This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json) Hash identifier: Tcf8XBGR4cXAd2WBUn2yU9+HTSAteqGxuycR89jeqjU= Subject key identifier: CC:65:B5:F3:DB:56:3E:E3:CC:DB:54:6F:7E:09:F9:39:FA:E9:87:87 Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Certificate serial: 09E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft Manifest number: 09D1 Signing time: Thu 18 Dec 2025 19:31:03 +0000 Manifest this update: Thu 18 Dec 2025 19:31:02 +0000 Manifest next update: Thu 25 Dec 2025 19:31:02 +0000 Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: RKcniG+lIRdxayPgLPeieS7f0MC5ZoAEJA8SGBoYYx0=) 2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: F610C7Ym+IbTxaB7/QFjiGQSnmA/MEfTbDdc0n6x2y4=) 3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: AS8hUi479g1JOMhqd/DGudZL1BV4/ri0MrfNsHx+xyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2529 (0x9e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Validity Not Before: Dec 18 19:31:02 2025 GMT Not After : Dec 25 19:31:02 2025 GMT Subject: CN=69445677-c21d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:16:59:b4:46:f3:2b:cc:7f:b1:e7:93:cf:65: d0:7e:91:db:90:a5:f8:7b:fc:2b:2d:1f:4e:92:fb: 6b:c5:d5:ba:f2:33:d3:69:b8:ef:38:69:37:65:80: 4e:cd:ae:21:2d:d5:d4:5a:a7:d6:c3:1a:e0:85:b9: a7:da:bd:e7:d2:61:e4:af:7b:9a:cd:f4:89:05:f7: 21:74:d7:ac:55:02:19:21:b6:68:b8:8e:bc:cc:cf: 74:83:76:53:31:80:1d:1e:ed:df:9a:2c:08:4f:17: f2:51:fe:03:d0:f3:ff:06:68:6e:9e:84:6b:6e:33: dd:c7:ad:98:13:d7:16:20:2b:ef:aa:4c:47:91:20: fd:2c:cc:27:d9:fa:a4:ac:9b:c4:33:99:80:69:bf: 6f:f9:8d:26:84:ad:2b:ed:24:7b:0b:31:ef:e9:bb: 3c:8f:03:da:1c:bd:4b:ec:33:f6:33:68:81:d7:b6: a5:f6:0d:d8:c4:30:b3:e8:d2:41:92:96:54:21:36: 61:43:16:2a:49:bc:6a:9a:06:db:ac:6e:96:16:62: c7:20:2f:ed:05:de:03:d1:13:dc:a5:41:a9:25:50: e6:16:b0:2b:25:6a:21:d5:e8:27:ec:9f:c8:84:20: 13:48:a2:06:9a:2f:4f:8c:ae:fe:f7:0e:85:2e:22: 00:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:65:B5:F3:DB:56:3E:E3:CC:DB:54:6F:7E:09:F9:39:FA:E9:87:87 X509v3 Authority Key Identifier: keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:35:41:92:b9:db:81:b7:94:bb:30:a3:9d:56:88:37:93:54: 90:17:e1:ad:22:3e:35:c5:d3:b2:77:46:5a:9e:a8:1a:d2:2e: bb:3e:3a:f8:72:a1:7c:06:aa:fc:05:a1:f5:1e:ee:e9:f2:63: a8:6c:ac:9b:c3:ac:73:ac:4d:9a:99:ee:fb:44:df:c9:7e:7b: dc:08:62:2a:ca:61:71:8e:6c:79:54:1a:80:d9:75:e4:9a:b7: dd:12:f6:84:96:c0:5a:8c:e3:3f:97:fd:14:93:44:19:d1:4d: d5:b4:b6:0c:41:5e:e3:12:7e:81:4d:40:cb:2f:95:af:57:cc: eb:bf:09:29:ff:09:89:0b:cb:8b:91:19:e2:77:4f:8a:0b:74: 49:77:54:26:da:d5:3f:27:31:54:c9:24:f8:84:ca:04:66:69: d4:61:a8:a7:8f:1f:43:94:df:4b:a9:a6:c1:f8:b7:17:df:c4: fa:4d:6d:c4:77:d6:4c:56:9d:4e:b4:3e:21:93:fe:25:15:dd: 81:7d:f3:ac:41:7d:be:f3:ac:70:18:5a:58:df:97:07:5b:ca: d8:ce:de:f7:62:9b:51:cb:3e:4c:a7:d2:4d:0c:cc:c7:57:63: cc:d4:88:57:68:fa:1c:4c:a4:46:1d:c9:5c:44:5c:8b:4a:8e: a9:a0:be:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQUMxMTAvBgNVBAUTKDE4RDVDRkM4QUFGNTE3QjA3NkQxRkM5QzJFNjVGNjkx NDM1RDNBNUYwHhcNMjUxMjE4MTkzMTAyWhcNMjUxMjI1MTkzMTAyWjAYMRYwFAYD VQQDDA02OTQ0NTY3Ny1jMjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRZZtEbzK8x/seeTz2XQfpHbkKX4e/wrLR9OkvtrxdW68jPTabjvOGk3ZYBO za4hLdXUWqfWwxrghbmn2r3n0mHkr3uazfSJBfchdNesVQIZIbZouI68zM90g3ZT MYAdHu3fmiwITxfyUf4D0PP/BmhunoRrbjPdx62YE9cWICvvqkxHkSD9LMwn2fqk rJvEM5mAab9v+Y0mhK0r7SR7CzHv6bs8jwPaHL1L7DP2M2iB17al9g3YxDCz6NJB kpZUITZhQxYqSbxqmgbbrG6WFmLHIC/tBd4D0RPcpUGpJVDmFrArJWoh1egn7J/I hCATSKIGmi9PjK7+9w6FLiIAowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxltfPb Vj7jzNtUb34J+Tn66YeHMB8GA1UdIwQYMBaAFBjVz8iq9RewdtH8nC5l9pFDXTpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBQy82RUEzOUMwNjk0 MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3QjIwZnljTG1YMmtVTmRP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOWFB5S3IxRjdCMjBmeWNMbVgya1VOZE9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBQy82RUEzOUMwNjk0MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3 QjIwZnljTG1YMmtVTmRPbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXNUGSuduBt5S7MKOdVog3k1SQF+GtIj41xdOyd0Zanqga0i67Pjr4 cqF8Bqr8BaH1Hu7p8mOobKybw6xzrE2ame77RN/JfnvcCGIqymFxjmx5VBqA2XXk mrfdEvaElsBajOM/l/0Uk0QZ0U3VtLYMQV7jEn6BTUDLL5WvV8zrvwkp/wmJC8uL kRnid0+KC3RJd1Qm2tU/JzFUyST4hMoEZmnUYainjx9DlN9LqabB+LcX38T6TW3E d9ZMVp1OtD4hk/4lFd2BffOsQX2+86xwGFpY35cHW8rYzt73YptRyz5Mp9JNDMzH V2PM1IhXaPocTKRGHclcRFyLSo6poL4z -----END CERTIFICATE-----Generated at Fri Dec 19 23:56:34 2025 by rpki-client