This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft File: Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft (raw, json) Hash identifier: vUIRBbL7jNhr7/CXJ0aPwZRyKPct2P5s/k/hfb4mLbc= Subject key identifier: EE:A9:D6:B4:55:0A:28:8C:A9:ED:E0:55:96:08:E7:9A:EC:68:24:D1 Authority key identifier: 1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C Certificate issuer: /CN=A917B4EE/serialNumber=1A4D314C1FD010622E87491CE4827B623966709C Certificate serial: 068F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft Manifest number: 068A Signing time: Thu 04 Dec 2025 21:14:26 +0000 Manifest this update: Thu 04 Dec 2025 21:14:26 +0000 Manifest next update: Thu 11 Dec 2025 21:14:26 +0000 Files and hashes: 1: Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl (hash: DibXPAB97tfdm2e8uZAayTPy/MeSB0K0Mpm2yrtOUYA=) 2: 851D827C977511EBA99DCE72C4F9AE02.roa (hash: hQ/sXLdGqM267Zz0nlBpIRPhMJ+xIknpNjyonr+GXWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1679 (0x68f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4EE, serialNumber=1A4D314C1FD010622E87491CE4827B623966709C Validity Not Before: Dec 4 21:14:26 2025 GMT Not After : Dec 11 21:14:26 2025 GMT Subject: CN=6931f9b2-debe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e1:0c:d9:b4:42:53:04:68:5c:26:ff:8c:3c: fc:d4:5a:cf:68:b5:6b:66:a1:57:a2:f6:d3:ca:a9: 7c:16:8d:32:cd:11:39:2a:4b:95:bd:ed:9a:4e:19: f8:93:a0:f4:82:34:9c:be:04:27:e1:f9:8a:48:2a: 41:33:53:ae:af:8a:5e:44:3a:5b:83:8a:ad:5b:cd: 6f:aa:26:35:a3:a8:ae:79:24:b2:e9:88:d8:05:8e: 3e:c2:d0:06:00:4c:ef:5f:03:70:0e:22:28:fc:a7: ef:0d:0a:b9:a9:71:39:a8:2b:ef:b2:ca:2d:b1:6c: 0a:8c:e6:04:2e:fd:5a:fb:78:77:90:28:4c:55:ab: 0c:23:d9:61:a3:e1:3d:13:35:af:7d:50:09:60:08: db:24:89:13:a4:75:df:e1:7f:e8:f2:cd:53:93:d6: 50:5f:5a:80:78:29:b6:e1:b1:68:02:a1:ff:a7:44: 7f:41:ec:30:01:90:e3:3e:99:f6:29:b9:7c:ad:4c: f1:ce:f9:cc:2e:a7:62:3f:79:f4:17:40:8e:05:38: c1:19:17:fa:ce:5d:6d:50:4e:06:ff:24:88:16:38: 4a:6e:40:79:bc:5b:b7:bf:75:00:85:15:73:16:43: a1:91:74:7a:98:95:84:d5:2b:3a:33:8b:e2:e1:3f: eb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A9:D6:B4:55:0A:28:8C:A9:ED:E0:55:96:08:E7:9A:EC:68:24:D1 X509v3 Authority Key Identifier: keyid:1A:4D:31:4C:1F:D0:10:62:2E:87:49:1C:E4:82:7B:62:39:66:70:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4EE/3A727C7E977411EBAE83FD71C4F9AE02/Gk0xTB_QEGIuh0kc5IJ7YjlmcJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:d8:01:c4:1a:28:d6:af:ae:7c:58:b6:6b:f6:4f:16:4a:17: e5:60:93:ca:d4:d0:d7:49:a9:97:32:4e:0d:37:23:fd:05:f9: b0:54:ac:a5:9f:72:9c:89:e5:30:5c:c3:fc:9c:cb:1a:43:20: d1:89:ad:c4:a7:32:4d:52:73:ce:ce:9d:b9:f0:c7:8a:68:4e: eb:f2:5c:4a:6f:9d:38:c4:89:84:26:d2:dd:76:81:d7:bb:85: a9:1b:1c:8c:67:36:10:40:d5:61:86:ee:b9:89:a2:4a:4e:81: de:8f:ec:7d:26:86:f6:94:8a:61:56:67:33:0c:3b:24:96:19: a3:7f:d1:49:9f:7b:10:6e:73:92:b5:43:39:0e:8c:96:0b:c9: ac:ed:2e:77:04:8f:aa:b3:f7:d3:21:6d:76:6b:9b:fd:1b:76: c6:30:54:be:cc:b0:ed:21:2e:8e:72:ce:0d:33:53:57:25:a5: dc:de:e6:69:41:ee:05:4d:4e:a9:a3:cd:05:2b:59:a0:ff:1e: a1:79:48:92:22:37:91:19:08:32:b9:a2:06:ef:97:67:71:8c: 76:69:0f:76:0c:2d:55:82:6e:48:8c:b5:89:2a:fd:6c:08:e9: 18:d3:ea:41:f8:81:99:61:05:4a:45:41:a8:31:43:0f:8d:47: f5:49:53:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0RUUxMTAvBgNVBAUTKDFBNEQzMTRDMUZEMDEwNjIyRTg3NDkxQ0U0ODI3QjYy Mzk2NjcwOUMwHhcNMjUxMjA0MjExNDI2WhcNMjUxMjExMjExNDI2WjAYMRYwFAYD VQQDEw02OTMxZjliMi1kZWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2OEM2bRCUwRoXCb/jDz81FrPaLVrZqFXovbTyql8Fo0yzRE5KkuVve2aThn4 k6D0gjScvgQn4fmKSCpBM1Our4peRDpbg4qtW81vqiY1o6iueSSy6YjYBY4+wtAG AEzvXwNwDiIo/KfvDQq5qXE5qCvvssotsWwKjOYELv1a+3h3kChMVasMI9lho+E9 EzWvfVAJYAjbJIkTpHXf4X/o8s1Tk9ZQX1qAeCm24bFoAqH/p0R/QewwAZDjPpn2 Kbl8rUzxzvnMLqdiP3n0F0COBTjBGRf6zl1tUE4G/ySIFjhKbkB5vFu3v3UAhRVz FkOhkXR6mJWE1Ss6M4vi4T/r4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO6p1rRV CiiMqe3gVZYI55rsaCTRMB8GA1UdIwQYMBaAFBpNMUwf0BBiLodJHOSCe2I5ZnCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRFRS8zQTcyN0M3RTk3 NzQxMUVCQUU4M0ZENzFDNEY5QUUwMi9HazB4VEJfUUVHSXVoMGtjNUlKN1lqbG1j SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0drMHhUQl9RRUdJdWgwa2M1SUo3WWpsbWNKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRFRS8zQTcyN0M3RTk3NzQxMUVCQUU4M0ZENzFDNEY5QUUwMi9HazB4VEJfUUVH SXVoMGtjNUlKN1lqbG1jSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAB2AHEGijWr658WLZr9k8WShflYJPK1NDXSamXMk4NNyP9BfmwVKyl n3KcieUwXMP8nMsaQyDRia3EpzJNUnPOzp258MeKaE7r8lxKb504xImEJtLddoHX u4WpGxyMZzYQQNVhhu65iaJKToHej+x9Job2lIphVmczDDsklhmjf9FJn3sQbnOS tUM5DoyWC8ms7S53BI+qs/fTIW12a5v9G3bGMFS+zLDtIS6Ocs4NM1NXJaXc3uZp Qe4FTU6po80FK1mg/x6heUiSIjeRGQgyuaIG75dncYx2aQ92DC1Vgm5IjLWJKv1s COkY0+pB+IGZYQVKRUGoMUMPjUf1SVNh -----END CERTIFICATE-----Generated at Sat Dec 6 18:51:19 2025 by rpki-client