This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft File: GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft (raw, json) Hash identifier: AkWh6vCDpCvoaoxn9g/E4oyd22p3jYMEW52v2LYClBM= Subject key identifier: 08:6E:7D:7E:78:4D:17:81:49:66:01:2B:C1:42:3B:3B:74:EF:43:92 Authority key identifier: 19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7 Certificate issuer: /CN=A916C2B9/serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7 Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft Manifest number: 0160 Signing time: Fri 19 Dec 2025 03:13:56 +0000 Manifest this update: Fri 19 Dec 2025 03:13:56 +0000 Manifest next update: Fri 26 Dec 2025 03:13:56 +0000 Files and hashes: 1: GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl (hash: KXqVDA1GlrYzEcHOOUCsKqrdjCBqnAqTxUsVRz8mbWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C2B9, serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7 Validity Not Before: Dec 19 03:13:56 2025 GMT Not After : Dec 26 03:13:56 2025 GMT Subject: CN=6944c2f4-2a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fe:2d:3d:c6:13:d4:1d:ba:8c:bf:a6:ae:6e: 6d:29:d5:86:a7:9a:7b:fa:b5:3c:8f:6d:1e:25:08: cd:35:e9:b4:33:2c:1d:55:f1:f8:d8:1d:9e:f8:88: a6:bb:8e:7c:9c:b9:3f:39:20:00:6c:2a:6c:a0:7d: f2:ca:a8:50:ed:7b:05:21:98:d6:00:d2:3d:66:ad: b5:8a:9b:a8:9d:f3:50:b4:1d:bd:b1:98:6c:b0:c4: d0:5c:14:9e:2d:b0:9c:fd:e4:ee:bc:d0:e8:f7:63: 7a:ca:b6:83:97:00:6d:8d:d6:aa:52:a1:74:ae:22: 41:09:c2:3d:5b:c6:b9:fd:d8:cc:67:0a:5a:6e:90: 2f:c9:e8:ea:bb:f4:0a:7a:cd:46:32:69:77:a4:b5: c9:2b:52:63:ab:42:33:dd:72:c4:ae:43:05:3d:24: 28:39:2a:c3:81:e7:51:86:d6:66:dd:39:19:7b:ca: 0b:66:89:7c:b3:62:2b:78:35:10:bb:7b:82:ed:a4: 07:88:0b:ef:e3:64:c2:8f:a6:69:82:35:62:11:a2: a5:a0:f2:8f:d8:3c:df:16:f1:73:2c:1d:81:5a:5a: ee:c7:67:24:73:a8:11:10:6e:4c:39:f7:01:54:58: 82:f1:b5:57:e0:d5:e2:b1:b8:23:81:85:a6:40:e7: 67:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:6E:7D:7E:78:4D:17:81:49:66:01:2B:C1:42:3B:3B:74:EF:43:92 X509v3 Authority Key Identifier: keyid:19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:77:77:e2:35:f5:8a:80:b7:ab:71:85:0b:78:78:47:b1:4e: 54:03:41:b2:e2:6d:dc:ba:0b:66:c3:db:b5:49:96:40:54:76: 2f:d6:be:9c:0a:ef:51:b3:9b:ec:dc:12:d0:e4:0e:2e:25:a8: 57:29:fd:ef:4c:98:f1:38:d3:83:d0:c5:38:b7:f4:19:86:73: 97:ad:d8:e9:f4:fe:cb:3c:fc:67:a5:88:fb:bd:8f:4c:cc:56: 2d:13:0d:cf:b2:2d:2f:b7:92:d0:6e:9a:7b:c2:5e:19:27:bd: b4:e7:01:92:0b:57:95:4b:97:f3:dd:94:26:1b:c6:e3:42:06: af:d6:7b:65:2c:e1:b3:a2:0a:b1:b2:39:fc:07:ad:28:2d:c3: 80:3e:3d:77:54:b4:07:a0:a7:54:50:dc:f5:f5:4b:2f:cc:f1: 7d:98:ff:ea:63:d0:2e:25:fc:4d:aa:89:71:15:a6:49:f4:f8: c4:c0:6f:ec:e6:5d:6f:f5:70:a7:d4:9b:47:f3:de:14:d4:e4: 02:ca:75:33:48:0b:4f:21:ac:0b:26:fe:91:f7:95:fa:03:30: b0:6d:c2:f7:0f:af:23:cf:7d:2a:10:03:c7:01:70:0d:5c:58: e4:2c:18:19:be:e1:f0:a4:e4:f4:c7:f9:1e:79:5a:95:6d:f7: 47:43:00:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMyQjkxMTAvBgNVBAUTKDE5QkI1NTMwNjJGOTM2M0Q2MERBNkI5NDY4MUYxQUQ2 MDQ4M0Q1QjcwHhcNMjUxMjE5MDMxMzU2WhcNMjUxMjI2MDMxMzU2WjAYMRYwFAYD VQQDDA02OTQ0YzJmNC0yYTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyf4tPcYT1B26jL+mrm5tKdWGp5p7+rU8j20eJQjNNem0MywdVfH42B2e+Iim u458nLk/OSAAbCpsoH3yyqhQ7XsFIZjWANI9Zq21ipuonfNQtB29sZhssMTQXBSe LbCc/eTuvNDo92N6yraDlwBtjdaqUqF0riJBCcI9W8a5/djMZwpabpAvyejqu/QK es1GMml3pLXJK1Jjq0Iz3XLErkMFPSQoOSrDgedRhtZm3TkZe8oLZol8s2IreDUQ u3uC7aQHiAvv42TCj6ZpgjViEaKloPKP2DzfFvFzLB2BWlrux2ckc6gREG5MOfcB VFiC8bVX4NXisbgjgYWmQOdnuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhufX54 TReBSWYBK8FCOzt070OSMB8GA1UdIwQYMBaAFBm7VTBi+TY9YNprlGgfGtYEg9W3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzJCOS8zOThFOEEyNkMy QTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9HYnRWTUdMNU5qMWcybXVVYUI4YTFnU0Qx YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0didFZNR0w1TmoxZzJtdVVhQjhhMWdTRDFiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzJCOS8zOThFOEEyNkMyQTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9HYnRWTUdMNU5q MWcybXVVYUI4YTFnU0QxYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbd3fiNfWKgLercYULeHhHsU5UA0Gy4m3cugtmw9u1SZZAVHYv1r6c Cu9Rs5vs3BLQ5A4uJahXKf3vTJjxONOD0MU4t/QZhnOXrdjp9P7LPPxnpYj7vY9M zFYtEw3Psi0vt5LQbpp7wl4ZJ7205wGSC1eVS5fz3ZQmG8bjQgav1ntlLOGzogqx sjn8B60oLcOAPj13VLQHoKdUUNz19UsvzPF9mP/qY9AuJfxNqolxFaZJ9PjEwG/s 5l1v9XCn1JtH894U1OQCynUzSAtPIawLJv6R95X6AzCwbcL3D68jz30qEAPHAXAN XFjkLBgZvuHwpOT0x/keeVqVbfdHQwAX -----END CERTIFICATE-----Generated at Fri Dec 19 18:46:57 2025 by rpki-client