This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft File: GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft (raw, json) Hash identifier: MJ0Go1x2wbTUj9BJ+7018HN7uZVJbsb0U/zA06Iv/Tw= Subject key identifier: 2E:72:EB:43:FE:0F:2D:18:C1:47:80:02:33:F2:F3:E8:8B:B0:BB:56 Authority key identifier: 18:99:AA:64:15:67:05:33:22:49:38:FA:A6:65:52:96:18:3E:43:8F Certificate issuer: /CN=A9126BDE/serialNumber=1899AA6415670533224938FAA6655296183E438F Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft Manifest number: 0A Signing time: Sun 21 Dec 2025 07:04:42 +0000 Manifest this update: Sun 21 Dec 2025 07:04:41 +0000 Manifest next update: Sun 28 Dec 2025 07:04:41 +0000 Files and hashes: 1: GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl (hash: 2JnDQGlZMsqe1I0QhHyR5tig4QL4ELuYdbNwpUALGJo=) 2: 5325F364D3FF11F09B7E5281C4F9AE02.roa (hash: +t//dZjkzkXJDvAy52svSHXrfp5hfXdLES5wulpQ2FA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126BDE, serialNumber=1899AA6415670533224938FAA6655296183E438F Validity Not Before: Dec 21 07:04:41 2025 GMT Not After : Dec 28 07:04:41 2025 GMT Subject: CN=69479c09-2d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ba:0d:f5:37:87:80:5b:e8:d4:d3:cc:cf:80: 69:ac:1e:2b:8e:2f:7b:5f:55:29:1f:d9:e7:07:49: 38:8b:4c:d5:99:ca:b6:06:2e:ec:88:ed:18:2a:1d: 26:84:30:f0:e0:88:a2:f2:33:6b:7b:64:08:be:19: 82:ea:a3:c1:63:c0:45:3d:ac:1a:2e:40:4b:2b:6a: 44:25:8d:d3:a0:df:20:ec:93:fe:f3:df:55:de:75: 71:6c:d7:bb:be:37:3e:37:30:bc:47:74:38:36:c2: a7:1b:bc:ae:90:05:21:fa:1b:6f:89:58:08:ee:e7: 32:67:0d:34:63:fd:4d:d2:78:3a:f6:2d:5a:8f:f0: 41:93:5a:c5:73:88:68:73:d1:22:2c:d5:4a:dd:9a: 7d:5a:5f:ce:37:18:be:03:39:ce:70:14:ef:9d:da: 76:8f:71:5f:24:4c:b4:82:b7:90:ec:a7:e1:f2:c8: a7:93:df:64:a0:ce:1c:0f:20:9f:20:b2:25:44:f8: 24:41:36:44:03:41:90:3e:8b:04:0d:7d:df:28:81: ff:07:1e:18:2e:65:f5:99:a6:2d:59:99:b2:b8:94: ff:49:80:8d:7d:de:2b:72:81:58:9c:22:36:62:91: 1b:07:98:e8:12:8e:4a:64:7d:0b:1f:6e:79:b3:96: 14:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:72:EB:43:FE:0F:2D:18:C1:47:80:02:33:F2:F3:E8:8B:B0:BB:56 X509v3 Authority Key Identifier: keyid:18:99:AA:64:15:67:05:33:22:49:38:FA:A6:65:52:96:18:3E:43:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:69:94:22:c9:06:ea:8f:4c:d6:be:cf:6d:25:e8:80:4d:74: 3b:6d:43:4c:7f:5b:1f:14:42:21:78:03:71:2c:a1:6f:48:82: 8f:8f:63:da:f9:da:f4:9f:6a:d8:08:d1:51:ad:50:46:d8:7a: 46:11:26:81:34:34:d1:71:f7:fd:56:ab:bb:b5:ba:16:07:76: ac:13:17:74:b7:38:9e:63:de:1b:b2:ff:0f:ce:ca:cb:c1:2f: 18:0f:16:fa:84:e3:4c:88:cc:4e:c1:ab:12:e5:c9:48:87:de: 5f:7f:9f:a7:b4:41:82:01:5c:30:1a:51:0c:40:4b:0b:70:33: 20:c8:fd:53:2d:b6:ed:bf:1b:8f:ba:85:fb:fc:a5:49:28:0c: 7d:6d:fd:4a:8c:3d:99:2d:8e:60:6e:d6:31:f2:22:d4:4b:78: d5:59:ed:5b:19:f1:61:5b:18:09:2d:72:c1:3c:06:20:84:36: b7:f3:7c:d3:7c:e6:39:58:02:16:64:ec:01:3e:f9:96:bc:99: fb:3b:1f:dd:4b:0c:31:fd:ee:93:bb:89:c8:38:4b:96:6a:b3: 9f:5c:76:6b:2b:e9:d1:ec:17:65:b6:41:47:4f:69:95:59:1b: a8:54:ad:ba:61:89:8b:fb:a4:64:98:0b:05:d9:89:73:97:3b: e0:94:55:dd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NkJERTExMC8GA1UEBRMoMTg5OUFBNjQxNTY3MDUzMzIyNDkzOEZBQTY2NTUyOTYx ODNFNDM4RjAeFw0yNTEyMjEwNzA0NDFaFw0yNTEyMjgwNzA0NDFaMBgxFjAUBgNV BAMMDTY5NDc5YzA5LTJkOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEug31N4eAW+jU08zPgGmsHiuOL3tfVSkf2ecHSTiLTNWZyrYGLuyI7RgqHSaE MPDgiKLyM2t7ZAi+GYLqo8FjwEU9rBouQEsrakQljdOg3yDsk/7z31XedXFs17u+ Nz43MLxHdDg2wqcbvK6QBSH6G2+JWAju5zJnDTRj/U3SeDr2LVqP8EGTWsVziGhz 0SIs1Urdmn1aX843GL4DOc5wFO+d2naPcV8kTLSCt5Dsp+HyyKeT32SgzhwPIJ8g siVE+CRBNkQDQZA+iwQNfd8ogf8HHhguZfWZpi1ZmbK4lP9JgI193itygVicIjZi kRsHmOgSjkpkfQsfbnmzlhSJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULnLrQ/4P LRjBR4ACM/Lz6Iuwu1YwHwYDVR0jBBgwFoAUGJmqZBVnBTMiSTj6pmVSlhg+Q48w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2QkRFLzM5QkMwNDk4RDNG QzExRjBBNzBENjQzMkM0RjlBRTAyL0dKbXFaQlZuQlRNaVNUajZwbVZTbGhnLVE0 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR0ptcVpCVm5CVE1pU1RqNnBtVlNsaGctUTQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI2 QkRFLzM5QkMwNDk4RDNGQzExRjBBNzBENjQzMkM0RjlBRTAyL0dKbXFaQlZuQlRN aVNUajZwbVZTbGhnLVE0OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKNplCLJBuqPTNa+z20l6IBNdDttQ0x/Wx8UQiF4A3EsoW9Igo+PY9r5 2vSfatgI0VGtUEbYekYRJoE0NNFx9/1Wq7u1uhYHdqwTF3S3OJ5j3huy/w/OysvB LxgPFvqE40yIzE7BqxLlyUiH3l9/n6e0QYIBXDAaUQxASwtwMyDI/VMttu2/G4+6 hfv8pUkoDH1t/UqMPZktjmBu1jHyItRLeNVZ7VsZ8WFbGAktcsE8BiCENrfzfNN8 5jlYAhZk7AE++Za8mfs7H91LDDH97pO7icg4S5Zqs59cdmsr6dHsF2W2QUdPaZVZ G6hUrbphiYv7pGSYCwXZiXOXO+CUVd0= -----END CERTIFICATE-----Generated at Sun Dec 21 08:12:49 2025 by rpki-client