This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft File: Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json) Hash identifier: Oj1mUX6IA6zzSdbHr9341VSbX33IlLgcvsc/tUfZ8D4= Subject key identifier: 45:34:26:99:34:D4:7E:FC:02:7D:8E:EB:26:4C:20:AB:1C:DB:CB:E9 Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Certificate serial: 03B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft Manifest number: 039E Signing time: Wed 17 Dec 2025 00:09:24 +0000 Manifest this update: Wed 17 Dec 2025 00:09:24 +0000 Manifest next update: Wed 24 Dec 2025 00:09:24 +0000 Files and hashes: 1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: Llpi+ANtfcsz/Ej9Ql95u4doaiEWIYH7v8+I++MPOGY=) 2: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: OVxLUiCstDCJM1i8OMKxBPVWt9kugvVdd+GEnlwY4Bo=) 3: 6E32028AD48511EF8239D526C4F9AE02.roa (hash: AA5WeVvXVNFXQwzizIn+RSDzp541QHk6IiOY/0z6xeo=) 4: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: p0+cMHyUatjT2WLso8zM+Qkj3qxalubJRFVPjXCEC7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 00:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 945 (0x3b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Validity Not Before: Dec 17 00:09:24 2025 GMT Not After : Dec 24 00:09:24 2025 GMT Subject: CN=6941f4b4-b3ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bc:d4:88:4f:01:34:a5:a9:86:b6:52:22:83: 9a:65:49:53:86:e3:92:a0:1c:5b:60:38:77:4b:8b: 32:0f:c4:6e:06:54:53:6f:82:2b:db:53:36:49:00: c4:82:c6:ff:f1:b8:58:0a:1a:05:7e:8e:5c:1e:77: ff:46:d0:f2:06:56:74:17:29:e8:f4:78:b1:df:4a: 86:06:0a:5a:67:2a:f3:47:39:ee:c9:01:94:11:36: 38:4c:07:72:ba:b4:dc:51:61:7a:4c:7c:d5:ad:27: b2:86:1a:07:ce:4a:d7:26:92:1a:98:81:94:53:02: f5:c6:0b:5c:9a:ea:b6:04:98:3b:7e:c2:7a:6f:34: bf:37:92:57:c3:84:6f:99:19:15:7b:a1:f4:7f:f6: 6c:00:0b:59:52:37:e8:cf:20:8e:5d:75:17:0b:a4: 16:7b:35:15:26:cc:bf:d2:f1:31:0b:28:69:2d:c2: 4e:55:4c:7e:72:e3:17:98:f8:c3:6e:85:84:01:24: f1:5f:d1:31:59:5f:17:ac:9a:79:2e:19:51:10:1d: 58:93:ac:98:c3:bb:32:fb:96:7e:9c:70:96:86:b2: 1b:c3:94:db:b3:a4:80:cd:a9:ce:b9:4d:03:eb:50: 0a:06:ae:8c:18:b3:cf:4f:10:89:f7:71:38:fa:f0: 27:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:34:26:99:34:D4:7E:FC:02:7D:8E:EB:26:4C:20:AB:1C:DB:CB:E9 X509v3 Authority Key Identifier: keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:f5:4a:98:fa:a7:b4:e2:1d:22:39:e7:ec:fa:27:e5:ce:e1: 06:b6:54:db:8d:99:04:44:bb:97:aa:85:9c:08:08:e4:26:7b: 2b:3e:69:a8:de:eb:bb:50:34:93:db:38:02:36:79:82:c0:9e: 86:8d:67:d4:c7:1b:4f:17:1b:d9:a2:9d:a6:a8:92:01:2a:40: 32:ac:26:e8:1f:f3:75:08:98:2c:7d:7a:29:23:7b:3a:93:f6: 55:3f:84:ef:b4:b5:9b:00:8b:b9:c6:ca:0b:6f:d8:52:47:39: ff:93:ea:3a:db:40:ef:e4:7d:e4:b0:5b:b7:f4:a3:78:88:69: c8:17:c5:cb:ee:8d:8a:35:c6:90:95:89:fc:f9:c3:ff:1d:ae: bd:b5:d9:66:13:b0:73:8e:38:e9:f3:b1:2b:1e:68:1c:af:cf: 4a:1a:fd:6b:22:a4:b3:44:62:a3:da:7c:93:d9:79:3c:2e:fa: 7d:22:ba:e7:6a:6b:4f:cc:de:5f:de:ff:e8:bd:7b:58:39:e8: 99:ab:bc:e6:31:19:a1:60:78:dc:98:28:20:6a:c6:52:8a:b8: 94:b7:51:95:b6:fb:89:fe:f0:b3:c0:ef:01:9d:3f:02:37:a3: 19:79:d5:56:f2:f6:bc:d9:a9:8f:9d:d8:47:75:e1:13:39:0e: b4:af:f1:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZDMkMxMTAvBgNVBAUTKDFBRDlCRDlEQzc3MzE1QkQxMDJEQUY1QUE5RjkyNTY2 QjJDMkZCOTkwHhcNMjUxMjE3MDAwOTI0WhcNMjUxMjI0MDAwOTI0WjAYMRYwFAYD VQQDDA02OTQxZjRiNC1iM2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07zUiE8BNKWphrZSIoOaZUlThuOSoBxbYDh3S4syD8RuBlRTb4Ir21M2SQDE gsb/8bhYChoFfo5cHnf/RtDyBlZ0Fyno9Hix30qGBgpaZyrzRznuyQGUETY4TAdy urTcUWF6THzVrSeyhhoHzkrXJpIamIGUUwL1xgtcmuq2BJg7fsJ6bzS/N5JXw4Rv mRkVe6H0f/ZsAAtZUjfozyCOXXUXC6QWezUVJsy/0vExCyhpLcJOVUx+cuMXmPjD boWEASTxX9ExWV8XrJp5LhlREB1Yk6yYw7sy+5Z+nHCWhrIbw5Tbs6SAzanOuU0D 61AKBq6MGLPPTxCJ93E4+vAnOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEU0Jpk0 1H78An2O6yZMIKsc28vpMB8GA1UdIwQYMBaAFBrZvZ3HcxW9EC2vWqn5JWaywvuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkMyQy9CMDRFOTE5Q0M1 MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZiMFFMYTlhcWZrbFpyTEMt NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d0bTluY2R6RmIwUUxhOWFxZmtsWnJMQy01ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkMyQy9CMDRFOTE5Q0M1MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZi MFFMYTlhcWZrbFpyTEMtNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl9UqY+qe04h0iOefs+iflzuEGtlTbjZkERLuXqoWcCAjkJnsrPmmo 3uu7UDST2zgCNnmCwJ6GjWfUxxtPFxvZop2mqJIBKkAyrCboH/N1CJgsfXopI3s6 k/ZVP4TvtLWbAIu5xsoLb9hSRzn/k+o620Dv5H3ksFu39KN4iGnIF8XL7o2KNcaQ lYn8+cP/Ha69tdlmE7Bzjjjp87ErHmgcr89KGv1rIqSzRGKj2nyT2Xk8Lvp9Irrn amtPzN5f3v/ovXtYOeiZq7zmMRmhYHjcmCggasZSiriUt1GVtvuJ/vCzwO8BnT8C N6MZedVW8va82amPndhHdeETOQ60r/Er -----END CERTIFICATE-----Generated at Thu Dec 18 08:53:17 2025 by rpki-client