This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft File: GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft (raw, json) Hash identifier: EVpU55lgQrAasH1TBAx6z3KmzMdky5NiGv50m3zku+o= Subject key identifier: EE:FB:8C:24:25:D9:B1:51:1E:ED:9D:78:28:41:52:89:5A:4D:24:97 Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84 Certificate issuer: /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84 Certificate serial: 02FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft Manifest number: 02E8 Signing time: Fri 19 Dec 2025 00:35:03 +0000 Manifest this update: Fri 19 Dec 2025 00:35:03 +0000 Manifest next update: Fri 26 Dec 2025 00:35:03 +0000 Files and hashes: 1: GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl (hash: OVlGU8iYT+kCIMyt+jTyr7CxS04f24gl13w2nAz/B04=) 2: CF0D85CEFE5211EFA5AB8F82C4F9AE02.roa (hash: gpdjBjddXDySP7XwpO7PUD9YoIqfcH1r8H5PmyuUxoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 762 (0x2fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187F7E, serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84 Validity Not Before: Dec 19 00:35:03 2025 GMT Not After : Dec 26 00:35:03 2025 GMT Subject: CN=69449db7-9984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:51:cc:0b:da:5e:79:c1:9b:cd:7c:8c:41:42: 5d:a0:46:45:f6:22:d8:ef:1c:06:df:d3:4c:55:bc: 0a:6e:fe:2d:23:fb:eb:94:60:80:99:5c:ca:b1:bb: 04:59:c6:d6:46:6c:89:b8:01:e6:6c:2b:6e:82:fd: a3:32:60:a5:69:72:47:0f:e5:ae:c3:a5:9b:b4:85: 9c:8b:75:1d:9d:54:46:ac:65:24:ba:f7:61:f7:1f: 95:83:e5:18:b0:2c:cc:ae:e9:bb:f8:bd:fc:e3:f1: 1c:ec:8e:9c:db:28:ce:f4:a6:0c:c2:6e:39:cf:6e: 89:c6:e9:1d:66:fe:b1:34:d9:47:06:dc:61:59:41: c5:a9:cd:22:02:14:f0:62:2d:9e:d5:23:6c:a5:34: 09:a1:93:fb:e8:35:f9:c1:6c:93:5d:4c:9f:1c:f4: 4a:23:21:f2:27:20:81:86:53:2c:b3:97:a2:b1:8b: 7b:54:c1:04:c3:42:7a:57:d3:ce:22:a3:ff:55:e9: f7:95:1f:b0:c4:51:e2:ce:d1:1b:9e:08:bf:40:19: 71:21:7b:14:2c:9e:00:c2:70:70:38:74:15:31:6b: 15:05:3e:43:51:35:25:fd:b5:0e:a7:b8:14:d4:bf: 3b:0e:ac:21:5e:23:c6:38:0d:f7:f3:4b:b8:61:d7: 6c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FB:8C:24:25:D9:B1:51:1E:ED:9D:78:28:41:52:89:5A:4D:24:97 X509v3 Authority Key Identifier: keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:3f:09:8f:11:6b:9b:d6:da:91:35:7a:c1:5c:be:f5:bc:74: ab:8f:f9:3a:71:2c:35:43:56:0b:ff:ec:86:60:d0:54:a3:94: 91:69:35:ea:0e:54:b0:aa:16:2c:cc:b5:96:32:98:b3:5e:e7: f7:1b:82:92:95:65:ca:1d:b8:33:70:72:8d:7a:64:d1:03:9c: 5a:90:e3:f9:a3:af:2c:cf:18:a5:68:f8:81:0f:25:fa:9b:40: c2:9b:46:fb:93:fc:e0:19:10:e9:8e:40:6e:99:a8:f5:3b:9c: 3b:3e:1c:4a:c0:09:e3:22:17:67:a4:91:77:b2:4b:8c:be:f5: e8:41:b1:c3:01:af:b7:4e:63:96:19:0c:62:8d:4d:c2:5e:fd: d7:c6:7a:13:e2:f0:ca:1a:0c:60:bb:5c:6a:31:61:c2:5a:b3: 2e:1a:1b:e1:ec:4f:1f:42:8b:9d:99:ec:34:f5:aa:5d:b1:fd: 56:89:b0:02:97:7a:d4:a9:b9:29:f7:56:66:54:8e:ef:94:56: 53:86:30:34:1c:63:bc:a7:54:e7:19:7c:78:29:f0:e7:45:6f: 3b:de:2a:3c:dc:79:e7:07:17:71:50:6a:72:88:8d:28:00:ee: df:c7:40:9b:ec:0f:15:cf:23:1a:8c:14:fc:47:92:c2:91:f9: 66:4f:ef:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdGN0UxMTAvBgNVBAUTKDFBNjgyOTQxRjg3ODlDNENFQTNDQzMzQjYzNzNFNDk0 NzYzMEJDODQwHhcNMjUxMjE5MDAzNTAzWhcNMjUxMjI2MDAzNTAzWjAYMRYwFAYD VQQDDA02OTQ0OWRiNy05OTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmVHMC9peecGbzXyMQUJdoEZF9iLY7xwG39NMVbwKbv4tI/vrlGCAmVzKsbsE WcbWRmyJuAHmbCtugv2jMmClaXJHD+Wuw6WbtIWci3UdnVRGrGUkuvdh9x+Vg+UY sCzMrum7+L384/Ec7I6c2yjO9KYMwm45z26JxukdZv6xNNlHBtxhWUHFqc0iAhTw Yi2e1SNspTQJoZP76DX5wWyTXUyfHPRKIyHyJyCBhlMss5eisYt7VMEEw0J6V9PO IqP/Ven3lR+wxFHiztEbngi/QBlxIXsULJ4AwnBwOHQVMWsVBT5DUTUl/bUOp7gU 1L87DqwhXiPGOA3380u4Ydds0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO77jCQl 2bFRHu2deChBUolaTSSXMB8GA1UdIwQYMBaAFBpoKUH4eJxM6jzDO2Nz5JR2MLyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0Y3RS9DNzYzQjVFMDEw RTkxMUVEODVDQ0VBMzdDNEY5QUUwMi9HbWdwUWZoNG5FenFQTU03WTNQa2xIWXd2 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dtZ3BRZmg0bkV6cVBNTTdZM1BrbEhZd3ZJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0Y3RS9DNzYzQjVFMDEwRTkxMUVEODVDQ0VBMzdDNEY5QUUwMi9HbWdwUWZoNG5F enFQTU03WTNQa2xIWXd2SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPPwmPEWub1tqRNXrBXL71vHSrj/k6cSw1Q1YL/+yGYNBUo5SRaTXq DlSwqhYszLWWMpizXuf3G4KSlWXKHbgzcHKNemTRA5xakOP5o68szxilaPiBDyX6 m0DCm0b7k/zgGRDpjkBumaj1O5w7PhxKwAnjIhdnpJF3skuMvvXoQbHDAa+3TmOW GQxijU3CXv3XxnoT4vDKGgxgu1xqMWHCWrMuGhvh7E8fQoudmew09apdsf1WibAC l3rUqbkp91ZmVI7vlFZThjA0HGO8p1TnGXx4KfDnRW873io83HnnBxdxUGpyiI0o AO7fx0Cb7A8VzyMajBT8R5LCkflmT++d -----END CERTIFICATE-----Generated at Fri Dec 19 17:43:48 2025 by rpki-client