This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft File: gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft (raw, json) Hash identifier: c7HInnRwBCwM0dz0vuok+4qpvX9Sk60VzKOmcJfbmU8= Subject key identifier: C5:E3:98:41:9C:37:EC:67:7B:30:77:46:28:75:37:2F:86:E3:EF:1E Authority key identifier: 81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA Certificate issuer: /CN=A9149F3E/serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA Certificate serial: 34FA Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft Manifest number: 34FA Signing time: Thu 04 Dec 2025 14:20:57 +0000 Manifest this update: Thu 04 Dec 2025 14:20:57 +0000 Manifest next update: Thu 11 Dec 2025 14:20:57 +0000 Files and hashes: 1: gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl (hash: G7AAimsyoM+j7/Kkbh0/uoRriUuKmpIH6oULJX6wLxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 14:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13562 (0x34fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA Validity Not Before: Dec 4 14:20:57 2025 GMT Not After : Dec 11 14:20:57 2025 GMT Subject: CN=693198c9-c0b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7d:ab:ff:fb:34:47:05:be:a4:e5:25:2c:66: 95:2c:06:e5:ae:70:fb:45:4d:94:3e:d9:0c:0d:a3: a8:38:e8:98:a8:c9:ea:d1:f1:7f:0c:39:e9:a7:3a: 45:ea:c9:d0:e5:55:a6:a8:1b:a6:30:81:36:53:e6: 07:9f:c9:e5:c7:3b:be:ae:36:bc:78:e9:89:0d:93: e9:7d:13:7a:f2:4e:d8:08:b4:4c:c7:92:26:19:65: f9:e5:f1:8d:02:8e:1d:e0:6a:ff:c5:94:03:17:b6: 05:78:54:d0:d8:ec:3c:3e:19:c3:15:fb:83:ef:19: 09:40:f0:4b:23:e2:79:8d:fb:cc:03:9d:4d:87:09: 75:be:df:d7:f0:26:ed:48:1a:d5:d3:97:d5:11:a0: 8f:b3:83:6b:58:12:ac:9a:b0:b6:35:cc:63:78:b3: 4d:43:76:dd:bd:4b:58:92:3d:51:4b:50:16:cd:9c: f4:1d:e7:01:c0:ad:77:6a:e7:63:d4:9f:b4:9a:f9: 51:32:64:d8:e8:0a:4b:72:5a:ba:cb:2c:87:fc:da: d3:9e:7f:95:81:6b:43:dc:0b:eb:92:f0:5e:ba:16: 68:b4:f3:2b:0a:1d:b2:48:cc:ce:59:0f:27:18:02: af:53:2c:03:83:b3:71:ec:32:93:20:54:32:47:bd: 48:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E3:98:41:9C:37:EC:67:7B:30:77:46:28:75:37:2F:86:E3:EF:1E X509v3 Authority Key Identifier: keyid:81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:89:4e:8c:86:3d:c2:45:77:2b:1c:aa:5a:ea:5c:8a:fa:32: e4:d6:23:4f:06:bd:4f:b8:e9:25:bb:94:9e:2d:99:f6:eb:05: ef:7e:77:94:05:d8:1d:e0:0a:6f:8e:76:e6:2c:79:be:3b:76: ca:f5:76:ee:e8:09:24:cf:bf:c5:d9:fd:54:85:ce:87:d4:bc: 0a:19:51:e9:c0:f2:1b:98:29:95:4b:ae:b3:c3:bd:b7:0b:d5: ae:a8:e3:45:b1:24:dd:4c:7b:ad:05:0c:99:cb:0a:b6:90:ef: 4f:30:23:f5:95:12:e8:ba:29:92:07:ee:79:49:b9:ee:d2:5e: 3d:e7:7c:37:e9:8d:59:7a:92:e1:9f:58:1e:9c:0e:76:df:31: 03:77:06:49:ea:2f:cb:ec:8b:53:a8:6d:fd:8d:9f:6a:02:3d: 4d:e9:2e:20:f1:3d:da:1b:f4:0d:36:7c:35:79:61:86:e4:c8: 81:3a:a7:b9:f5:21:f8:1e:83:6c:59:d0:ef:e2:7d:2f:57:de: 63:1f:99:a8:9d:ea:04:cd:50:21:05:cc:8e:b3:39:00:96:9f: cf:5e:1c:86:bd:b3:57:da:ac:1f:e5:48:c3:68:03:67:a8:a4: 10:6b:92:3d:21:be:f1:58:4b:a5:93:e4:6e:d3:18:30:c6:47: 97:68:95:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKDgxRkQ1NjNDQzY4NjVERTAyREE2QTgzRjJBMDFGMTE2 MTExRDBGRkEwHhcNMjUxMjA0MTQyMDU3WhcNMjUxMjExMTQyMDU3WjAYMRYwFAYD VQQDEw02OTMxOThjOS1jMGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlX2r//s0RwW+pOUlLGaVLAblrnD7RU2UPtkMDaOoOOiYqMnq0fF/DDnppzpF 6snQ5VWmqBumMIE2U+YHn8nlxzu+rja8eOmJDZPpfRN68k7YCLRMx5ImGWX55fGN Ao4d4Gr/xZQDF7YFeFTQ2Ow8PhnDFfuD7xkJQPBLI+J5jfvMA51Nhwl1vt/X8Cbt SBrV05fVEaCPs4NrWBKsmrC2NcxjeLNNQ3bdvUtYkj1RS1AWzZz0HecBwK13audj 1J+0mvlRMmTY6ApLclq6yyyH/NrTnn+VgWtD3AvrkvBeuhZotPMrCh2ySMzOWQ8n GAKvUywDg7Nx7DKTIFQyR71ItQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXjmEGc N+xnezB3Rih1Ny+G4+8eMB8GA1UdIwQYMBaAFIH9VjzGhl3gLaaoPyoB8RYRHQ/6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS84ODcxRkIyQzFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hlQXRwcWdfS2dIeEZoRWRE X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL2dmMVdQTWFHWGVBdHBxZ19LZ0h4RmhFZERfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS84ODcxRkIyQzFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hl QXRwcWdfS2dIeEZoRWREX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTiU6Mhj3CRXcrHKpa6lyK+jLk1iNPBr1PuOklu5SeLZn26wXvfneU Bdgd4ApvjnbmLHm+O3bK9Xbu6Akkz7/F2f1Uhc6H1LwKGVHpwPIbmCmVS66zw723 C9WuqONFsSTdTHutBQyZywq2kO9PMCP1lRLouimSB+55Sbnu0l4953w36Y1ZepLh n1genA523zEDdwZJ6i/L7ItTqG39jZ9qAj1N6S4g8T3aG/QNNnw1eWGG5MiBOqe5 9SH4HoNsWdDv4n0vV95jH5moneoEzVAhBcyOszkAlp/PXhyGvbNX2qwf5UjDaANn qKQQa5I9Ib7xWEulk+Ru0xgwxkeXaJWR -----END CERTIFICATE-----Generated at Sat Dec 6 15:39:35 2025 by rpki-client