This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft File: gaDPnOmqqZDtGv6KgwpweHT5qr4.mft (raw, json) Hash identifier: kDVJehLlL8h/1svvpE3ocwb74osp+9wn0A0X23skk9w= Subject key identifier: F9:26:65:17:1A:79:BC:7F:30:AB:BD:F7:8A:B3:14:48:97:73:C8:F4 Authority key identifier: 81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE Certificate issuer: /CN=A9157450/serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft Manifest number: 0120 Signing time: Tue 23 Dec 2025 03:43:44 +0000 Manifest this update: Tue 23 Dec 2025 03:43:43 +0000 Manifest next update: Tue 30 Dec 2025 03:43:43 +0000 Files and hashes: 1: gaDPnOmqqZDtGv6KgwpweHT5qr4.crl (hash: knhDo3OqDq+5gw2MZjcbK1eL0c3jhjKCccmToVSthZM=) 2: B71C4F80253711EFA1D2A943C4F9AE02.roa (hash: H+qQQZmD1p/qPnv6XT6KRZsCtfSFefjGnHy0mI1YrpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157450, serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE Validity Not Before: Dec 23 03:43:43 2025 GMT Not After : Dec 30 03:43:43 2025 GMT Subject: CN=694a0fef-153b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e6:b0:50:1f:b5:f6:be:f0:26:b7:59:a4:6a: 76:4a:33:03:65:d7:a2:43:b5:72:30:17:6a:17:7d: 0d:9f:f3:ed:24:9e:87:f6:bc:58:b5:fd:23:33:19: bc:5b:a1:6e:bf:92:29:fa:79:02:65:f8:6a:30:56: 6e:70:44:39:f3:c5:74:5e:51:1f:ad:a2:12:ee:ba: ba:df:03:2d:df:af:6e:c7:b5:4a:97:08:98:2e:a2: 5b:6e:91:34:e4:cd:62:ba:6c:d4:e8:36:b2:e3:11: 55:af:20:58:83:d2:54:db:1d:c3:fa:14:46:65:b1: bd:5a:5d:c1:86:04:69:36:06:13:f6:65:a9:f9:3f: 46:e0:9f:12:04:05:9d:f9:b8:da:48:f2:e6:3b:af: cc:dd:84:79:53:fd:31:06:8e:0a:02:f6:fe:5d:88: 21:3f:11:c5:e6:4f:61:08:da:3c:55:68:d6:dc:a3: 7b:4f:4b:05:cb:7d:e2:d3:94:86:b7:ee:1f:8d:23: d5:b4:37:35:d3:23:47:9b:cd:41:4d:87:ac:f8:4a: 26:ae:ef:c2:d4:09:74:de:b5:b9:bb:d1:1b:51:3b: 73:3c:fc:a8:e1:77:fe:a8:28:c7:e7:d7:47:b7:0e: 2d:57:b9:3a:b3:77:c9:ce:77:27:5e:fc:5a:54:ef: 65:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:26:65:17:1A:79:BC:7F:30:AB:BD:F7:8A:B3:14:48:97:73:C8:F4 X509v3 Authority Key Identifier: keyid:81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption eb:9e:48:21:5c:f6:5f:7f:0b:73:37:19:7d:bd:ea:8d:e1:f4: af:9d:6a:91:aa:f1:8f:17:65:9f:21:68:c4:d4:72:59:9e:06: 9b:ab:cb:c8:38:4e:86:d8:89:d2:37:d4:39:25:1f:9a:8d:0b: ec:21:41:a4:46:ec:e0:7b:e1:4a:30:bf:2c:39:87:29:d8:a9: 33:40:fb:28:04:ee:77:1c:5a:4c:90:3b:65:5f:b7:1a:08:f6: 55:ce:34:72:52:04:77:3f:a7:d4:1c:96:d2:dc:56:2c:40:4c: 35:ba:ea:50:39:2f:e6:9a:1a:97:b7:92:da:63:8f:0c:9e:7f: fe:83:c6:ba:52:93:c8:6c:cb:f7:a2:39:63:64:82:40:4e:9b: 84:8d:f0:76:68:f5:7d:c5:65:dc:e1:04:2c:ea:e9:83:11:5f: 09:13:6d:24:81:56:8b:9a:a8:92:c6:5e:1b:bd:8a:57:08:50: 98:46:be:9a:45:33:e5:70:9f:b1:5e:ff:93:ae:10:f3:23:42: 60:5b:1d:f7:ff:16:04:0c:98:87:51:b8:91:77:6c:4a:f7:83: 50:41:50:01:a5:34:d7:51:07:e5:42:19:d0:37:f9:da:1a:a7: ac:69:9c:3c:2f:8b:e9:d3:6c:b4:98:d0:8e:88:a7:9c:be:12: 39:24:be:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc0NTAxMTAvBgNVBAUTKDgxQTBDRjlDRTlBQUE5OTBFRDFBRkU4QTgzMEE3MDc4 NzRGOUFBQkUwHhcNMjUxMjIzMDM0MzQzWhcNMjUxMjMwMDM0MzQzWjAYMRYwFAYD VQQDDA02OTRhMGZlZi0xNTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+awUB+19r7wJrdZpGp2SjMDZdeiQ7VyMBdqF30Nn/PtJJ6H9rxYtf0jMxm8 W6Fuv5Ip+nkCZfhqMFZucEQ588V0XlEfraIS7rq63wMt369ux7VKlwiYLqJbbpE0 5M1iumzU6Day4xFVryBYg9JU2x3D+hRGZbG9Wl3BhgRpNgYT9mWp+T9G4J8SBAWd +bjaSPLmO6/M3YR5U/0xBo4KAvb+XYghPxHF5k9hCNo8VWjW3KN7T0sFy33i05SG t+4fjSPVtDc10yNHm81BTYes+Eomru/C1Al03rW5u9EbUTtzPPyo4Xf+qCjH59dH tw4tV7k6s3fJzncnXvxaVO9l9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkmZRca ebx/MKu994qzFEiXc8j0MB8GA1UdIwQYMBaAFIGgz5zpqqmQ7Rr+ioMKcHh0+aq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzQ1MC84MkQ5QkEwNjI1 MzYxMUVGOUExQ0VGMjNDNEY5QUUwMi9nYURQbk9tcXFaRHRHdjZLZ3dwd2VIVDVx cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhRFBuT21xcVpEdEd2Nktnd3B3ZUhUNXFyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzQ1MC84MkQ5QkEwNjI1MzYxMUVGOUExQ0VGMjNDNEY5QUUwMi9nYURQbk9tcXFa RHRHdjZLZ3dwd2VIVDVxcjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDrnkghXPZffwtzNxl9veqN4fSvnWqRqvGPF2WfIWjE1HJZngabq8vI OE6G2InSN9Q5JR+ajQvsIUGkRuzge+FKML8sOYcp2KkzQPsoBO53HFpMkDtlX7ca CPZVzjRyUgR3P6fUHJbS3FYsQEw1uupQOS/mmhqXt5LaY48Mnn/+g8a6UpPIbMv3 ojljZIJATpuEjfB2aPV9xWXc4QQs6umDEV8JE20kgVaLmqiSxl4bvYpXCFCYRr6a RTPlcJ+xXv+TrhDzI0JgWx33/xYEDJiHUbiRd2xK94NQQVABpTTXUQflQhnQN/na GqesaZw8L4vp02y0mNCOiKecvhI5JL4b -----END CERTIFICATE-----Generated at Tue Dec 23 11:02:48 2025 by rpki-client