This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft File: gaDPnOmqqZDtGv6KgwpweHT5qr4.mft (raw, json) Hash identifier: NFFtb10q2BDZ7AznQA2bFBCv9Pd2Xcn+n7sMqM7It04= Subject key identifier: 7E:E7:4C:23:5C:B6:5E:91:1F:E1:69:3F:FE:2F:10:B5:23:67:67:8F Authority key identifier: 81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE Certificate issuer: /CN=A9157450/serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft Manifest number: 0117 Signing time: Fri 05 Dec 2025 02:53:56 +0000 Manifest this update: Fri 05 Dec 2025 02:53:55 +0000 Manifest next update: Fri 12 Dec 2025 02:53:55 +0000 Files and hashes: 1: gaDPnOmqqZDtGv6KgwpweHT5qr4.crl (hash: 7dnw28oNNPVs392uxZAX8ZV2+cuJxjNU1UroxVmvses=) 2: B71C4F80253711EFA1D2A943C4F9AE02.roa (hash: H+qQQZmD1p/qPnv6XT6KRZsCtfSFefjGnHy0mI1YrpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:53:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157450, serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE Validity Not Before: Dec 5 02:53:55 2025 GMT Not After : Dec 12 02:53:55 2025 GMT Subject: CN=69324944-56fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8f:85:72:bc:67:7c:cf:c1:7c:a1:58:78:b8: 5e:9d:2e:b5:82:17:ef:17:20:08:c4:c1:63:d4:36: 48:b8:0c:bd:c7:07:d4:35:21:09:32:bc:48:2e:38: f3:e4:1f:c2:6c:85:e4:fc:0e:10:ef:cc:1a:7c:87: d5:ad:58:8c:53:5d:9e:4d:c5:81:3e:01:39:95:74: d5:26:ad:07:2f:17:c9:da:2d:90:e6:eb:09:b5:50: a2:cd:91:f6:4c:be:32:5a:5f:c3:0a:9f:10:db:27: 67:e2:fe:83:0a:f4:a3:c3:9b:f8:4a:75:2d:24:ed: be:4f:c2:88:8d:ca:50:e6:bb:9d:e0:95:52:ca:da: b9:dd:8d:4e:16:90:89:a6:d8:ed:08:ea:a2:c2:b8: a9:58:c4:52:db:86:c8:d9:7a:c8:c4:d3:be:90:3a: f6:f1:9e:6e:ed:e2:c6:10:ed:fb:b1:e8:c9:ef:d4: d8:c2:42:ff:2a:8f:26:d5:3a:02:bf:7c:cd:94:8a: 84:76:09:8d:db:11:b1:84:14:30:7b:58:b7:80:f2: 56:c8:2b:f7:0b:4a:21:33:ed:02:87:4c:2e:2e:fa: a7:c5:40:e4:4c:a3:a8:ce:98:22:9f:49:48:70:fb: 12:d9:05:e0:49:fc:4c:00:3a:eb:df:83:4f:43:3e: e7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E7:4C:23:5C:B6:5E:91:1F:E1:69:3F:FE:2F:10:B5:23:67:67:8F X509v3 Authority Key Identifier: keyid:81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:79:7b:7b:96:7b:2b:d5:b3:ad:94:0c:01:c3:8c:56:43:40: db:f8:10:6e:ff:97:3b:bc:e5:ed:81:bd:e1:4a:2f:00:77:12: 3d:9c:e7:9a:f2:0f:05:db:fb:c8:1a:c8:f8:1e:eb:9d:2a:ee: 25:39:27:96:a6:2a:51:a5:b9:df:03:ae:65:62:ec:5b:f6:fb: 55:19:d4:e8:ab:dd:3a:38:3c:00:dd:d4:0c:dd:03:86:b4:7b: 92:20:d0:da:f0:38:a0:fc:e3:c0:74:e3:6a:6b:89:38:62:39: e4:f2:33:17:35:e4:49:26:7c:08:4b:f5:8a:78:46:fd:52:fe: d3:c1:e3:0c:6b:3a:ea:fd:16:5e:39:da:f6:16:d9:8e:36:88: ee:51:63:a6:d4:8c:67:93:f4:93:3c:c3:e4:39:fa:c5:aa:d0: 06:7a:15:b1:46:7d:82:4f:0d:1d:28:e4:93:bd:87:08:d4:8e: 03:c2:77:a6:b8:36:b6:24:88:12:88:9b:52:87:81:59:0d:29: 18:1e:d0:cc:b6:1d:a5:fd:19:71:52:f9:df:ea:cb:8e:d2:97: cc:06:46:c2:fc:5a:0e:5d:d8:92:c7:ce:2f:47:81:7f:b5:cd: 78:69:65:d2:68:bf:38:bb:9d:11:1b:0e:38:bf:23:fb:3f:47: 6e:4b:af:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc0NTAxMTAvBgNVBAUTKDgxQTBDRjlDRTlBQUE5OTBFRDFBRkU4QTgzMEE3MDc4 NzRGOUFBQkUwHhcNMjUxMjA1MDI1MzU1WhcNMjUxMjEyMDI1MzU1WjAYMRYwFAYD VQQDEw02OTMyNDk0NC01NmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5I+FcrxnfM/BfKFYeLhenS61ghfvFyAIxMFj1DZIuAy9xwfUNSEJMrxILjjz 5B/CbIXk/A4Q78wafIfVrViMU12eTcWBPgE5lXTVJq0HLxfJ2i2Q5usJtVCizZH2 TL4yWl/DCp8Q2ydn4v6DCvSjw5v4SnUtJO2+T8KIjcpQ5rud4JVSytq53Y1OFpCJ ptjtCOqiwripWMRS24bI2XrIxNO+kDr28Z5u7eLGEO37sejJ79TYwkL/Ko8m1ToC v3zNlIqEdgmN2xGxhBQwe1i3gPJWyCv3C0ohM+0Ch0wuLvqnxUDkTKOozpgin0lI cPsS2QXgSfxMADrr34NPQz7ntwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7nTCNc tl6RH+FpP/4vELUjZ2ePMB8GA1UdIwQYMBaAFIGgz5zpqqmQ7Rr+ioMKcHh0+aq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzQ1MC84MkQ5QkEwNjI1 MzYxMUVGOUExQ0VGMjNDNEY5QUUwMi9nYURQbk9tcXFaRHRHdjZLZ3dwd2VIVDVx cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhRFBuT21xcVpEdEd2Nktnd3B3ZUhUNXFyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzQ1MC84MkQ5QkEwNjI1MzYxMUVGOUExQ0VGMjNDNEY5QUUwMi9nYURQbk9tcXFa RHRHdjZLZ3dwd2VIVDVxcjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACeXt7lnsr1bOtlAwBw4xWQ0Db+BBu/5c7vOXtgb3hSi8AdxI9nOea 8g8F2/vIGsj4HuudKu4lOSeWpipRpbnfA65lYuxb9vtVGdToq906ODwA3dQM3QOG tHuSINDa8Dig/OPAdONqa4k4Yjnk8jMXNeRJJnwIS/WKeEb9Uv7TweMMazrq/RZe Odr2FtmONojuUWOm1Ixnk/STPMPkOfrFqtAGehWxRn2CTw0dKOSTvYcI1I4Dwnem uDa2JIgSiJtSh4FZDSkYHtDMth2l/RlxUvnf6suO0pfMBkbC/FoOXdiSx84vR4F/ tc14aWXSaL84u50RGw44vyP7P0duS6+r -----END CERTIFICATE-----Generated at Sat Dec 6 13:56:25 2025 by rpki-client