This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft File: GJHVTO9qkMIy_KiR45n5eDhnEe4.mft (raw, json) Hash identifier: fhhFBjltWXqTxSp+NHxpLwyXYTupNXvm09q5phv4Gnc= Subject key identifier: 50:AF:48:6C:CC:24:CD:BA:53:45:25:B7:DA:43:3B:C4:C7:E9:3A:01 Authority key identifier: 18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE Certificate issuer: /CN=A9128576/serialNumber=1891D54CEF6A90C232FCA891E399F978386711EE Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft Manifest number: A3 Signing time: Sun 07 Dec 2025 04:26:36 +0000 Manifest this update: Sun 07 Dec 2025 04:26:35 +0000 Manifest next update: Sun 14 Dec 2025 04:26:35 +0000 Files and hashes: 1: GJHVTO9qkMIy_KiR45n5eDhnEe4.crl (hash: JbFcPxokd+ZZi53Sybv1b7y3z7QT9hhLib3caSEOQko=) 2: C8BFCD96D7A411EF9AB81933C4F9AE02.roa (hash: Fo5VkT431J+zLy9igbQ3SFfIsb+FgMetIU9BycrAICA=) 3: C9B06ECCD7A411EF9AB81933C4F9AE02.roa (hash: ftkSUsDxtIg6s2jX13CXTFZ0keaCV5YjPDUyQbqNBxE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.crl rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 04:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128576, serialNumber=1891D54CEF6A90C232FCA891E399F978386711EE Validity Not Before: Dec 7 04:26:35 2025 GMT Not After : Dec 14 04:26:35 2025 GMT Subject: CN=693501fb-30d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:50:86:ae:7d:17:14:32:43:d0:b8:39:1e:3b: bb:f5:52:8e:3e:72:e1:6a:4f:67:8c:ae:82:16:5b: 73:61:2d:e2:68:04:4b:d9:f3:bb:a5:6c:5f:0a:2f: b8:47:d2:17:3b:9d:8a:d7:e4:b8:ca:8e:7f:17:1e: 51:14:33:97:dd:5d:09:c0:8b:6c:a1:d8:c1:26:b4: 81:f1:09:24:0d:ca:95:98:ee:10:48:9a:67:7f:bf: 5c:ab:f8:74:0e:70:60:a2:84:36:9d:2e:4a:64:10: d0:18:af:22:dd:4b:e8:19:ac:f6:68:9d:3f:61:61: 56:f5:75:f4:06:d7:99:60:a4:f1:a7:ae:a6:64:d6: 82:3e:b1:1d:d8:9c:85:41:4c:00:ad:09:d4:22:db: 6f:0d:a8:d8:c8:05:1f:f1:31:a2:9b:6b:63:48:13: b7:ee:e9:16:2b:f9:ba:44:a1:19:67:68:7d:2e:46: 19:a6:3a:b8:fb:08:23:c7:bf:ac:1b:08:bd:30:97: 33:c6:36:7e:74:ec:a0:86:cc:b0:a8:a4:5f:c1:83: 9c:03:5f:7d:c4:34:78:24:5f:a1:f5:b1:04:ab:07: 5c:b7:ba:64:2f:2b:a1:58:ff:80:ec:af:2c:a6:90: 1c:55:40:e1:cd:bb:0a:6f:1c:0c:a4:d3:5a:e8:5d: da:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AF:48:6C:CC:24:CD:BA:53:45:25:B7:DA:43:3B:C4:C7:E9:3A:01 X509v3 Authority Key Identifier: keyid:18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ba:61:85:20:4b:7e:cf:4d:99:71:7f:3f:6b:d9:46:a5:e5: cd:ab:12:6c:b9:9e:a4:93:1c:ef:6b:26:c1:2a:ea:ae:ff:d5: d2:fc:48:c9:09:0c:17:f3:bc:d0:6d:65:db:1f:b9:1a:9c:95: a9:c2:e5:bb:4d:e8:db:dc:4d:34:d4:fb:da:4d:8d:94:77:87: 91:78:85:f7:5f:f4:d5:bd:33:59:47:21:82:f6:fd:e9:8e:ce: 3e:be:e8:13:1d:c5:8d:33:38:b9:49:5a:61:13:88:9c:1a:02: f9:85:46:9d:33:c8:cb:4b:71:a0:f9:89:45:5c:ac:b7:be:74: 89:17:0b:ab:42:81:ff:93:5a:a9:a5:9e:37:89:94:8e:66:a0: 61:2b:ed:be:8d:f0:dc:4a:ae:19:95:ac:b1:23:eb:75:dd:66: d8:d6:ff:78:07:5c:9f:5d:65:97:d0:e4:c2:74:ed:68:9f:9a: 2a:5b:39:36:d1:04:f6:3b:16:3e:fd:05:0c:c1:cd:4f:7d:17: 95:ee:47:27:2a:3f:47:1d:dd:fe:23:4a:18:dd:e3:e5:ab:48: 91:34:04:ee:ed:1a:c4:cf:6d:57:f0:3d:00:c9:e7:0f:0f:eb: d8:88:6a:cd:06:3a:37:be:ff:24:34:4e:fc:af:72:a9:18:5d: 4c:79:b7:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1NzYxMTAvBgNVBAUTKDE4OTFENTRDRUY2QTkwQzIzMkZDQTg5MUUzOTlGOTc4 Mzg2NzExRUUwHhcNMjUxMjA3MDQyNjM1WhcNMjUxMjE0MDQyNjM1WjAYMRYwFAYD VQQDEw02OTM1MDFmYi0zMGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FCGrn0XFDJD0Lg5Hju79VKOPnLhak9njK6CFltzYS3iaARL2fO7pWxfCi+4 R9IXO52K1+S4yo5/Fx5RFDOX3V0JwItsodjBJrSB8QkkDcqVmO4QSJpnf79cq/h0 DnBgooQ2nS5KZBDQGK8i3UvoGaz2aJ0/YWFW9XX0BteZYKTxp66mZNaCPrEd2JyF QUwArQnUIttvDajYyAUf8TGim2tjSBO37ukWK/m6RKEZZ2h9LkYZpjq4+wgjx7+s Gwi9MJczxjZ+dOyghsywqKRfwYOcA199xDR4JF+h9bEEqwdct7pkLyuhWP+A7K8s ppAcVUDhzbsKbxwMpNNa6F3aSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCvSGzM JM26U0Ult9pDO8TH6ToBMB8GA1UdIwQYMBaAFBiR1UzvapDCMvyokeOZ+Xg4ZxHu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU3Ni8yREU5NEE5QUQ3 QTQxMUVGOTY0RDZEN0NDNEY5QUUwMi9HSkhWVE85cWtNSXlfS2lSNDVuNWVEaG5F ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dKSFZUTzlxa01JeV9LaVI0NW41ZURobkVlNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODU3Ni8yREU5NEE5QUQ3QTQxMUVGOTY0RDZEN0NDNEY5QUUwMi9HSkhWVE85cWtN SXlfS2lSNDVuNWVEaG5FZTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8umGFIEt+z02ZcX8/a9lGpeXNqxJsuZ6kkxzvaybBKuqu/9XS/EjJ CQwX87zQbWXbH7kanJWpwuW7Tejb3E001PvaTY2Ud4eReIX3X/TVvTNZRyGC9v3p js4+vugTHcWNMzi5SVphE4icGgL5hUadM8jLS3Gg+YlFXKy3vnSJFwurQoH/k1qp pZ43iZSOZqBhK+2+jfDcSq4ZlayxI+t13WbY1v94B1yfXWWX0OTCdO1on5oqWzk2 0QT2OxY+/QUMwc1PfReV7kcnKj9HHd3+I0oY3ePlq0iRNATu7RrEz21X8D0AyecP D+vYiGrNBjo3vv8kNE78r3KpGF1MebdB -----END CERTIFICATE-----Generated at Mon Dec 8 04:17:14 2025 by rpki-client