This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft File: GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft (raw, json) Hash identifier: oQ83/LZGVTt5lZ00fQqiEnPOrpG42hPMlSIDCi5wF6Q= Subject key identifier: DB:0E:37:05:F9:73:DD:2F:6C:77:3A:35:DD:62:E6:D4:CC:33:3C:EB Authority key identifier: 18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93 Certificate issuer: /CN=A9127D58/serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft Manifest number: 3B Signing time: Fri 05 Dec 2025 05:21:43 +0000 Manifest this update: Fri 05 Dec 2025 05:21:43 +0000 Manifest next update: Fri 12 Dec 2025 05:21:43 +0000 Files and hashes: 1: GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl (hash: 3vFvwDWVEPjdNqb31vnkKHB11AcoKmu05XEgBHW2u4I=) 2: 7B86E2347F0711F0B9016941C4F9AE02.roa (hash: wZT27F3LQkOVM0f/2rSyNQsd/VoaPgZq7TdT9xnpo2w=) 3: E09D5D9C7F0711F092740742C4F9AE02.roa (hash: CfbrIA0HCJd5bnnoqk4fH/y8a3ECzbTG+URIorF3jYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127D58, serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93 Validity Not Before: Dec 5 05:21:43 2025 GMT Not After : Dec 12 05:21:43 2025 GMT Subject: CN=69326be7-0e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bc:41:42:a1:60:25:64:d1:96:6e:c6:e2:6a: d7:cb:e4:89:fe:17:cb:a3:18:db:2f:cc:23:d5:88: 84:cd:1b:7c:ac:3d:0a:7f:57:b0:a2:38:43:c4:fd: 57:c6:ff:4a:7b:57:39:18:40:cf:eb:70:3e:cb:7a: 15:15:ad:a6:3e:b7:a0:5e:5d:7c:5e:71:62:b3:ff: f1:4f:5f:94:41:2d:85:6b:ef:3e:83:cd:19:8d:8c: 52:c4:c6:ae:92:ed:17:d1:fe:c9:fc:91:16:64:8f: ad:6a:61:f3:61:0f:de:24:79:fa:f9:44:ab:61:8b: f7:17:33:54:03:d3:d7:22:15:65:95:1e:d2:f7:70: f8:01:13:00:c5:d2:c3:61:5d:d3:6f:3f:5f:52:83: 51:99:01:ff:e5:c5:63:6d:48:62:18:eb:df:e8:1f: f2:54:fc:5c:be:63:d2:b1:60:c1:ae:19:0d:05:c2: 14:46:e6:7e:38:a9:ce:f1:db:7e:d2:f8:00:ca:06: e9:da:ec:b0:e2:bc:57:b3:f5:85:2d:89:c2:07:d3: 9a:b2:c8:30:b3:e2:e7:3b:fb:d0:03:8f:25:4d:1d: fc:da:37:c8:ac:69:06:30:76:f7:c5:b2:17:7e:cd: 92:5d:c7:ac:3e:36:b7:6e:c8:da:65:06:12:5e:47: 56:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0E:37:05:F9:73:DD:2F:6C:77:3A:35:DD:62:E6:D4:CC:33:3C:EB X509v3 Authority Key Identifier: keyid:18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:90:b4:80:8e:60:b5:9f:83:12:b2:73:ad:5e:33:d5:b5:09: cf:0e:f7:43:e9:ee:53:0d:b1:2f:92:ba:0d:ce:a0:ac:0a:d2: 5f:98:00:90:f4:9b:24:9b:93:c9:11:36:6a:b5:86:04:0b:c6: a6:c0:f6:d8:96:1c:02:47:86:cd:81:85:ae:a0:ff:1b:72:e6: 26:21:e1:15:21:2a:cc:5d:5e:4e:0b:96:22:33:df:62:3a:8b: 8c:2f:ae:a9:ea:dc:e8:75:71:f8:fd:b8:c7:53:8e:1c:5f:62: 3d:45:73:a9:54:8b:32:ff:c7:c7:2f:ae:71:db:ed:fc:ce:b2: e4:2e:0f:5d:f6:1b:a0:bc:a8:91:88:a3:36:46:4e:7e:bb:be: 3f:34:b6:9a:20:18:ee:b2:39:1e:6e:81:fd:79:95:1f:da:4c: f5:e9:7e:ac:6f:a0:e0:0f:42:05:f3:a6:99:6d:b5:88:0c:d9: 31:e0:fe:5a:40:68:5d:44:2b:b6:07:ad:c6:ae:af:b1:db:93: 06:16:7c:c8:a5:af:06:1c:7f:b8:be:cc:80:e7:a8:39:09:e1: 6a:bb:40:4f:db:96:4a:ea:d0:eb:4d:94:26:07:b0:44:1f:66: 80:7b:8c:01:2d:27:15:b2:94:93:e9:f5:52:76:4d:39:45:41: 5e:59:2a:6e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0Q1ODExMC8GA1UEBRMoMTgzRkE5MERDMzU1NkMxRDE2NTY4RUJFQkIxOEUyRkM1 QTc4MUQ5MzAeFw0yNTEyMDUwNTIxNDNaFw0yNTEyMTIwNTIxNDNaMBgxFjAUBgNV BAMTDTY5MzI2YmU3LTBlNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDvEFCoWAlZNGWbsbiatfL5In+F8ujGNsvzCPViITNG3ysPQp/V7CiOEPE/VfG /0p7VzkYQM/rcD7LehUVraY+t6BeXXxecWKz//FPX5RBLYVr7z6DzRmNjFLExq6S 7RfR/sn8kRZkj61qYfNhD94kefr5RKthi/cXM1QD09ciFWWVHtL3cPgBEwDF0sNh XdNvP19Sg1GZAf/lxWNtSGIY69/oH/JU/Fy+Y9KxYMGuGQ0FwhRG5n44qc7x237S +ADKBuna7LDivFez9YUticIH05qyyDCz4uc7+9ADjyVNHfzaN8isaQYwdvfFshd+ zZJdx6w+NrduyNplBhJeR1Y1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2w43Bflz 3S9sdzo13WLm1MwzPOswHwYDVR0jBBgwFoAUGD+pDcNVbB0WVo6+uxji/Fp4HZMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3RDU4LzU5RDA2QTEyN0Yw NjExRjA5NTIwNTkzQUM0RjlBRTAyL0dELXBEY05WYkIwV1ZvNi11eGppX0ZwNEha TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR0QtcERjTlZiQjBXVm82LXV4amlfRnA0SFpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 RDU4LzU5RDA2QTEyN0YwNjExRjA5NTIwNTkzQUM0RjlBRTAyL0dELXBEY05WYkIw V1ZvNi11eGppX0ZwNEhaTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALOQtICOYLWfgxKyc61eM9W1Cc8O90Pp7lMNsS+Sug3OoKwK0l+YAJD0 mySbk8kRNmq1hgQLxqbA9tiWHAJHhs2Bha6g/xty5iYh4RUhKsxdXk4LliIz32I6 i4wvrqnq3Oh1cfj9uMdTjhxfYj1Fc6lUizL/x8cvrnHb7fzOsuQuD132G6C8qJGI ozZGTn67vj80tpogGO6yOR5ugf15lR/aTPXpfqxvoOAPQgXzpplttYgM2THg/lpA aF1EK7YHrcaur7HbkwYWfMilrwYcf7i+zIDnqDkJ4Wq7QE/blkrq0OtNlCYHsEQf ZoB7jAEtJxWylJPp9VJ2TTlFQV5ZKm4= -----END CERTIFICATE-----Generated at Fri Dec 5 20:09:58 2025 by rpki-client