This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft File: GHdbe2us8oHq7XjadoaGguUxsfA.mft (raw, json) Hash identifier: g3eUYSOQGMMzjOUsKzyeTEsIBeKjXnlz4erN4Yf/GgA= Subject key identifier: 24:F9:86:A0:F5:F6:85:40:37:18:02:EB:83:BD:89:76:BB:CC:52:F2 Authority key identifier: 18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 Certificate issuer: /CN=A9115A98/serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Certificate serial: 108D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft Manifest number: 1084 Signing time: Mon 22 Dec 2025 17:03:13 +0000 Manifest this update: Mon 22 Dec 2025 17:03:12 +0000 Manifest next update: Mon 29 Dec 2025 17:03:12 +0000 Files and hashes: 1: GHdbe2us8oHq7XjadoaGguUxsfA.crl (hash: b6F3VJtoBipmBorJ5qWgI2PhsuNP+yCDpP7opC3XWnk=) 2: 6CE4307243AB11E98FAE6F0AC4F9AE02.roa (hash: bskjGki25S2tjkA4uEDOBCllOjX3cMsximD4ACjwrOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4237 (0x108d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115A98, serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Validity Not Before: Dec 22 17:03:12 2025 GMT Not After : Dec 29 17:03:12 2025 GMT Subject: CN=694979d1-d19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8b:cd:4a:21:1d:bf:4b:c3:23:9d:fb:ce:5a: 1d:34:86:40:39:25:cf:25:d8:a7:42:a5:64:fd:99: 62:ee:1e:08:04:a2:19:db:07:dc:76:f4:af:0b:09: 5f:44:dc:c6:67:4e:3f:0b:e4:a5:c9:3c:ce:34:5f: 6d:f4:53:95:03:5e:d6:16:32:78:83:a5:4a:62:e4: f4:45:72:7e:d8:24:5c:99:db:37:5d:1d:f6:59:ff: 79:e2:56:14:1a:0c:e8:95:b2:4d:0c:cd:39:d4:f2: 4d:0b:91:7f:ca:50:cf:7c:57:b4:3f:4e:c8:5b:f8: 71:58:81:84:d9:4b:2b:2c:b8:6f:97:5e:68:8a:75: 2b:3e:57:6a:5d:8a:a7:d3:8e:a8:e7:ae:c5:39:20: e9:a7:96:c1:3f:38:37:a7:c3:b9:c3:fc:6d:26:1c: 4a:a1:52:af:ea:8d:06:de:8d:a3:c1:a5:10:21:c1: aa:86:c2:f9:54:cd:a3:f4:a3:a7:24:92:85:94:62: b7:a1:97:d1:b8:a4:6b:55:dd:21:a9:fa:99:8c:2a: 13:f7:f0:e9:e5:79:ed:28:d2:32:63:c0:ad:18:eb: bc:b0:34:d9:cc:cb:f3:35:77:9e:f1:9b:70:79:5b: a3:b9:72:39:f2:87:a9:c6:5c:ad:3f:3a:f7:83:68: 7d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F9:86:A0:F5:F6:85:40:37:18:02:EB:83:BD:89:76:BB:CC:52:F2 X509v3 Authority Key Identifier: keyid:18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:37:1c:44:97:2d:e6:3b:7c:85:77:7c:9b:b8:68:fb:96:07: 71:f4:f1:73:10:41:ab:35:b8:06:21:9f:4a:67:cd:a2:ca:32: 3c:0e:3a:2e:4d:eb:0c:21:0e:f3:a3:c8:8a:e1:88:27:a0:77: 24:f8:54:fc:35:33:0b:5f:a2:f7:5d:0d:7e:71:47:c8:e3:95: bb:06:33:25:30:64:13:4e:70:7b:8a:78:23:29:67:40:16:8a: 82:91:46:8f:7c:f8:73:d0:16:d5:00:00:84:1f:72:ca:7f:05: b8:79:34:65:73:f5:1d:00:87:33:40:7a:36:e0:3e:b2:48:15: 92:ad:37:bd:b5:3c:c8:ac:5a:a4:d9:42:8d:97:85:03:aa:fd: a1:de:f8:d7:2b:aa:a5:68:c6:8d:c8:81:c7:07:60:8b:58:12: 7c:6f:cc:1f:8f:80:cb:bc:19:c3:69:44:cb:52:a8:d8:df:e4: 80:21:a9:7b:54:a5:11:89:3d:47:0d:3b:08:53:90:16:b8:75: 45:08:3e:81:87:2f:92:c9:f2:57:d6:58:fe:90:3e:5a:ae:37: c2:a8:93:8c:e7:9d:9b:73:26:e3:b7:9b:92:21:03:55:7f:a0: a3:cd:d1:e3:5e:a6:19:ed:c4:13:03:53:95:ac:88:e3:92:54: 07:d9:72:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBOTgxMTAvBgNVBAUTKDE4Nzc1QjdCNkJBQ0YyODFFQUVENzhEQTc2ODY4Njgy RTUzMUIxRjAwHhcNMjUxMjIyMTcwMzEyWhcNMjUxMjI5MTcwMzEyWjAYMRYwFAYD VQQDDA02OTQ5NzlkMS1kMTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIvNSiEdv0vDI537zlodNIZAOSXPJdinQqVk/Zli7h4IBKIZ2wfcdvSvCwlf RNzGZ04/C+SlyTzONF9t9FOVA17WFjJ4g6VKYuT0RXJ+2CRcmds3XR32Wf954lYU GgzolbJNDM051PJNC5F/ylDPfFe0P07IW/hxWIGE2UsrLLhvl15oinUrPldqXYqn 046o567FOSDpp5bBPzg3p8O5w/xtJhxKoVKv6o0G3o2jwaUQIcGqhsL5VM2j9KOn JJKFlGK3oZfRuKRrVd0hqfqZjCoT9/Dp5XntKNIyY8CtGOu8sDTZzMvzNXee8Ztw eVujuXI58oepxlytPzr3g2h9kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCT5hqD1 9oVANxgC64O9iXa7zFLyMB8GA1UdIwQYMBaAFBh3W3trrPKB6u142naGhoLlMbHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUE5OC8zMjNFQzRENDQz QTkxMUU5QTZDNDdEODRDNEY5QUUwMi9HSGRiZTJ1czhvSHE3WGphZG9hR2d1VXhz ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIZGJlMnVzOG9IcTdYamFkb2FHZ3VVeHNmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUE5OC8zMjNFQzRENDQzQTkxMUU5QTZDNDdEODRDNEY5QUUwMi9HSGRiZTJ1czhv SHE3WGphZG9hR2d1VXhzZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzNxxEly3mO3yFd3ybuGj7lgdx9PFzEEGrNbgGIZ9KZ82iyjI8Djou TesMIQ7zo8iK4YgnoHck+FT8NTMLX6L3XQ1+cUfI45W7BjMlMGQTTnB7ingjKWdA FoqCkUaPfPhz0BbVAACEH3LKfwW4eTRlc/UdAIczQHo24D6ySBWSrTe9tTzIrFqk 2UKNl4UDqv2h3vjXK6qlaMaNyIHHB2CLWBJ8b8wfj4DLvBnDaUTLUqjY3+SAIal7 VKURiT1HDTsIU5AWuHVFCD6Bhy+SyfJX1lj+kD5arjfCqJOM552bcybjt5uSIQNV f6CjzdHjXqYZ7cQTA1OVrIjjklQH2XLZ -----END CERTIFICATE-----Generated at Tue Dec 23 07:40:53 2025 by rpki-client