This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft File: GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft (raw, json) Hash identifier: 9hMfIVoj05PI6238Y9pHMiN2q8CdI0ZF4CiQd5Qq7nA= Subject key identifier: 62:2D:34:BC:3B:66:AF:AC:DE:C9:66:2B:AB:4C:E6:97:A2:D4:F1:57 Authority key identifier: 19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7 Certificate issuer: /CN=A916C2B9/serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft Manifest number: 0159 Signing time: Fri 05 Dec 2025 02:17:14 +0000 Manifest this update: Fri 05 Dec 2025 02:17:14 +0000 Manifest next update: Fri 12 Dec 2025 02:17:14 +0000 Files and hashes: 1: GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl (hash: k2+VJDfEuF0NJbXWKxmAt2/j0H7k23w+MD2XrjO8NQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C2B9, serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7 Validity Not Before: Dec 5 02:17:14 2025 GMT Not After : Dec 12 02:17:14 2025 GMT Subject: CN=693240aa-3592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bd:e6:b4:f6:51:6b:37:f6:7d:0b:dc:5b:ba: 92:5e:4f:15:20:a1:0a:03:b2:d3:a9:22:ec:de:73: 41:6a:e6:78:77:31:62:44:99:9b:86:2b:0d:fc:94: 02:09:f7:53:56:b1:c3:c1:91:f8:13:dc:13:cf:51: 2b:85:7c:f6:7f:c3:7c:57:02:1f:b9:8c:8f:d5:06: 67:b0:53:3b:87:52:6c:a7:2a:86:ed:4a:78:ad:56: 75:85:4d:79:f7:06:17:94:89:e1:85:77:75:26:5b: c8:db:95:4e:6d:be:0e:1c:8b:6d:95:1d:0d:0c:a5: ec:71:5e:21:41:cb:64:ca:3c:98:c3:f8:fc:70:1c: d9:6b:c7:79:af:d5:ac:fc:9b:fe:1b:1c:fc:19:a3: 11:fd:df:0f:4b:bf:67:94:c9:3a:ec:64:26:53:76: 97:09:f4:30:57:29:3a:b1:70:31:7a:f4:49:41:71: 2e:62:79:2e:7a:dc:fc:75:db:61:36:ed:3b:2b:d6: 3b:3f:3a:52:09:36:af:43:9f:4d:e2:50:22:2d:b3: 18:30:12:5e:c8:86:b9:56:85:93:6a:66:50:ab:8d: 8f:33:66:3c:3f:e1:07:2e:dd:de:68:89:a4:92:19: be:c0:cb:d6:bf:c7:ad:5c:6f:01:3d:41:5b:c3:62: cd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2D:34:BC:3B:66:AF:AC:DE:C9:66:2B:AB:4C:E6:97:A2:D4:F1:57 X509v3 Authority Key Identifier: keyid:19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:7a:58:5a:d0:60:83:4b:a8:ef:c7:03:05:a9:fe:98:1c:6b: ce:f3:69:ec:58:5c:69:9a:c9:aa:18:0e:00:8a:c6:6b:87:5f: 35:52:27:ce:eb:d8:c5:ef:2d:f2:bc:43:62:b2:9f:45:bb:93: 32:6f:8c:67:9e:db:d5:35:95:7a:23:f6:c3:c0:c6:c7:e1:1f: 9a:21:84:79:f1:34:ba:3e:a8:9a:cc:e3:41:be:d0:b1:10:26: 23:81:5e:2c:cc:6e:f9:06:49:f2:04:be:69:50:98:08:be:4b: 4e:ca:91:d2:a7:60:6c:e2:03:30:0a:84:bd:d8:bb:07:28:2b: 24:05:c4:74:0d:90:9c:ec:1f:ec:22:92:15:50:a2:39:fa:f9: ac:03:7f:a5:46:d9:10:f0:e0:17:8e:e1:29:d1:b9:d9:06:6f: aa:be:5a:1e:5e:41:2c:3a:af:71:91:1a:56:56:2f:38:23:3e: 11:63:10:9e:0a:10:c9:76:e6:fe:eb:0b:72:76:b3:97:28:88: 50:4c:28:57:c8:6b:87:4d:3c:24:b5:1a:5c:fd:a8:d0:9e:b4: 9f:31:54:4c:ab:59:31:f9:ef:71:60:be:6a:6a:77:88:47:76: 0c:c1:e0:fb:35:95:4e:0d:5c:d5:f3:0a:82:9a:aa:f0:da:8a: 58:dc:d9:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMyQjkxMTAvBgNVBAUTKDE5QkI1NTMwNjJGOTM2M0Q2MERBNkI5NDY4MUYxQUQ2 MDQ4M0Q1QjcwHhcNMjUxMjA1MDIxNzE0WhcNMjUxMjEyMDIxNzE0WjAYMRYwFAYD VQQDEw02OTMyNDBhYS0zNTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwb3mtPZRazf2fQvcW7qSXk8VIKEKA7LTqSLs3nNBauZ4dzFiRJmbhisN/JQC CfdTVrHDwZH4E9wTz1ErhXz2f8N8VwIfuYyP1QZnsFM7h1JspyqG7Up4rVZ1hU15 9wYXlInhhXd1JlvI25VObb4OHIttlR0NDKXscV4hQctkyjyYw/j8cBzZa8d5r9Ws /Jv+Gxz8GaMR/d8PS79nlMk67GQmU3aXCfQwVyk6sXAxevRJQXEuYnkuetz8ddth Nu07K9Y7PzpSCTavQ59N4lAiLbMYMBJeyIa5VoWTamZQq42PM2Y8P+EHLt3eaImk khm+wMvWv8etXG8BPUFbw2LNMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGItNLw7 Zq+s3slmK6tM5pei1PFXMB8GA1UdIwQYMBaAFBm7VTBi+TY9YNprlGgfGtYEg9W3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzJCOS8zOThFOEEyNkMy QTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9HYnRWTUdMNU5qMWcybXVVYUI4YTFnU0Qx YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0didFZNR0w1TmoxZzJtdVVhQjhhMWdTRDFiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzJCOS8zOThFOEEyNkMyQTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9HYnRWTUdMNU5q MWcybXVVYUI4YTFnU0QxYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASelha0GCDS6jvxwMFqf6YHGvO82nsWFxpmsmqGA4AisZrh181UifO 69jF7y3yvENisp9Fu5Myb4xnntvVNZV6I/bDwMbH4R+aIYR58TS6PqiazONBvtCx ECYjgV4szG75BknyBL5pUJgIvktOypHSp2Bs4gMwCoS92LsHKCskBcR0DZCc7B/s IpIVUKI5+vmsA3+lRtkQ8OAXjuEp0bnZBm+qvloeXkEsOq9xkRpWVi84Iz4RYxCe ChDJdub+6wtydrOXKIhQTChXyGuHTTwktRpc/ajQnrSfMVRMq1kx+e9xYL5qaneI R3YMweD7NZVODVzV8wqCmqrw2opY3NkE -----END CERTIFICATE-----Generated at Sun Dec 7 01:40:45 2025 by rpki-client