This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft File: GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft (raw, json) Hash identifier: WA9iKBaJRnjhJ7l3pdfAZpHCdPMr6H+xCVy59h7+MUM= Subject key identifier: D6:F4:D2:95:B9:6F:CB:A7:F0:57:19:97:65:95:65:F5:C0:85:1F:A3 Authority key identifier: 19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22 Certificate issuer: /CN=A91475C0/serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522 Certificate serial: 1331 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft Manifest number: 131B Signing time: Mon 22 Dec 2025 16:44:14 +0000 Manifest this update: Mon 22 Dec 2025 16:44:14 +0000 Manifest next update: Mon 29 Dec 2025 16:44:14 +0000 Files and hashes: 1: GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl (hash: fccTmDgM4YvoXBlizzMstSB3zDp0cZYn/Q/NArDPeJc=) 2: 13F37A72C14C11E888561034C4F9AE02.roa (hash: OcsTl+dP77XmT0OkNzM4sC0UJay1bYkM67JEHkoHWvI=) 3: 1341A108C14C11E888561034C4F9AE02.roa (hash: Uq2fnJJSrxKP2pEC3QkwoSDKS4P2EBIZ+Y3CtV/h3x8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4913 (0x1331) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91475C0, serialNumber=19CA97F9ECB50C584D1BFBD6B745024139A01522 Validity Not Before: Dec 22 16:44:14 2025 GMT Not After : Dec 29 16:44:14 2025 GMT Subject: CN=6949755e-373e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:40:e4:b4:84:2d:6a:03:4b:1d:b9:cd:7f:fc: 04:7e:5d:1d:39:62:ab:c7:aa:48:64:ca:ea:28:fd: 3a:8e:93:a3:f0:ce:86:b9:41:94:02:47:df:eb:ae: 7f:42:e6:45:e2:1e:1c:f5:b7:19:31:51:6b:5f:f7: 88:19:bb:ff:db:f2:b4:06:5e:55:a7:aa:c1:7e:a7: 36:97:0b:b3:78:af:d3:99:50:d1:43:57:c1:27:6b: 0a:df:f8:c9:0a:af:3e:4f:53:83:8b:c0:ba:ec:16: 76:99:69:dc:8f:c0:23:f5:bd:11:8c:53:a0:73:7e: 87:6c:79:6e:f9:cc:04:1d:c3:53:41:73:25:49:f0: 44:60:41:ba:34:4e:ed:4f:08:ee:da:a4:17:15:17: 1e:75:9d:78:2d:e5:08:47:c5:d8:b7:80:5b:46:47: 12:e7:2f:5f:d2:74:2a:27:50:e7:fd:c3:21:1b:90: 55:9c:8e:10:9e:e9:f3:02:e8:ed:35:f9:46:b3:05: 06:26:0e:e6:88:81:a2:b1:86:68:5c:08:61:68:4d: 18:fa:4f:62:5c:9b:75:d4:d7:74:69:d8:4f:78:ce: eb:20:59:02:21:ce:1d:d6:56:9f:d3:75:7f:b1:83: 27:8f:b6:e2:e1:c9:b0:ae:ca:f4:7f:76:f9:29:fd: 85:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F4:D2:95:B9:6F:CB:A7:F0:57:19:97:65:95:65:F5:C0:85:1F:A3 X509v3 Authority Key Identifier: keyid:19:CA:97:F9:EC:B5:0C:58:4D:1B:FB:D6:B7:45:02:41:39:A0:15:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GcqX-ey1DFhNG_vWt0UCQTmgFSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91475C0/5A2C12ACC14B11E8B092E732C4F9AE02/GcqX-ey1DFhNG_vWt0UCQTmgFSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:2d:e7:d3:08:97:9d:53:ea:03:76:61:2f:51:fa:f5:fe:1c: e4:ca:1b:e6:b9:ae:37:10:f0:62:77:8b:20:fd:45:ed:fd:8f: 58:65:28:81:0b:7e:5f:42:3a:df:1d:49:b2:fb:db:fa:9f:64: d2:80:ed:0d:0c:4c:e0:a6:ba:d0:2e:f2:48:38:b1:c4:c7:02: f9:0a:59:78:46:5a:61:86:71:ff:fa:da:f3:a6:f4:19:8c:8a: 83:b4:06:dd:3f:0f:75:a1:d4:6c:5a:42:c4:a9:3d:c3:25:95: 82:9e:76:09:9a:0c:7a:30:48:5e:50:f5:da:b4:63:1e:76:41: 33:87:72:b3:33:6f:1d:07:8b:5e:55:a0:06:88:7a:8c:b4:de: 2d:53:bf:0b:4b:aa:d2:72:b1:42:55:4b:84:63:84:af:8c:d4: be:8f:33:08:31:db:e0:ba:fe:8d:30:7c:71:7b:f2:fe:ad:fd: 90:7a:e2:03:24:50:81:41:87:01:c2:ef:37:59:d1:af:49:8e: ef:f6:a4:fd:1a:5e:e6:a0:f2:17:ca:a2:8a:bf:94:a2:e6:62: 57:f3:11:e8:e0:2b:84:e7:e0:c8:9f:af:f0:a8:64:cb:d2:47: 47:7f:f5:b9:e7:84:9f:c3:67:ad:ad:e2:94:fd:03:ca:f0:3c: 5b:57:53:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc1QzAxMTAvBgNVBAUTKDE5Q0E5N0Y5RUNCNTBDNTg0RDFCRkJENkI3NDUwMjQx MzlBMDE1MjIwHhcNMjUxMjIyMTY0NDE0WhcNMjUxMjI5MTY0NDE0WjAYMRYwFAYD VQQDDA02OTQ5NzU1ZS0zNzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6EDktIQtagNLHbnNf/wEfl0dOWKrx6pIZMrqKP06jpOj8M6GuUGUAkff665/ QuZF4h4c9bcZMVFrX/eIGbv/2/K0Bl5Vp6rBfqc2lwuzeK/TmVDRQ1fBJ2sK3/jJ Cq8+T1ODi8C67BZ2mWncj8Aj9b0RjFOgc36HbHlu+cwEHcNTQXMlSfBEYEG6NE7t Twju2qQXFRcedZ14LeUIR8XYt4BbRkcS5y9f0nQqJ1Dn/cMhG5BVnI4QnunzAujt NflGswUGJg7miIGisYZoXAhhaE0Y+k9iXJt11Nd0adhPeM7rIFkCIc4d1laf03V/ sYMnj7bi4cmwrsr0f3b5Kf2FjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNb00pW5 b8un8FcZl2WVZfXAhR+jMB8GA1UdIwQYMBaAFBnKl/nstQxYTRv71rdFAkE5oBUi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzVDMC81QTJDMTJBQ0Mx NEIxMUU4QjA5MkU3MzJDNEY5QUUwMi9HY3FYLWV5MURGaE5HX3ZXdDBVQ1FUbWdG U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0djcVgtZXkxREZoTkdfdld0MFVDUVRtZ0ZTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzVDMC81QTJDMTJBQ0MxNEIxMUU4QjA5MkU3MzJDNEY5QUUwMi9HY3FYLWV5MURG aE5HX3ZXdDBVQ1FUbWdGU0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdLefTCJedU+oDdmEvUfr1/hzkyhvmua43EPBid4sg/UXt/Y9YZSiB C35fQjrfHUmy+9v6n2TSgO0NDEzgprrQLvJIOLHExwL5Cll4RlphhnH/+trzpvQZ jIqDtAbdPw91odRsWkLEqT3DJZWCnnYJmgx6MEheUPXatGMedkEzh3KzM28dB4te VaAGiHqMtN4tU78LS6rScrFCVUuEY4SvjNS+jzMIMdvguv6NMHxxe/L+rf2QeuID JFCBQYcBwu83WdGvSY7v9qT9Gl7moPIXyqKKv5Si5mJX8xHo4CuE5+DIn6/wqGTL 0kdHf/W554Sfw2etreKU/QPK8DxbV1P3 -----END CERTIFICATE-----Generated at Mon Dec 22 22:36:56 2025 by rpki-client