This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft File: GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft (raw, json) Hash identifier: hKVamc3R1ZKDGPbTbgn7K7PJUzRDkNumUZbjoMyYmsE= Subject key identifier: 24:3E:21:6D:0A:20:39:BB:19:5B:7A:50:0C:10:C3:02:83:EE:72:78 Authority key identifier: 18:99:AA:64:15:67:05:33:22:49:38:FA:A6:65:52:96:18:3E:43:8F Certificate issuer: /CN=A9126BDE/serialNumber=1899AA6415670533224938FAA6655296183E438F Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft Manifest number: 09 Signing time: Fri 19 Dec 2025 06:59:50 +0000 Manifest this update: Fri 19 Dec 2025 06:59:49 +0000 Manifest next update: Fri 26 Dec 2025 06:59:49 +0000 Files and hashes: 1: GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl (hash: ewNCokSdKOGA0x0YL1dHJ/9NsYdCmideW1McI9zE8rQ=) 2: 5325F364D3FF11F09B7E5281C4F9AE02.roa (hash: +t//dZjkzkXJDvAy52svSHXrfp5hfXdLES5wulpQ2FA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126BDE, serialNumber=1899AA6415670533224938FAA6655296183E438F Validity Not Before: Dec 19 06:59:49 2025 GMT Not After : Dec 26 06:59:49 2025 GMT Subject: CN=6944f7e6-7bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4e:14:c4:8e:6d:61:2b:8e:64:3b:33:69:59: a8:e5:46:5d:fa:de:56:80:dd:2d:eb:da:b9:45:3e: bf:f1:50:2d:83:9d:ca:f1:4f:36:09:0a:ed:5a:77: c6:f5:fc:c8:83:1f:e0:0a:5e:68:1d:b7:30:0c:9a: 7f:b7:7c:ce:0a:03:19:00:0e:6f:c9:9c:69:37:c9: 5f:20:ff:c1:ec:da:e9:e2:f4:2b:08:8c:d0:73:7f: 51:2e:ef:4f:f4:8c:b5:c5:72:51:54:4f:96:87:22: c5:9a:48:75:49:8b:8c:52:6c:b9:d2:92:da:1b:34: 53:93:bd:86:85:9c:94:db:48:55:d5:62:a3:10:6b: fa:a4:ad:85:59:2a:d3:89:bf:f4:d5:af:aa:df:03: b8:e6:92:29:03:80:15:ba:fa:0f:db:44:eb:e9:7f: 77:f7:b6:0d:2b:94:f2:52:91:34:22:eb:fb:98:ec: 19:ac:ec:33:2f:37:96:a0:78:76:94:dd:4b:6f:91: 08:46:24:5c:7a:d9:cc:66:44:0b:66:fd:30:77:8a: 84:6f:91:62:6c:f4:77:b4:82:fa:f3:b2:8a:11:b9: a9:33:eb:21:d7:72:09:86:86:a7:73:70:44:c3:07: e2:c3:dd:ea:44:55:7f:8f:ee:30:c1:f0:bf:43:24: 2e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3E:21:6D:0A:20:39:BB:19:5B:7A:50:0C:10:C3:02:83:EE:72:78 X509v3 Authority Key Identifier: keyid:18:99:AA:64:15:67:05:33:22:49:38:FA:A6:65:52:96:18:3E:43:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:7d:03:58:90:b6:a5:b3:02:96:8f:18:d3:f3:cb:9b:2e:0c: e0:55:26:bf:a4:fe:a4:85:ee:9b:f1:c8:e6:56:4b:1d:a8:26: 26:69:ab:ca:a9:be:96:6d:66:b6:60:6b:62:f5:3e:62:41:dd: 43:1a:87:72:59:eb:7f:e4:b0:cd:99:b6:37:65:87:70:3f:01: a9:f6:af:6d:76:b7:b6:56:48:05:3a:f1:31:bb:98:bf:c0:df: e3:40:28:33:91:3b:1e:85:b7:8c:d6:7c:0a:9b:c1:4d:e8:c1: a5:f7:ec:d3:37:f1:32:1c:0e:96:44:a4:a8:45:bd:45:f9:3d: 9f:48:22:76:fa:1e:89:c5:d0:0a:d0:1f:ad:b7:c9:08:4f:ee: 87:7a:87:87:98:91:4e:77:f2:a4:d3:1d:79:65:e0:f9:47:d5: 1a:8e:42:25:89:cd:12:83:fe:f0:76:3a:4c:03:57:10:9a:21: 5f:1b:d6:fa:0b:9a:e3:2c:f1:f6:cd:c8:97:09:21:c9:94:93: 92:70:1d:a7:0a:d7:48:29:c1:83:2b:b3:c7:f0:05:58:a5:17: 96:82:92:89:e5:93:8f:9b:a1:22:3e:ba:e5:80:24:47:70:51: 88:64:63:c1:72:7e:ce:a0:05:f0:eb:58:af:f5:87:26:c0:2b: 27:c7:ae:ef -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NkJERTExMC8GA1UEBRMoMTg5OUFBNjQxNTY3MDUzMzIyNDkzOEZBQTY2NTUyOTYx ODNFNDM4RjAeFw0yNTEyMTkwNjU5NDlaFw0yNTEyMjYwNjU5NDlaMBgxFjAUBgNV BAMMDTY5NDRmN2U2LTdiZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtThTEjm1hK45kOzNpWajlRl363laA3S3r2rlFPr/xUC2DncrxTzYJCu1ad8b1 /MiDH+AKXmgdtzAMmn+3fM4KAxkADm/JnGk3yV8g/8Hs2uni9CsIjNBzf1Eu70/0 jLXFclFUT5aHIsWaSHVJi4xSbLnSktobNFOTvYaFnJTbSFXVYqMQa/qkrYVZKtOJ v/TVr6rfA7jmkikDgBW6+g/bROvpf3f3tg0rlPJSkTQi6/uY7Bms7DMvN5ageHaU 3UtvkQhGJFx62cxmRAtm/TB3ioRvkWJs9He0gvrzsooRuakz6yHXcgmGhqdzcETD B+LD3epEVX+P7jDB8L9DJC7LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJD4hbQog ObsZW3pQDBDDAoPucngwHwYDVR0jBBgwFoAUGJmqZBVnBTMiSTj6pmVSlhg+Q48w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2QkRFLzM5QkMwNDk4RDNG QzExRjBBNzBENjQzMkM0RjlBRTAyL0dKbXFaQlZuQlRNaVNUajZwbVZTbGhnLVE0 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR0ptcVpCVm5CVE1pU1RqNnBtVlNsaGctUTQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2 QkRFLzM5QkMwNDk4RDNGQzExRjBBNzBENjQzMkM0RjlBRTAyL0dKbXFaQlZuQlRN aVNUajZwbVZTbGhnLVE0OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADN9A1iQtqWzApaPGNPzy5suDOBVJr+k/qSF7pvxyOZWSx2oJiZpq8qp vpZtZrZga2L1PmJB3UMah3JZ63/ksM2Ztjdlh3A/Aan2r212t7ZWSAU68TG7mL/A 3+NAKDOROx6Ft4zWfAqbwU3owaX37NM38TIcDpZEpKhFvUX5PZ9IInb6HonF0ArQ H623yQhP7od6h4eYkU538qTTHXll4PlH1RqOQiWJzRKD/vB2OkwDVxCaIV8b1voL muMs8fbNyJcJIcmUk5JwHacK10gpwYMrs8fwBVilF5aCkonlk4+boSI+uuWAJEdw UYhkY8Fyfs6gBfDrWK/1hybAKyfHru8= -----END CERTIFICATE-----Generated at Sat Dec 20 00:06:45 2025 by rpki-client