This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft File: GKIzbZyhDwibn8urmxszkqIdId4.mft (raw, json) Hash identifier: Wj7B+WWSGZKFVQTGkkGNBsXaswm97ZVUkg/KU5KrTLw= Subject key identifier: 49:4D:78:D3:C8:C9:6B:18:D1:DE:5A:21:39:48:1F:CF:26:75:B4:43 Authority key identifier: 18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE Certificate issuer: /CN=A9199885/serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE Certificate serial: 34E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft Manifest number: 55F9 Signing time: Sat 20 Dec 2025 14:49:55 +0000 Manifest this update: Sat 20 Dec 2025 14:49:55 +0000 Manifest next update: Sat 27 Dec 2025 14:49:55 +0000 Files and hashes: 1: GKIzbZyhDwibn8urmxszkqIdId4.crl (hash: mYWraN5tcJ3xWXyA0Dn5IFO8T6yrPvmm0mPNBAaAs5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13542 (0x34e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199885, serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE Validity Not Before: Dec 20 14:49:55 2025 GMT Not After : Dec 27 14:49:55 2025 GMT Subject: CN=6946b793-cd48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7d:45:a1:c1:13:f5:c1:73:07:0a:26:38:d6: 8b:0f:41:b8:51:a1:da:2c:4d:de:85:8b:c6:53:28: d6:eb:47:df:98:5a:95:4c:8e:f2:ef:3b:b0:10:83: bd:f7:1a:1b:fa:ca:b7:ea:b3:b9:d9:13:50:1f:5d: 70:1f:40:0a:a7:cd:09:df:60:24:b1:2c:66:b2:8f: fc:54:0a:36:29:80:7d:72:f0:d6:e1:4d:84:a5:2a: 01:07:1a:f8:2d:b2:d6:1e:bd:b1:8f:7b:4e:e5:f1: f4:7b:40:48:27:00:40:f2:8c:be:94:0e:96:c9:0f: 0d:01:54:ba:39:1e:29:97:68:1b:f3:88:51:96:4f: f4:f0:6d:65:1a:e3:20:5d:13:ba:de:6f:99:ab:76: a1:75:5d:7f:62:5e:74:9d:52:f0:a2:19:b5:71:da: 1d:bd:c3:af:99:77:c6:67:87:a3:09:11:11:2e:cd: cf:61:1f:40:5e:26:d6:a8:fc:84:11:ff:a4:e3:a5: 1b:51:53:9e:61:75:66:f6:82:75:e7:32:8a:4b:20: 09:c1:41:77:32:bc:0b:fb:09:17:91:be:0a:fb:30: c4:e3:68:b8:4d:52:c7:55:77:6b:5f:d4:15:2f:d4: 72:a1:5d:f6:9f:ab:ea:b3:c4:ae:ca:42:de:d5:b0: f7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4D:78:D3:C8:C9:6B:18:D1:DE:5A:21:39:48:1F:CF:26:75:B4:43 X509v3 Authority Key Identifier: keyid:18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:51:7c:45:3e:c4:c4:4f:f6:76:5b:5c:07:39:5e:e2:da:6f: 29:a6:9c:55:62:5f:fe:cd:a9:1c:96:d3:e3:6c:a8:ef:90:48: 3c:a3:96:4c:64:48:17:58:99:52:6a:05:42:10:60:58:3d:b8: 22:86:6b:4d:5b:d5:a4:8b:37:e8:6e:97:a3:51:83:74:cd:b9: 21:28:ec:9a:cb:5a:62:2f:7e:62:c1:27:89:2f:d1:46:14:59: 4d:68:fc:15:6f:73:d1:ba:b5:14:d3:a8:81:ba:34:4b:f9:60: 36:c5:0f:36:93:aa:13:f2:31:0c:23:22:85:1a:7a:06:f0:68: 92:96:53:a5:42:55:1a:fb:42:fe:d4:54:01:7f:ea:dc:80:62: 6a:24:a0:9d:98:03:7f:ad:dc:87:73:02:53:a3:6a:dd:2a:59: ea:98:49:97:dc:50:b8:4e:ef:d2:63:d7:1f:b1:cb:c3:8f:c3: af:14:7a:fb:49:2f:b4:2a:ba:ba:e5:22:95:1d:be:b2:21:70: cd:d5:b5:80:b0:c8:98:12:42:24:09:6b:a3:c1:5d:7f:57:72: 19:9d:12:36:bc:3e:39:ac:ff:3e:05:4f:b2:5f:2a:b7:ef:da: 41:b8:24:d9:d5:23:4a:1c:4f:17:a3:d2:9a:de:53:60:44:5d: df:34:42:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4ODUxMTAvBgNVBAUTKDE4QTIzMzZEOUNBMTBGMDg5QjlGQ0JBQjlCMUIzMzky QTIxRDIxREUwHhcNMjUxMjIwMTQ0OTU1WhcNMjUxMjI3MTQ0OTU1WjAYMRYwFAYD VQQDDA02OTQ2Yjc5My1jZDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuX1FocET9cFzBwomONaLD0G4UaHaLE3ehYvGUyjW60ffmFqVTI7y7zuwEIO9 9xob+sq36rO52RNQH11wH0AKp80J32AksSxmso/8VAo2KYB9cvDW4U2EpSoBBxr4 LbLWHr2xj3tO5fH0e0BIJwBA8oy+lA6WyQ8NAVS6OR4pl2gb84hRlk/08G1lGuMg XRO63m+Zq3ahdV1/Yl50nVLwohm1cdodvcOvmXfGZ4ejCRERLs3PYR9AXibWqPyE Ef+k46UbUVOeYXVm9oJ15zKKSyAJwUF3MrwL+wkXkb4K+zDE42i4TVLHVXdrX9QV L9RyoV32n6vqs8SuykLe1bD3fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElNeNPI yWsY0d5aITlIH88mdbRDMB8GA1UdIwQYMBaAFBiiM22coQ8Im5/Lq5sbM5KiHSHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg4NS9EMDUwNjg1QTFE OTgxMUUyQUU2QjFGODMwOEIwMkNEMi9HS0l6Ylp5aER3aWJuOHVybXhzemtxSWRJ ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dLSXpiWnloRHdpYm44dXJteHN6a3FJZElkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg4NS9EMDUwNjg1QTFEOTgxMUUyQUU2QjFGODMwOEIwMkNEMi9HS0l6Ylp5aER3 aWJuOHVybXhzemtxSWRJZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBUXxFPsTET/Z2W1wHOV7i2m8pppxVYl/+zakcltPjbKjvkEg8o5ZM ZEgXWJlSagVCEGBYPbgihmtNW9WkizfobpejUYN0zbkhKOyay1piL35iwSeJL9FG FFlNaPwVb3PRurUU06iBujRL+WA2xQ82k6oT8jEMIyKFGnoG8GiSllOlQlUa+0L+ 1FQBf+rcgGJqJKCdmAN/rdyHcwJTo2rdKlnqmEmX3FC4Tu/SY9cfscvDj8OvFHr7 SS+0Krq65SKVHb6yIXDN1bWAsMiYEkIkCWujwV1/V3IZnRI2vD45rP8+BU+yXyq3 79pBuCTZ1SNKHE8Xo9Ka3lNgRF3fNEKB -----END CERTIFICATE-----Generated at Sun Dec 21 08:50:11 2025 by rpki-client