This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft File: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft (raw, json) Hash identifier: 8s7d7IkRNSVsNvfWKnfQShcSeQWHC2eqzFKB1gXKcAM= Subject key identifier: C2:8D:B7:2A:5D:45:E6:E2:C9:EC:92:F3:8E:6D:C0:89:98:48:B5:5F Authority key identifier: 1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4 Certificate issuer: /CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4 Certificate serial: 0523 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft Manifest number: 0517 Signing time: Thu 04 Dec 2025 22:11:10 +0000 Manifest this update: Thu 04 Dec 2025 22:11:09 +0000 Manifest next update: Thu 11 Dec 2025 22:11:09 +0000 Files and hashes: 1: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl (hash: zALiqNfIWYQVYU07z/jw5Wg0hBYOwykSVQJgES3hrUU=) 2: A6DC22C63C7D11ECB08DFD13C4F9AE02.roa (hash: OgxkGLoBh6HGvCB/fRUVvIfnQUfu5bCnmyvUAGDoCoM=) 3: 0F8709542D6E11EC8327E321C4F9AE02.roa (hash: 7kV6yNtY0OEuz4gBv/+8ihVZGqJgfv8o7qKBHm8GmBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1315 (0x523) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184017, serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4 Validity Not Before: Dec 4 22:11:09 2025 GMT Not After : Dec 11 22:11:09 2025 GMT Subject: CN=693206fd-ea31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f5:9e:b2:73:db:4f:30:16:8d:4d:f9:29:5d: 8e:3b:a4:24:41:c6:ce:0b:ea:1f:19:2d:b6:27:84: 8e:10:48:1d:37:06:20:b3:54:38:e4:68:04:62:af: f6:da:23:7b:56:6f:69:a7:4d:f9:49:08:c3:42:4b: c0:fb:fb:38:24:e2:1e:bb:18:3a:68:70:50:c5:ac: d9:35:ea:3a:0f:35:10:cc:81:7b:19:fb:fd:6f:05: 50:bd:65:60:77:ad:be:a9:c7:93:a6:cf:65:da:10: f8:86:32:4d:9b:08:48:f3:8c:25:42:5d:36:a4:14: 55:dd:76:aa:d3:2a:f7:21:ef:15:11:54:f3:70:90: d8:a2:97:05:0b:15:ae:7a:93:c1:07:32:03:bc:38: 13:c1:c2:09:42:1b:02:1f:24:8c:f2:b5:be:95:ef: c7:d8:21:8e:3d:b9:6e:e3:6e:89:67:32:94:f2:14: 13:43:66:ab:7d:39:57:a6:5e:d7:c9:37:5a:a3:e7: bc:34:0e:dd:5e:78:1e:d6:2f:47:b2:c2:c2:ba:bd: 29:15:b4:60:12:a1:0b:0f:90:08:f8:87:bf:3f:44: 7e:e2:fb:73:bb:24:61:c6:76:79:c9:32:73:bf:14: c1:b0:03:b0:cb:25:7c:65:bd:5a:6f:81:16:0e:3d: 6d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:8D:B7:2A:5D:45:E6:E2:C9:EC:92:F3:8E:6D:C0:89:98:48:B5:5F X509v3 Authority Key Identifier: keyid:1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:37:b2:33:3a:b2:cf:cc:81:57:32:7d:ba:3e:ce:81:e2:90: 15:68:df:fe:c5:8c:e9:43:ad:4b:6f:1f:79:48:32:6e:15:d3: c0:d9:40:bd:29:13:3e:b8:c4:cb:74:d7:75:fd:51:f3:df:69: d8:65:d3:09:f8:9f:8e:86:0b:7e:10:da:ee:c2:91:a9:c8:c2: db:62:f0:5b:c8:e9:f5:8f:20:56:36:d3:42:22:e1:76:24:bf: 6f:6a:e5:f4:45:c6:2e:93:ad:e4:94:68:34:c6:d4:2b:54:70: e1:da:33:6e:05:1a:58:73:79:d2:4b:d5:a8:31:27:98:77:8b: 5e:72:b4:ab:53:e3:b2:f9:93:db:03:f7:a0:d3:0b:7e:4c:06: 0a:e0:aa:b7:57:67:63:e8:98:f4:b1:81:7e:18:c3:4f:49:ab: ca:58:a7:48:88:28:60:35:e1:be:ca:c4:c9:1c:39:63:8e:b6: 3b:1c:bc:c5:ef:0e:03:ab:08:85:ea:48:d4:e8:06:49:f8:20: 47:7c:38:3b:cc:f5:35:7e:ea:e5:63:cc:1c:b8:7e:eb:10:44: a3:eb:54:70:a5:7c:3c:43:10:df:a2:2c:2e:ba:2c:43:cd:95: fc:9b:8f:c4:4d:ff:ed:fa:4d:54:ba:48:27:28:a0:76:ba:a5: 63:cb:e0:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwMTcxMTAvBgNVBAUTKDFBOUYyQkJFQTUyMkYxRUUyNTkyMzU5QjRCNTJGQTJC NDFBM0NEQzQwHhcNMjUxMjA0MjIxMTA5WhcNMjUxMjExMjIxMTA5WjAYMRYwFAYD VQQDEw02OTMyMDZmZC1lYTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn/WesnPbTzAWjU35KV2OO6QkQcbOC+ofGS22J4SOEEgdNwYgs1Q45GgEYq/2 2iN7Vm9pp035SQjDQkvA+/s4JOIeuxg6aHBQxazZNeo6DzUQzIF7Gfv9bwVQvWVg d62+qceTps9l2hD4hjJNmwhI84wlQl02pBRV3Xaq0yr3Ie8VEVTzcJDYopcFCxWu epPBBzIDvDgTwcIJQhsCHySM8rW+le/H2CGOPblu426JZzKU8hQTQ2arfTlXpl7X yTdao+e8NA7dXnge1i9HssLCur0pFbRgEqELD5AI+Ie/P0R+4vtzuyRhxnZ5yTJz vxTBsAOwyyV8Zb1ab4EWDj1tbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKNtypd RebiyeyS845twImYSLVfMB8GA1UdIwQYMBaAFBqfK76lIvHuJZI1m0tS+itBo83E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDAxNy83RjEyMjgxQzJE NjQxMUVDODVENjhCODBDNEY5QUUwMi9HcDhydnFVaThlNGxraldiUzFMNkswR2p6 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwOHJ2cVVpOGU0bGtqV2JTMUw2SzBHanpjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDAxNy83RjEyMjgxQzJENjQxMUVDODVENjhCODBDNEY5QUUwMi9HcDhydnFVaThl NGxraldiUzFMNkswR2p6Y1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlN7IzOrLPzIFXMn26Ps6B4pAVaN/+xYzpQ61Lbx95SDJuFdPA2UC9 KRM+uMTLdNd1/VHz32nYZdMJ+J+Ohgt+ENruwpGpyMLbYvBbyOn1jyBWNtNCIuF2 JL9vauX0RcYuk63klGg0xtQrVHDh2jNuBRpYc3nSS9WoMSeYd4tecrSrU+Oy+ZPb A/eg0wt+TAYK4Kq3V2dj6Jj0sYF+GMNPSavKWKdIiChgNeG+ysTJHDljjrY7HLzF 7w4DqwiF6kjU6AZJ+CBHfDg7zPU1furlY8wcuH7rEESj61RwpXw8QxDfoiwuuixD zZX8m4/ETf/t+k1UukgnKKB2uqVjy+BK -----END CERTIFICATE-----Generated at Sat Dec 6 19:06:56 2025 by rpki-client