This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft File: gBcCvJze9z33Ob-31L0ve4iF4Hc.mft (raw, json) Hash identifier: hIdRjYlaCDQaILokFvoS8Y+IAVFNtyrTDDpgbyJIHQ0= Subject key identifier: 67:F5:93:6D:3F:F8:05:17:B5:5D:3B:5C:EA:7C:6D:6F:D9:FC:2E:90 Authority key identifier: 80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77 Certificate issuer: /CN=A9124731/serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077 Certificate serial: 04B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft Manifest number: 04A9 Signing time: Sat 20 Dec 2025 23:14:54 +0000 Manifest this update: Sat 20 Dec 2025 23:14:54 +0000 Manifest next update: Sat 27 Dec 2025 23:14:54 +0000 Files and hashes: 1: gBcCvJze9z33Ob-31L0ve4iF4Hc.crl (hash: bbOkVdc6uBEKFn0irvJ8qzGHbrayBos5c3hqCu1KoN0=) 2: 271F3E9CFFE011EDA35F8946C4F9AE02.roa (hash: fDZa3ruyI4VluhDMo0toVdiGueuR7vLetk94+XTO6ag=) 3: 86BADBF8013511EE81A9F21FC4F9AE02.roa (hash: q2J6Vm5zrUF4ahQrDqnBO1G7RZdDw9Ce2kW75/uOQB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1208 (0x4b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124731, serialNumber=801702BC9CDEF73DF739BFB7D4BD2F7B8885E077 Validity Not Before: Dec 20 23:14:54 2025 GMT Not After : Dec 27 23:14:54 2025 GMT Subject: CN=69472dee-3d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:07:8b:75:fe:30:c4:c5:89:d3:79:c4:47:1f: ce:0f:1f:05:dc:4c:4a:b0:3c:96:ce:27:48:c5:9e: 31:db:2e:ec:dc:ec:8e:3d:66:36:4d:13:44:2d:ca: 25:08:10:d7:a2:60:cc:b3:8c:23:b0:5e:d8:d0:81: ea:8d:f0:b9:fb:1c:ad:d2:94:43:9a:43:b4:e3:7a: be:18:9a:2b:f5:e8:46:ca:43:f8:26:d5:5d:4c:09: 75:5e:2b:39:d9:3f:84:6a:c1:15:21:53:4c:8b:2f: c9:e8:74:b8:b9:f5:da:1d:dc:0b:fd:9c:67:98:bd: 8e:8e:5a:70:d3:f3:d0:87:d0:28:cf:50:5d:87:96: 76:ca:62:80:fd:aa:c7:3a:ec:c5:4e:d6:98:63:75: c5:c5:71:53:a9:77:4c:e0:2b:b6:96:4b:76:67:f9: cf:a3:39:60:35:df:a5:83:b9:61:4d:6d:e7:e1:8f: 26:c3:df:0a:50:87:a6:a0:02:85:f7:63:4a:4c:68: ba:b8:3b:93:dd:51:ce:50:a9:80:3e:5e:d2:d9:ab: 3f:84:ae:93:b0:10:e6:01:fa:e7:6c:f2:1f:f4:9c: 8e:65:23:69:98:18:64:ac:1c:2a:4c:c1:47:61:e8: 1d:eb:e9:f0:ca:d5:e2:70:72:d2:04:c0:d6:62:8e: 65:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F5:93:6D:3F:F8:05:17:B5:5D:3B:5C:EA:7C:6D:6F:D9:FC:2E:90 X509v3 Authority Key Identifier: keyid:80:17:02:BC:9C:DE:F7:3D:F7:39:BF:B7:D4:BD:2F:7B:88:85:E0:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gBcCvJze9z33Ob-31L0ve4iF4Hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124731/B6B014B25D6D11EC8FF6131EC4F9AE02/gBcCvJze9z33Ob-31L0ve4iF4Hc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:06:11:48:67:df:79:21:a8:d4:e9:01:fa:21:db:e2:81:f5: 84:b1:7a:20:47:cd:cb:59:13:09:34:88:bb:ed:f1:19:76:13: 11:d9:ba:97:8b:43:68:a1:25:e5:51:4d:e8:44:6a:15:3d:9e: 44:8d:96:d1:87:c9:76:80:2f:44:77:ab:7f:dd:4a:a0:7b:45: e8:47:08:88:a3:61:0d:a0:82:be:66:6d:ed:37:99:39:66:ca: e0:ae:4d:1d:83:fc:6a:d0:ba:e6:e8:e5:a2:7f:fa:e4:57:bc: e3:16:b4:25:47:37:b1:4b:40:a1:b2:b1:8f:cd:c5:6b:1d:09: ce:c7:c2:6a:20:54:e2:76:2d:0e:6e:7a:66:ce:c1:a6:c2:9d: 8c:d1:e2:47:45:f4:a4:b5:88:18:fc:e3:80:fa:a4:f0:4d:a8: 50:a5:bf:0e:0c:26:77:3a:b5:ce:e4:bd:9c:18:eb:a9:78:37: db:28:a8:dd:1b:79:9d:47:87:72:b5:fd:af:5b:5c:32:69:9b: 19:45:e3:9e:ae:39:a1:d6:b3:d7:4a:6d:e5:f3:9d:93:09:53: 1e:78:76:f7:36:6a:15:a9:08:35:b3:c3:77:ad:c5:a7:6c:b2: 32:0d:e1:f2:18:6b:5f:f0:53:4b:88:f1:8e:77:66:ad:59:2a: fa:a0:af:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ3MzExMTAvBgNVBAUTKDgwMTcwMkJDOUNERUY3M0RGNzM5QkZCN0Q0QkQyRjdC ODg4NUUwNzcwHhcNMjUxMjIwMjMxNDU0WhcNMjUxMjI3MjMxNDU0WjAYMRYwFAYD VQQDDA02OTQ3MmRlZS0zZDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAeLdf4wxMWJ03nERx/ODx8F3ExKsDyWzidIxZ4x2y7s3OyOPWY2TRNELcol CBDXomDMs4wjsF7Y0IHqjfC5+xyt0pRDmkO043q+GJor9ehGykP4JtVdTAl1Xis5 2T+EasEVIVNMiy/J6HS4ufXaHdwL/ZxnmL2Ojlpw0/PQh9Aoz1Bdh5Z2ymKA/arH OuzFTtaYY3XFxXFTqXdM4Cu2lkt2Z/nPozlgNd+lg7lhTW3n4Y8mw98KUIemoAKF 92NKTGi6uDuT3VHOUKmAPl7S2as/hK6TsBDmAfrnbPIf9JyOZSNpmBhkrBwqTMFH Yegd6+nwytXicHLSBMDWYo5l1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGf1k20/ +AUXtV07XOp8bW/Z/C6QMB8GA1UdIwQYMBaAFIAXAryc3vc99zm/t9S9L3uIheB3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDczMS9CNkIwMTRCMjVE NkQxMUVDOEZGNjEzMUVDNEY5QUUwMi9nQmNDdkp6ZTl6MzNPYi0zMUwwdmU0aUY0 SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dCY0N2SnplOXozM09iLTMxTDB2ZTRpRjRIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDczMS9CNkIwMTRCMjVENkQxMUVDOEZGNjEzMUVDNEY5QUUwMi9nQmNDdkp6ZTl6 MzNPYi0zMUwwdmU0aUY0SGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOBhFIZ995IajU6QH6IdvigfWEsXogR83LWRMJNIi77fEZdhMR2bqX i0NooSXlUU3oRGoVPZ5EjZbRh8l2gC9Ed6t/3Uqge0XoRwiIo2ENoIK+Zm3tN5k5 Zsrgrk0dg/xq0Lrm6OWif/rkV7zjFrQlRzexS0ChsrGPzcVrHQnOx8JqIFTidi0O bnpmzsGmwp2M0eJHRfSktYgY/OOA+qTwTahQpb8ODCZ3OrXO5L2cGOupeDfbKKjd G3mdR4dytf2vW1wyaZsZReOerjmh1rPXSm3l852TCVMeeHb3NmoVqQg1s8N3rcWn bLIyDeHyGGtf8FNLiPGOd2atWSr6oK9v -----END CERTIFICATE-----Generated at Sun Dec 21 20:57:14 2025 by rpki-client