This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft File: GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft (raw, json) Hash identifier: yPmn/j21JcRIRSyNnbAhwcB4Bqrrn3MiYJJtU9nfUXk= Subject key identifier: DF:8F:CA:34:7E:A1:D9:49:D6:98:8A:5D:97:3F:57:58:50:6F:7B:46 Authority key identifier: 19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22 Certificate issuer: /CN=A91475C0/serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522 Certificate serial: 1330 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft Manifest number: 131A Signing time: Sat 20 Dec 2025 16:46:07 +0000 Manifest this update: Sat 20 Dec 2025 16:46:07 +0000 Manifest next update: Sat 27 Dec 2025 16:46:07 +0000 Files and hashes: 1: GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl (hash: HYk6Q4NiOpYf+XdvVI2yFrLAMpfBz4mr4BABzRLAF6A=) 2: 1341A108C14C11E888561034C4F9AE02.roa (hash: Uq2fnJJSrxKP2pEC3QkwoSDKS4P2EBIZ+Y3CtV/h3x8=) 3: 13F37A72C14C11E888561034C4F9AE02.roa (hash: OcsTl+dP77XmT0OkNzM4sC0UJay1bYkM67JEHkoHWvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4912 (0x1330) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91475C0, serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522 Validity Not Before: Dec 20 16:46:07 2025 GMT Not After : Dec 27 16:46:07 2025 GMT Subject: CN=6946d2cf-474f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d8:31:40:91:a1:f1:0a:76:ff:54:13:17:e0: d8:2f:cd:8b:99:32:d8:78:71:e7:95:e3:1b:11:e5: 81:a6:e0:17:a5:a9:f3:0e:12:ee:32:a7:eb:14:72: 94:31:13:fe:50:b4:31:b5:3e:d4:3c:23:ef:5f:a8: 95:ed:5e:a7:38:1b:63:4e:af:12:6e:ea:dc:17:e4: 7d:72:bc:f6:8f:4c:94:a8:73:6d:c5:bf:2b:fc:0e: ec:bf:ed:5f:58:e6:a8:94:33:19:49:ae:1f:96:cf: 53:ec:13:dc:3d:26:b4:a1:d1:e7:eb:14:3e:fa:3d: dc:5e:fc:9f:aa:14:e2:d0:e8:c1:9b:86:8d:5d:8c: 08:dd:25:0c:92:ef:c9:71:23:6a:88:03:26:d8:43: c6:c7:2b:ed:48:e2:8e:e6:7d:7f:bc:43:e9:8e:fb: 27:19:af:99:94:f1:a2:97:30:66:22:72:db:4c:40: 82:0b:5e:f5:0c:f0:f1:0f:ed:97:12:3c:ed:89:c2: b5:e2:f0:3b:e4:a2:a4:be:dd:a1:46:8a:3c:4b:47: da:c8:f7:b7:67:11:29:94:31:f2:df:ef:f4:07:04: 78:cf:78:92:26:28:c9:39:c6:ad:e2:f0:96:7d:92: e0:5d:70:b7:c0:4a:ed:11:70:08:88:f2:05:19:3e: 56:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:8F:CA:34:7E:A1:D9:49:D6:98:8A:5D:97:3F:57:58:50:6F:7B:46 X509v3 Authority Key Identifier: keyid:19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:d8:38:3c:c0:aa:d2:d5:6f:df:53:ab:a8:4f:ed:da:b6:56: 41:fb:34:88:41:2d:23:19:1d:d2:81:23:34:03:a4:f3:22:ec: 3b:6a:16:d5:d1:ff:31:6f:33:46:86:eb:85:ef:b2:c2:31:d4: 48:88:0e:79:85:bd:eb:73:99:e5:f3:b0:85:94:38:d8:4a:33: 7a:48:0c:ca:0a:d7:cd:f6:2c:12:94:f4:f7:4b:b4:cd:22:72: 2d:32:85:a0:0b:da:d2:29:5c:4e:3b:7a:a7:da:6e:d2:be:a9: fb:6d:14:ea:c6:f9:9f:13:aa:67:85:9c:a9:df:59:46:dc:64: 46:0d:98:1d:8b:06:db:99:fa:37:7e:1e:21:12:2c:30:da:48: 31:d4:3e:b0:a0:6f:0f:2e:79:40:00:1f:92:10:3b:0c:a5:ca: 0b:e2:5e:c0:56:ac:b0:ec:0f:f7:fc:dc:f1:9e:97:fd:39:83: b8:79:fb:e5:d7:32:fb:89:48:54:05:67:1a:ea:a3:55:37:7e: c6:d3:da:ea:a7:42:d6:12:33:f8:57:0b:ec:f1:b4:16:04:21: 79:d1:14:22:23:af:d1:a0:f4:0c:4b:fa:eb:97:6b:0e:a1:22: d4:81:02:52:c2:dd:2c:64:8e:b1:c5:10:ce:cf:ef:16:83:af: f5:25:12:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc1QzAxMTAvBgNVBAUTKDE5Q0E5N0Y5RUNCNTBDNTg0RDFCRkJENkI3NDUwMjQx MzlBMDE1MjIwHhcNMjUxMjIwMTY0NjA3WhcNMjUxMjI3MTY0NjA3WjAYMRYwFAYD VQQDDA02OTQ2ZDJjZi00NzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAldgxQJGh8Qp2/1QTF+DYL82LmTLYeHHnleMbEeWBpuAXpanzDhLuMqfrFHKU MRP+ULQxtT7UPCPvX6iV7V6nOBtjTq8SburcF+R9crz2j0yUqHNtxb8r/A7sv+1f WOaolDMZSa4fls9T7BPcPSa0odHn6xQ++j3cXvyfqhTi0OjBm4aNXYwI3SUMku/J cSNqiAMm2EPGxyvtSOKO5n1/vEPpjvsnGa+ZlPGilzBmInLbTECCC171DPDxD+2X EjzticK14vA75KKkvt2hRoo8S0fayPe3ZxEplDHy3+/0BwR4z3iSJijJOcat4vCW fZLgXXC3wErtEXAIiPIFGT5WwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+PyjR+ odlJ1piKXZc/V1hQb3tGMB8GA1UdIwQYMBaAFBnKl/nstQxYTRv71rdFAkE5oBUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzVDMC81QTJDMTJBQ0Mx NEIxMUU4QjA5MkU3MzJDNEY5QUUwMi9HY3FYLWV5MURGaE5HX3ZXdDBVQ1FUbWdG U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0djcVgtZXkxREZoTkdfdld0MFVDUVRtZ0ZTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzVDMC81QTJDMTJBQ0MxNEIxMUU4QjA5MkU3MzJDNEY5QUUwMi9HY3FYLWV5MURG aE5HX3ZXdDBVQ1FUbWdGU0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm2Dg8wKrS1W/fU6uoT+3atlZB+zSIQS0jGR3SgSM0A6TzIuw7ahbV 0f8xbzNGhuuF77LCMdRIiA55hb3rc5nl87CFlDjYSjN6SAzKCtfN9iwSlPT3S7TN InItMoWgC9rSKVxOO3qn2m7Svqn7bRTqxvmfE6pnhZyp31lG3GRGDZgdiwbbmfo3 fh4hEiww2kgx1D6woG8PLnlAAB+SEDsMpcoL4l7AVqyw7A/3/Nzxnpf9OYO4efvl 1zL7iUhUBWca6qNVN37G09rqp0LWEjP4Vwvs8bQWBCF50RQiI6/RoPQMS/rrl2sO oSLUgQJSwt0sZI6xxRDOz+8Wg6/1JRLy -----END CERTIFICATE-----Generated at Mon Dec 22 01:08:26 2025 by rpki-client