:5e:3a:bd:cf:0a:43:79:6a:3a:5e:06:41: 53:38:9c:dc:e7:bb:c5:1e:1a:16:bb:1f:65:e1:2a: 93:55:e0:74:b4:9d:d1:7b:dd:78:cc:4f:ad:95:6e: 95:93:66:1a:df:5c:9a:90:09:11:92:7e:4e:e8:78: 1f:06:b0:fe:19:7c:3b:5a:65:47:36:4a:9e:82:d8: 7f:f6:98:31:ea:25:7f:97:77:38:28:df:96:22:a9: 4c:9d:02:dc:f4:4c:f4:04:15:1e:f3:86:44:07:4d: 49:30:18:cd:36:7e:9c:75:51:87:0f:71:73:93:78: 3f:76:bb:a0:77:21:8b:f5:be:51:4d:05:fe:a7:a6: d1:f0:83:68:33:ed:d1:71:7b:21:9e:0c:61:30:e6: 2b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:15:E9:4E:94:3A:4B:32:57:BE:93:8D:EC:A9:AC:4F:9D:56:11:C7 X509v3 Authority Key Identifier: keyid:1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:19:c5:a0:f9:53:d0:d2:0d:a5:a0:52:80:b2:b1:8f:7e:0a: 77:59:44:1a:1e:5e:25:03:b9:4a:b5:9c:c0:c2:20:25:b3:ad: 2d:61:b3:c4:c7:27:22:93:64:b5:a4:ef:2d:76:5f:ac:44:60: a4:fe:73:37:dc:87:6c:22:ad:2e:78:23:c7:64:f1:96:73:55: d3:09:c4:d6:d4:30:55:ec:75:ce:98:c0:d5:d9:56:d2:d8:c9: c8:7e:aa:0c:be:0a:28:03:7d:af:93:a6:e5:8e:51:e4:1b:04: a4:3f:da:50:85:fc:ed:61:61:ef:2a:c6:db:dc:59:a1:a1:39: e2:36:e9:d7:7c:9c:e5:cb:69:60:9d:ee:1d:fb:9f:c9:75:2b: 73:f7:92:da:8e:37:90:a2:39:19:48:15:4d:04:4e:5f:ce:37: 04:01:85:3c:d0:67:19:a8:99:cf:c8:40:43:ad:a4:01:78:9f: 3c:f5:b0:38:ab:ac:df:c8:aa:38:b3:95:3c:b7:69:84:d3:b8: b7:d5:b8:f2:b8:c1:aa:24:40:43:ba:09:bf:33:bd:d8:04:9e: d0:e5:b9:1c:ab:8a:95:58:bd:7d:73:8e:71:06:c5:2a:5d:6d: 49:32:d6:fd:da:1e:34:94:40:59:f5:56:dd:63:f8:41:a2:98: 9c:75:a9:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NTExMTAvBgNVBAUTKDFBMEY3ODZGMTFCOEUxN0Q0NURFMUVEQ0U2MUUxNjAw REQ0OTMwQTQwHhcNMjUxMjA1MDA1MjE4WhcNMjUxMjEyMDA1MjE4WjAYMRYwFAYD VQQDEw02OTMyMmNjMi01NzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHYR4P4Ht7gInP4L1djT8A9eggxowlmZbvwLisFHRwULipn8Ll0+eR5EX0F2 OCjhIOtGkdxNKvG++30AnozifsxaWsixO6wCc3Z9PZ7jCLD8osfScnDImK9SaZIE 2SaHloI6Rv+mqqx+1RVeOr3PCkN5ajpeBkFTOJzc57vFHhoWux9l4SqTVeB0tJ3R e914zE+tlW6Vk2Ya31yakAkRkn5O6HgfBrD+GXw7WmVHNkqegth/9pgx6iV/l3c4 KN+WIqlMnQLc9Ez0BBUe84ZEB01JMBjNNn6cdVGHD3Fzk3g/drugdyGL9b5RTQX+ p6bR8INoM+3RcXshngxhMOYrNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIV6U6U OksyV76TjeyprE+dVhHHMB8GA1UdIwQYMBaAFBoPeG8RuOF9Rd4e3OYeFgDdSTCk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk1MS82RjQ5Qjk5MkRC NzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRYMUYzaDdjNWg0V0FOMUpN S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dnOTRieEc0NFgxRjNoN2M1aDRXQU4xSk1LUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk1MS82RjQ5Qjk5MkRCNzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRY MUYzaDdjNWg0V0FOMUpNS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKGcWg+VPQ0g2loFKAsrGPfgp3WUQaHl4lA7lKtZzAwiAls60tYbPE xycik2S1pO8tdl+sRGCk/nM33IdsIq0ueCPHZPGWc1XTCcTW1DBV7HXOmMDV2VbS 2MnIfqoMvgooA32vk6bljlHkGwSkP9pQhfztYWHvKsbb3FmhoTniNunXfJzly2lg ne4d+5/JdStz95LajjeQojkZSBVNBE5fzjcEAYU80GcZqJnPyEBDraQBeJ889bA4 q6zfyKo4s5U8t2mE07i31bjyuMGqJEBDugm/M73YBJ7Q5bkcq4qVWL19c45xBsUq XW1JMtb92h40lEBZ9VbdY/hBopicdanw -----END CERTIFICATE-----Generated at Sat Dec 6 16:14:47 2025 by rpki-client