This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft File: GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft (raw, json) Hash identifier: 1wEZsIRor0oSJfl5l3s+53Er8CsVwFKuP10FZy5efFA= Subject key identifier: DE:D9:4C:3E:EE:8E:B3:2A:41:DB:91:7B:B0:59:7B:7B:BA:62:3C:0E Authority key identifier: 19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26 Certificate issuer: /CN=A9120656/serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft Manifest number: 1F Signing time: Fri 05 Dec 2025 05:40:42 +0000 Manifest this update: Fri 05 Dec 2025 05:40:42 +0000 Manifest next update: Fri 12 Dec 2025 05:40:42 +0000 Files and hashes: 1: GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl (hash: smgzG3R7WuLPBVDUbOYZDR8jzdYYd6FDGJhOYq+i3dc=) 2: CD4FE5A2B2F611F08EC41B1EC4F9AE02.roa (hash: k70gEb/vQZKVsEmAPsgRGzBkI7JP9upXlyJ2H32aUps=) 3: 6D5A36FCB2FB11F0861C2754C4F9AE02.roa (hash: OEUGMrYO6pAbSO+UePFCHSKCBYTSreP7y03ptjqbGzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120656, serialNumber=19E05AFD1E6B36254A5CB1503639384B6A22A826 Validity Not Before: Dec 5 05:40:42 2025 GMT Not After : Dec 12 05:40:42 2025 GMT Subject: CN=6932705a-fa35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:29:17:18:94:b6:55:c0:bc:c4:b1:a2:63:9f: f1:e4:94:45:18:c3:fb:bf:86:79:31:0f:5f:32:1e: ec:cb:6d:3d:15:5c:cf:3c:26:3f:2f:06:f3:9d:34: 4d:a4:52:a6:b5:dd:68:a0:d2:a4:55:e8:3d:8b:1d: f7:06:b2:bd:d9:26:b6:91:4c:33:d2:34:3a:c6:d0: 5c:1d:8a:df:d0:8d:05:a3:07:10:db:78:1f:e5:97: 5b:b2:da:c8:39:95:9b:c4:27:b4:02:69:ca:6f:4c: ad:cc:63:04:49:99:9f:4a:c5:24:65:9c:89:40:99: 25:47:cb:78:23:3e:af:bc:12:f8:08:be:b8:e3:0b: 7a:75:ee:ce:0c:6e:31:d5:51:e8:50:8f:3f:ce:b8: ee:37:10:a9:c8:bd:8e:c1:f8:e0:26:d8:ce:b9:0b: 7a:e0:03:98:b1:e5:95:f3:5b:e9:18:e0:db:51:ea: 94:fb:c3:74:87:de:2d:40:d3:1f:64:71:45:77:37: b4:9f:b5:f0:9a:67:4e:a6:da:05:13:fa:7e:8e:08: 3f:82:92:f5:8c:77:c4:85:8b:fe:d8:7f:32:7d:6d: eb:e3:e5:2b:20:25:91:c5:56:6a:f5:49:23:7b:55: 00:f0:13:70:b3:4a:1f:c8:7a:54:ef:bd:83:8a:40: 27:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D9:4C:3E:EE:8E:B3:2A:41:DB:91:7B:B0:59:7B:7B:BA:62:3C:0E X509v3 Authority Key Identifier: keyid:19:E0:5A:FD:1E:6B:36:25:4A:5C:B1:50:36:39:38:4B:6A:22:A8:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GeBa_R5rNiVKXLFQNjk4S2oiqCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120656/4A709564B00D11F08DE4ED7BC4F9AE02/GeBa_R5rNiVKXLFQNjk4S2oiqCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:95:c9:57:29:1f:2b:6b:36:6f:6b:8d:f1:91:50:f6:8f:66: be:9a:d4:59:05:45:3b:64:c3:f1:9d:e9:69:3a:c1:e9:3c:05: af:cf:bd:8c:d3:be:b2:c4:50:e7:50:22:31:61:10:d8:c1:19: c5:c6:3e:5f:96:f9:c8:4d:c5:4f:ee:e5:71:2d:f5:01:69:bd: 2f:b2:54:75:48:9b:7a:80:6e:74:a1:db:08:68:60:24:2f:d0: 0a:1b:1c:23:06:44:47:6a:3c:b0:e3:6e:ca:c8:f7:d0:ab:3c: 26:fc:51:ae:c9:20:cd:21:0e:68:ff:f6:37:36:04:6f:3f:fb: af:e0:43:a2:d8:8e:54:b7:7b:c1:12:c9:48:57:71:41:a7:81: 5a:b8:1c:71:08:8f:57:3a:82:72:19:80:63:96:b5:36:0e:ef: 9b:9a:c7:7c:d3:fd:b3:69:a5:a3:9b:9c:b3:7c:b3:66:61:28: a8:ff:e2:4d:2c:29:39:92:de:04:da:04:f6:87:4d:b8:91:86: e5:a5:62:8a:30:af:8d:fe:20:a5:2f:ae:28:74:35:75:21:a5: d3:1d:57:8d:b6:8c:73:67:5c:29:f8:6d:5c:cf:3d:16:11:e4: 08:d9:bd:ab:49:08:b1:37:70:5e:bc:27:a6:19:90:04:51:04: 82:18:d1:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MDY1NjExMC8GA1UEBRMoMTlFMDVBRkQxRTZCMzYyNTRBNUNCMTUwMzYzOTM4NEI2 QTIyQTgyNjAeFw0yNTEyMDUwNTQwNDJaFw0yNTEyMTIwNTQwNDJaMBgxFjAUBgNV BAMTDTY5MzI3MDVhLWZhMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGKRcYlLZVwLzEsaJjn/HklEUYw/u/hnkxD18yHuzLbT0VXM88Jj8vBvOdNE2k Uqa13Wig0qRV6D2LHfcGsr3ZJraRTDPSNDrG0Fwdit/QjQWjBxDbeB/ll1uy2sg5 lZvEJ7QCacpvTK3MYwRJmZ9KxSRlnIlAmSVHy3gjPq+8EvgIvrjjC3p17s4MbjHV UehQjz/OuO43EKnIvY7B+OAm2M65C3rgA5ix5ZXzW+kY4NtR6pT7w3SH3i1A0x9k cUV3N7SftfCaZ06m2gUT+n6OCD+CkvWMd8SFi/7YfzJ9bevj5SsgJZHFVmr1SSN7 VQDwE3CzSh/IelTvvYOKQCdLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3tlMPu6O sypB25F7sFl7e7piPA4wHwYDVR0jBBgwFoAUGeBa/R5rNiVKXLFQNjk4S2oiqCYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwNjU2LzRBNzA5NTY0QjAw RDExRjA4REU0RUQ3QkM0RjlBRTAyL0dlQmFfUjVyTmlWS1hMRlFOams0UzJvaXFD WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2VCYV9SNXJOaVZLWExGUU5qazRTMm9pcUNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw NjU2LzRBNzA5NTY0QjAwRDExRjA4REU0RUQ3QkM0RjlBRTAyL0dlQmFfUjVyTmlW S1hMRlFOams0UzJvaXFDWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMGVyVcpHytrNm9rjfGRUPaPZr6a1FkFRTtkw/Gd6Wk6wek8Ba/PvYzT vrLEUOdQIjFhENjBGcXGPl+W+chNxU/u5XEt9QFpvS+yVHVIm3qAbnSh2whoYCQv 0AobHCMGREdqPLDjbsrI99CrPCb8Ua7JIM0hDmj/9jc2BG8/+6/gQ6LYjlS3e8ES yUhXcUGngVq4HHEIj1c6gnIZgGOWtTYO75uax3zT/bNppaObnLN8s2ZhKKj/4k0s KTmS3gTaBPaHTbiRhuWlYoowr43+IKUvrih0NXUhpdMdV422jHNnXCn4bVzPPRYR 5AjZvatJCLE3cF68J6YZkARRBIIY0TY= -----END CERTIFICATE-----Generated at Sat Dec 6 19:18:28 2025 by rpki-client