This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft File: GhajkdMlFwt7hcS_x4VaF300e24.mft (raw, json) Hash identifier: VwE8ZbsWRKar+MhQchoGbEW0xf4QwUWEtDfKUzK180g= Subject key identifier: CB:51:D2:40:AF:BF:C0:7C:FD:49:49:16:DE:06:2D:69:3A:59:97:13 Authority key identifier: 1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E Certificate issuer: /CN=A913B510/serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft Manifest number: 4E Signing time: Fri 05 Dec 2025 05:08:52 +0000 Manifest this update: Fri 05 Dec 2025 05:08:51 +0000 Manifest next update: Fri 12 Dec 2025 05:08:51 +0000 Files and hashes: 1: GhajkdMlFwt7hcS_x4VaF300e24.crl (hash: tpleWHTSZ82HiFaKDkukab0I7LIJPYaMwmODZVorTu0=) 2: 9CAF31CA5D8111F0A04DD550C4F9AE02.roa (hash: 92wZUBl6JW7t9Lz6VY8NqyCC30dn+5kR/99dMirbOek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B510, serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E Validity Not Before: Dec 5 05:08:51 2025 GMT Not After : Dec 12 05:08:51 2025 GMT Subject: CN=693268e4-40fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:96:f5:ce:79:86:ac:38:3a:10:e5:a6:53:86: 94:2b:e0:9a:a1:68:d8:0c:e8:87:2b:7f:ab:05:76: 5b:5c:df:63:ad:73:89:bb:ab:27:be:e2:45:9f:ba: e0:b0:7e:1e:a6:93:32:c2:c2:86:5a:e4:9c:16:6d: 83:49:1e:46:e3:78:1d:3f:38:29:c3:05:60:67:e1: 65:a8:82:bb:af:a6:c7:79:29:e1:eb:db:11:6d:6d: 1d:96:32:dd:27:34:8d:80:27:72:50:77:77:bf:fc: ac:1f:c4:0f:19:48:af:d0:5a:6a:f5:3b:59:97:54: 7f:11:13:53:86:7d:f3:3c:af:ce:84:94:07:0b:63: e0:4b:c8:ff:88:64:f6:14:6b:0e:18:be:4e:76:b3: 59:c7:b2:f4:72:d1:f5:4a:a5:90:ec:e3:a4:ef:f1: b3:ee:97:c2:b1:15:2f:82:a6:6e:f5:e9:64:f5:59: e3:74:cc:1f:56:a5:9f:08:f3:f6:be:97:3a:6c:5f: 0a:da:34:f5:f4:ac:1d:35:b5:85:e6:9c:22:2f:29: e0:ea:cf:4b:21:fe:bd:22:45:0a:2a:61:27:e7:c7: 76:67:92:0a:65:a1:c3:10:86:40:6c:cc:ec:76:96: 25:ac:c6:b1:10:5c:64:15:9f:71:29:90:66:57:35: 7e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:51:D2:40:AF:BF:C0:7C:FD:49:49:16:DE:06:2D:69:3A:59:97:13 X509v3 Authority Key Identifier: keyid:1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:fd:a1:51:62:c6:eb:d4:1d:77:45:a8:a5:6e:71:cb:ed:bb: c1:a2:e1:d3:9e:fd:a9:26:87:a8:e4:df:37:f3:a1:30:92:fa: 49:6a:1b:6d:67:4c:88:55:11:25:c5:db:f0:7e:75:20:df:54: 6c:47:be:8b:94:6c:b2:3b:3f:52:d8:b7:be:44:8f:6f:8d:b0: 2a:bf:df:9b:a7:b7:c5:16:c1:79:13:bf:49:ac:01:00:56:21: a2:82:4f:2c:3e:35:e4:7f:ef:85:c4:f2:d3:ad:8f:47:4d:8b: e4:84:71:19:6c:6d:f2:f7:9c:5b:06:b9:2c:63:98:7d:32:7f: c5:43:c9:5a:1a:9b:8f:c0:c8:de:6c:bf:6a:b0:01:a6:ec:c2: 3d:b2:d6:0f:dd:9d:60:57:f4:7e:17:f8:9d:4e:82:93:05:7c: 38:81:c5:8d:08:29:31:f2:34:dd:f5:c1:d3:ed:8c:14:58:52: 05:cd:d4:32:53:ca:89:4a:88:93:ff:d2:46:64:f9:d9:98:91: d4:d5:fc:94:3e:72:c8:4d:bb:9a:09:eb:56:c1:0a:56:ae:d7: 08:7b:4c:cb:e0:08:01:fb:be:15:6b:b1:f5:3f:7b:e8:83:9a: f1:40:b3:14:1c:43:d5:43:e6:7d:68:63:da:30:22:d4:c6:67: ac:af:9f:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjUxMDExMC8GA1UEBRMoMUExNkEzOTFEMzI1MTcwQjdCODVDNEJGQzc4NTVBMTc3 RDM0N0I2RTAeFw0yNTEyMDUwNTA4NTFaFw0yNTEyMTIwNTA4NTFaMBgxFjAUBgNV BAMTDTY5MzI2OGU0LTQwZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1lvXOeYasODoQ5aZThpQr4JqhaNgM6Icrf6sFdltc32Otc4m7qye+4kWfuuCw fh6mkzLCwoZa5JwWbYNJHkbjeB0/OCnDBWBn4WWogruvpsd5KeHr2xFtbR2WMt0n NI2AJ3JQd3e//KwfxA8ZSK/QWmr1O1mXVH8RE1OGffM8r86ElAcLY+BLyP+IZPYU aw4Yvk52s1nHsvRy0fVKpZDs46Tv8bPul8KxFS+Cpm716WT1WeN0zB9WpZ8I8/a+ lzpsXwraNPX0rB01tYXmnCIvKeDqz0sh/r0iRQoqYSfnx3ZnkgplocMQhkBszOx2 liWsxrEQXGQVn3EpkGZXNX7rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUy1HSQK+/ wHz9SUkW3gYtaTpZlxMwHwYDVR0jBBgwFoAUGhajkdMlFwt7hcS/x4VaF300e24w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCNTEwLzE4ODJEMEU2NUQ4 MTExRjA5MTIyNkUzMUM0RjlBRTAyL0doYWprZE1sRnd0N2hjU194NFZhRjMwMGUy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2hhamtkTWxGd3Q3aGNTX3g0VmFGMzAwZTI0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC NTEwLzE4ODJEMEU2NUQ4MTExRjA5MTIyNkUzMUM0RjlBRTAyL0doYWprZE1sRnd0 N2hjU194NFZhRjMwMGUyNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGf9oVFixuvUHXdFqKVuccvtu8Gi4dOe/akmh6jk3zfzoTCS+klqG21n TIhVESXF2/B+dSDfVGxHvouUbLI7P1LYt75Ej2+NsCq/35unt8UWwXkTv0msAQBW IaKCTyw+NeR/74XE8tOtj0dNi+SEcRlsbfL3nFsGuSxjmH0yf8VDyVoam4/AyN5s v2qwAabswj2y1g/dnWBX9H4X+J1OgpMFfDiBxY0IKTHyNN31wdPtjBRYUgXN1DJT yolKiJP/0kZk+dmYkdTV/JQ+cshNu5oJ61bBClau1wh7TMvgCAH7vhVrsfU/e+iD mvFAsxQcQ9VD5n1oY9owItTGZ6yvn+s= -----END CERTIFICATE-----Generated at Sun Dec 7 01:12:08 2025 by rpki-client