This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft File: gqdp3XRsgx9MTbKdamXeCNatle0.mft (raw, json) Hash identifier: fZ01RdDRK1csw6qgy2/qv5fkgsmDRYr5oOITla5yXiw= Subject key identifier: B4:8A:09:94:6E:23:72:96:9D:F8:C2:2A:13:DC:5A:24:0D:F3:D1:E4 Authority key identifier: 82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED Certificate issuer: /CN=A91921AE/serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft Manifest number: C3 Signing time: Fri 05 Dec 2025 03:55:25 +0000 Manifest this update: Fri 05 Dec 2025 03:55:25 +0000 Manifest next update: Fri 12 Dec 2025 03:55:25 +0000 Files and hashes: 1: gqdp3XRsgx9MTbKdamXeCNatle0.crl (hash: ZMHwYZxzgQ48qHA+CDQvDeVAZGOpYiTa89SrxDmxU60=) 2: DC76F25EBCFD11EFAF51D253C4F9AE02.roa (hash: C8NuyzBs3UmSDZIg9iKH9kFYPl+i5KIJP5qS3W6HBKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:55:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91921AE, serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED Validity Not Before: Dec 5 03:55:25 2025 GMT Not After : Dec 12 03:55:25 2025 GMT Subject: CN=693257ad-9247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a2:3d:21:1e:62:c3:e3:46:da:87:78:b3:22: 9b:cb:bc:e3:64:01:e2:54:bf:34:c8:5c:19:e4:10: db:03:a5:e5:88:b6:ad:e5:8b:ae:9f:d9:41:8b:56: d9:aa:dc:48:4a:40:be:9c:8f:89:ff:34:87:ee:82: cc:a3:71:ad:2e:e8:7f:14:2f:00:f3:89:f2:05:a0: 7e:2d:f5:71:cc:19:1e:c2:8b:0c:18:66:8a:fd:91: 37:e8:fd:80:19:04:74:4d:9f:95:f6:ab:b6:e0:55: a4:38:58:70:48:9a:89:2f:b0:d6:1f:44:f9:cc:72: 1a:10:51:c8:a8:7e:df:86:89:b7:de:2d:f3:cc:c4: 61:af:d7:4d:f0:41:33:1c:1b:17:43:b3:73:fb:bd: 0a:7a:2a:e0:5c:78:93:ee:86:cc:45:7e:05:ca:ac: 41:75:cf:e9:05:10:a6:5f:af:85:78:28:d4:26:37: 91:6e:78:74:48:a4:a4:21:fe:5c:b1:d4:6a:db:51: 1a:95:b3:c9:09:d0:e1:2a:38:ba:60:43:10:7f:45: 12:81:5a:cb:6b:63:76:97:7f:e2:31:a8:86:0e:fe: d2:87:73:1b:c7:3b:1e:3a:51:a3:e3:f1:f2:4e:44: 78:3a:19:91:90:48:be:e8:36:0e:05:c8:18:f6:6e: 47:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8A:09:94:6E:23:72:96:9D:F8:C2:2A:13:DC:5A:24:0D:F3:D1:E4 X509v3 Authority Key Identifier: keyid:82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a4:1b:57:b0:30:a8:d1:13:1e:69:53:c4:06:e8:7b:14:df: 80:9d:e1:36:59:fa:dc:e1:70:37:34:29:6c:ae:25:45:54:17: b2:9f:81:44:e7:00:e6:04:92:e8:1e:88:4f:db:1b:2d:88:b5: b9:96:04:cb:53:01:99:ec:4d:b2:e3:8d:e4:8f:f6:18:28:58: f8:14:4e:e0:70:2a:d4:31:78:6f:ed:fd:13:da:f5:10:8b:b9: a3:6e:f2:0b:b6:20:b5:c4:93:69:f7:34:d3:d0:6f:0b:76:eb: 42:5e:37:de:3b:81:66:3f:86:47:18:19:22:3b:fe:8b:55:b8: f7:a3:da:01:cc:45:ef:b0:7b:cd:14:36:f8:eb:f9:39:c7:87: d9:86:02:a2:bf:af:1d:36:6b:b7:a2:c0:99:0b:5f:c5:5f:1b: ca:04:44:33:83:2e:d2:57:87:c8:d9:30:c7:6e:ec:1f:d6:0d: 26:6f:b1:99:b0:d2:ac:49:d7:9c:f5:6a:b3:99:b5:06:87:8f: 08:f0:fd:f6:f0:ff:73:92:ea:9b:76:55:a7:1f:44:85:2d:6f: 4f:46:0d:9e:98:e6:cb:17:08:18:a4:ed:74:c1:47:f3:c2:fc: 75:8b:7a:e8:dc:7a:39:00:ca:41:9a:9a:a4:8a:7e:0b:b9:4a: fb:a7:99:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIxQUUxMTAvBgNVBAUTKDgyQTc2OURENzQ2QzgzMUY0QzREQjI5RDZBNjVERTA4 RDZBRDk1RUQwHhcNMjUxMjA1MDM1NTI1WhcNMjUxMjEyMDM1NTI1WjAYMRYwFAYD VQQDEw02OTMyNTdhZC05MjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqI9IR5iw+NG2od4syKby7zjZAHiVL80yFwZ5BDbA6XliLat5Yuun9lBi1bZ qtxISkC+nI+J/zSH7oLMo3GtLuh/FC8A84nyBaB+LfVxzBkewosMGGaK/ZE36P2A GQR0TZ+V9qu24FWkOFhwSJqJL7DWH0T5zHIaEFHIqH7fhom33i3zzMRhr9dN8EEz HBsXQ7Nz+70KeirgXHiT7obMRX4FyqxBdc/pBRCmX6+FeCjUJjeRbnh0SKSkIf5c sdRq21EalbPJCdDhKji6YEMQf0USgVrLa2N2l3/iMaiGDv7Sh3MbxzseOlGj4/Hy TkR4OhmRkEi+6DYOBcgY9m5HQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSKCZRu I3KWnfjCKhPcWiQN89HkMB8GA1UdIwQYMBaAFIKnad10bIMfTE2ynWpl3gjWrZXt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjFBRS83NDkxMkIyQ0FD NzMxMUVGQTNDQkQxNEFDNEY5QUUwMi9ncWRwM1hSc2d4OU1UYktkYW1YZUNOYXRs ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dxZHAzWFJzZ3g5TVRiS2RhbVhlQ05hdGxlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjFBRS83NDkxMkIyQ0FDNzMxMUVGQTNDQkQxNEFDNEY5QUUwMi9ncWRwM1hSc2d4 OU1UYktkYW1YZUNOYXRsZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKpBtXsDCo0RMeaVPEBuh7FN+AneE2Wfrc4XA3NClsriVFVBeyn4FE 5wDmBJLoHohP2xstiLW5lgTLUwGZ7E2y443kj/YYKFj4FE7gcCrUMXhv7f0T2vUQ i7mjbvILtiC1xJNp9zTT0G8LdutCXjfeO4FmP4ZHGBkiO/6LVbj3o9oBzEXvsHvN FDb46/k5x4fZhgKiv68dNmu3osCZC1/FXxvKBEQzgy7SV4fI2TDHbuwf1g0mb7GZ sNKsSdec9WqzmbUGh48I8P328P9zkuqbdlWnH0SFLW9PRg2emObLFwgYpO10wUfz wvx1i3ro3Ho5AMpBmpqkin4LuUr7p5lk -----END CERTIFICATE-----Generated at Sat Dec 6 22:05:35 2025 by rpki-client