This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft File: GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json) Hash identifier: doHGHzOss7KAmm9KSrd/frRqCQik5WpYsMtbHwYMZq0= Subject key identifier: 61:7A:D5:14:D5:F3:74:AE:7F:06:98:C1:DA:62:70:7B:47:70:4A:BD Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 Certificate issuer: /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Certificate serial: 0B53 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft Manifest number: 0B53 Signing time: Sat 06 Dec 2025 15:22:56 +0000 Manifest this update: Sat 06 Dec 2025 15:22:55 +0000 Manifest next update: Sat 13 Dec 2025 15:22:55 +0000 Files and hashes: 1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: 5DIxEAZ+VJXf/MUwskeV6KFVc6URYw49Sa4l1Xzpdzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2899 (0xb53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F, serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Validity Not Before: Dec 6 15:22:55 2025 GMT Not After : Dec 13 15:22:55 2025 GMT Subject: CN=69344a50-b6e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:99:9d:8a:98:41:b0:e8:8a:68:df:bb:32:c5: 7c:f3:b5:f5:85:5e:c7:5e:de:5b:ef:33:65:1e:54: 3d:2f:c4:47:fd:91:e1:9e:52:f8:b5:98:f6:90:e0: e2:b4:c7:db:13:28:53:aa:55:bb:dc:0a:46:78:b7: dc:e5:a0:7e:6c:9c:e7:9b:b3:2f:73:fb:15:05:a3: c6:55:bf:9f:bb:15:54:64:22:2b:60:da:2c:d7:02: d8:7b:c1:3c:1a:3a:70:ca:76:66:dd:36:a6:d2:02: 16:64:be:74:2c:35:81:8c:81:bf:17:a4:47:6e:7d: 96:d3:fc:16:68:28:e9:e3:be:06:5f:0a:d2:be:68: 56:dd:5b:be:85:20:1c:f8:13:64:5b:c3:63:88:ae: 9b:fe:0d:49:a2:8e:91:e6:41:25:d0:ee:2a:34:0d: f5:0f:d4:72:12:50:38:22:7d:f2:55:9e:17:7d:7f: 8b:f9:50:4f:ca:bc:a2:18:43:39:ee:fa:b6:a2:a6: 98:b4:00:d9:32:22:9d:4f:35:32:ce:91:c4:44:e4: 22:01:a5:56:44:b0:e0:80:6a:7e:a8:fd:c1:3f:04: 83:62:cf:bf:11:a6:d9:cd:f4:35:0e:76:49:33:39: ab:1c:06:b8:53:ca:2d:ca:94:fc:e6:88:49:fb:46: 65:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7A:D5:14:D5:F3:74:AE:7F:06:98:C1:DA:62:70:7B:47:70:4A:BD X509v3 Authority Key Identifier: keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:da:81:8d:3e:80:0a:b9:e1:77:98:48:09:12:12:dc:1a:3b: c7:5c:40:7a:a8:d7:a1:50:58:b7:d8:7d:ac:2f:80:bb:07:66: 0a:9c:3f:d9:58:d0:04:6d:4d:f5:27:ab:80:37:0d:ea:10:73: 38:26:c4:6e:ae:ad:b4:99:72:c2:bc:90:9f:fe:75:34:b6:b9: 58:0c:c9:38:a2:ae:f2:94:48:e5:33:45:81:d8:5d:84:43:54: f4:c8:a6:fc:54:25:24:b1:d9:b7:4c:e6:e6:f0:28:4a:58:a1: ed:76:f4:02:91:9e:35:99:ef:9e:26:a2:4c:eb:c4:79:0b:29: e1:bb:22:61:05:4c:fb:65:e9:a5:9b:a4:28:dd:32:51:2c:97: 42:17:c1:82:b9:26:63:d0:b7:f3:73:3d:3a:f2:2f:a2:81:d6: c0:03:65:56:55:d2:c0:89:46:69:22:09:5f:69:b5:8f:e1:56: fc:92:77:b9:d6:1b:9d:01:47:ca:41:6b:c7:c3:6a:10:27:36: 00:c2:e5:a1:3b:45:01:87:79:d6:69:1c:a1:b4:fd:4b:64:03: a5:ac:3c:b0:2f:d6:ea:d3:c0:3f:94:5b:67:a9:4c:a4:eb:dc: 0b:6f:39:14:34:6e:94:c8:d8:21:8c:f7:4c:bd:f0:7d:fe:7d: e5:b3:6f:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKDE4NzJGOTg4QjY1NzIzNzgzNzk5MjM3RTU1NERCQ0M2 RTQ5RDE0QjAwHhcNMjUxMjA2MTUyMjU1WhcNMjUxMjEzMTUyMjU1WjAYMRYwFAYD VQQDEw02OTM0NGE1MC1iNmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35mdiphBsOiKaN+7MsV887X1hV7HXt5b7zNlHlQ9L8RH/ZHhnlL4tZj2kODi tMfbEyhTqlW73ApGeLfc5aB+bJznm7Mvc/sVBaPGVb+fuxVUZCIrYNos1wLYe8E8 GjpwynZm3Tam0gIWZL50LDWBjIG/F6RHbn2W0/wWaCjp474GXwrSvmhW3Vu+hSAc +BNkW8NjiK6b/g1Joo6R5kEl0O4qNA31D9RyElA4In3yVZ4XfX+L+VBPyryiGEM5 7vq2oqaYtADZMiKdTzUyzpHEROQiAaVWRLDggGp+qP3BPwSDYs+/EabZzfQ1DnZJ MzmrHAa4U8otypT85ohJ+0ZlDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGF61RTV 83SufwaYwdpicHtHcEq9MB8GA1UdIwQYMBaAFBhy+Yi2VyN4N5kjflVNvMbknRSw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9BNjFERjFEQTQ2 NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkzZzNtU04tVlUyOHh1U2RG TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0dITDVpTFpYSTNnM21TTi1WVTI4eHVTZEZMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9BNjFERjFEQTQ2NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkz ZzNtU04tVlUyOHh1U2RGTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ2oGNPoAKueF3mEgJEhLcGjvHXEB6qNehUFi32H2sL4C7B2YKnD/Z WNAEbU31J6uANw3qEHM4JsRurq20mXLCvJCf/nU0trlYDMk4oq7ylEjlM0WB2F2E Q1T0yKb8VCUksdm3TObm8ChKWKHtdvQCkZ41me+eJqJM68R5CynhuyJhBUz7Zeml m6Qo3TJRLJdCF8GCuSZj0Lfzcz068i+igdbAA2VWVdLAiUZpIglfabWP4Vb8kne5 1hudAUfKQWvHw2oQJzYAwuWhO0UBh3nWaRyhtP1LZAOlrDywL9bq08A/lFtnqUyk 69wLbzkUNG6UyNghjPdMvfB9/n3ls2/o -----END CERTIFICATE-----Generated at Sat Dec 6 22:25:32 2025 by rpki-client