This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json) Hash identifier: kdnS++tyH9DngoCKu7Cb4pTjAPFEeERrH1RHz5jJd6o= Subject key identifier: FE:D7:F9:A3:DD:9C:31:68:26:C3:E7:48:42:EB:EC:0C:7E:ED:56:5D Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Certificate serial: 09DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft Manifest number: 09CA Signing time: Thu 04 Dec 2025 19:12:56 +0000 Manifest this update: Thu 04 Dec 2025 19:12:55 +0000 Manifest next update: Thu 11 Dec 2025 19:12:55 +0000 Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: Bfbyro2iQPYNZWgHJd50SERd0ZrlLAbMXRaSdAUdw+Y=) 2: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: F610C7Ym+IbTxaB7/QFjiGQSnmA/MEfTbDdc0n6x2y4=) 3: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: AS8hUi479g1JOMhqd/DGudZL1BV4/ri0MrfNsHx+xyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2522 (0x9da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Validity Not Before: Dec 4 19:12:55 2025 GMT Not After : Dec 11 19:12:55 2025 GMT Subject: CN=6931dd38-5617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:1e:92:40:75:ea:16:d6:c8:bc:86:87:1d:15: b0:5a:99:fa:5d:ba:45:42:87:16:02:a9:b2:46:65: ea:74:20:34:ef:64:f3:e2:8d:95:ca:52:34:ba:a4: e0:62:5c:b0:86:8b:6b:2f:fe:24:0d:a0:ea:e5:8b: c9:a3:41:c7:3d:eb:16:a5:aa:76:85:64:ae:69:7f: a7:ab:b9:30:28:14:7f:73:4e:f5:86:2c:73:3d:80: 42:b7:1f:99:92:2f:ec:65:99:7b:19:31:a4:5f:f5: 96:23:99:71:0a:65:65:8e:1b:4f:47:f6:c3:ff:8d: c7:0c:04:10:a7:64:4d:03:89:82:e9:94:5e:e9:98: b2:88:83:3e:4e:a6:62:05:55:af:cf:7b:57:cc:12: ae:1d:e8:b7:8d:43:25:2b:5f:9e:ac:93:42:ef:bf: 11:36:ec:4c:03:51:6e:ef:32:4b:6c:68:01:79:2d: 76:d9:d9:ca:02:4c:b9:5d:85:e3:80:27:3a:aa:ef: 3a:38:ad:85:b4:fc:27:1f:fa:44:56:a4:1e:89:a7: 32:a4:fc:bf:30:a2:44:ad:f2:ff:b2:1e:09:c6:6d: a8:6d:8a:01:38:4d:12:d2:e2:27:f0:9a:43:bd:7d: ef:0a:a7:e1:d1:a0:87:88:e9:92:f6:30:60:fc:cf: db:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D7:F9:A3:DD:9C:31:68:26:C3:E7:48:42:EB:EC:0C:7E:ED:56:5D X509v3 Authority Key Identifier: keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ee:41:cf:5f:9e:e0:50:62:db:66:a2:c8:31:98:4c:98:f6: a6:4d:ab:86:a1:f1:cd:77:bb:9b:af:d5:bd:7b:37:73:ba:b5: aa:a9:2d:30:a0:a1:8d:c1:86:0a:0c:21:f5:00:60:6f:e3:00: 8c:24:92:e3:fd:96:60:aa:77:9f:7b:06:61:5f:b8:13:ed:a7: d9:63:93:f8:26:8f:73:dc:ec:c5:a6:31:92:3f:19:3b:1e:0c: ea:c6:e1:e6:cb:07:94:74:45:6a:e8:8e:80:10:c3:21:a2:c9: 29:b7:29:0f:76:fe:ca:84:1e:7c:27:2d:ab:8a:40:1c:e1:31: 9a:7a:a4:b1:3e:7c:ce:3d:26:24:e2:29:32:6f:2e:3c:1c:b5: 70:ca:5d:de:d3:ce:1d:7b:4c:4b:6e:7e:63:b5:ae:9b:c6:52: 5a:a2:fe:bf:1e:2f:a8:92:34:fc:dc:0a:e4:7b:9a:50:cc:66: bd:cf:9a:af:c4:ba:47:9b:f7:a3:1d:21:a3:f6:ad:c9:43:9b: 1b:83:df:10:29:dc:c1:95:13:ef:98:78:5d:97:32:4a:0c:8a: 40:f3:eb:6c:1d:08:ac:4f:1e:f4:2f:0a:26:eb:ed:51:68:df: fb:68:9a:0e:71:54:8c:a5:f8:db:d8:f0:bb:44:1d:a9:a1:a1: 87:86:cf:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQUMxMTAvBgNVBAUTKDE4RDVDRkM4QUFGNTE3QjA3NkQxRkM5QzJFNjVGNjkx NDM1RDNBNUYwHhcNMjUxMjA0MTkxMjU1WhcNMjUxMjExMTkxMjU1WjAYMRYwFAYD VQQDEw02OTMxZGQzOC01NjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/B6SQHXqFtbIvIaHHRWwWpn6XbpFQocWAqmyRmXqdCA072Tz4o2VylI0uqTg YlywhotrL/4kDaDq5YvJo0HHPesWpap2hWSuaX+nq7kwKBR/c071hixzPYBCtx+Z ki/sZZl7GTGkX/WWI5lxCmVljhtPR/bD/43HDAQQp2RNA4mC6ZRe6ZiyiIM+TqZi BVWvz3tXzBKuHei3jUMlK1+erJNC778RNuxMA1Fu7zJLbGgBeS122dnKAky5XYXj gCc6qu86OK2FtPwnH/pEVqQeiacypPy/MKJErfL/sh4Jxm2obYoBOE0S0uIn8JpD vX3vCqfh0aCHiOmS9jBg/M/bXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7X+aPd nDFoJsPnSELr7Ax+7VZdMB8GA1UdIwQYMBaAFBjVz8iq9RewdtH8nC5l9pFDXTpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBQy82RUEzOUMwNjk0 MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3QjIwZnljTG1YMmtVTmRP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOWFB5S3IxRjdCMjBmeWNMbVgya1VOZE9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBQy82RUEzOUMwNjk0MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3 QjIwZnljTG1YMmtVTmRPbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq7kHPX57gUGLbZqLIMZhMmPamTauGofHNd7ubr9W9ezdzurWqqS0w oKGNwYYKDCH1AGBv4wCMJJLj/ZZgqnefewZhX7gT7afZY5P4Jo9z3OzFpjGSPxk7 HgzqxuHmyweUdEVq6I6AEMMhoskptykPdv7KhB58Jy2rikAc4TGaeqSxPnzOPSYk 4ikyby48HLVwyl3e084de0xLbn5jta6bxlJaov6/Hi+okjT83Arke5pQzGa9z5qv xLpHm/ejHSGj9q3JQ5sbg98QKdzBlRPvmHhdlzJKDIpA8+tsHQisTx70Lwom6+1R aN/7aJoOcVSMpfjb2PC7RB2poaGHhs+p -----END CERTIFICATE-----Generated at Sat Dec 6 13:29:31 2025 by rpki-client