This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft File: gOPDrlGaTxg3WsakP1N6hf96KoI.mft (raw, json) Hash identifier: VxzYbRKS8RTbFmA8s44me/4qWC7j9ke+iaK2CBKrQo4= Subject key identifier: 83:43:B8:4B:49:3D:CB:B1:D8:73:AE:40:F4:15:8D:5C:59:F1:27:FC Authority key identifier: 80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82 Certificate issuer: /CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82 Certificate serial: 12B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft Manifest number: 12A3 Signing time: Mon 22 Dec 2025 16:47:35 +0000 Manifest this update: Mon 22 Dec 2025 16:47:35 +0000 Manifest next update: Mon 29 Dec 2025 16:47:35 +0000 Files and hashes: 1: gOPDrlGaTxg3WsakP1N6hf96KoI.crl (hash: 51JjSdhC2dCSmHJerEFLLPrp4mNvT2cpPNHJxjKP2zI=) 2: FCE4373ECAA011F0BE834809C4F9AE02.roa (hash: jvyNNRiqRA8v7WOUYd5fwMdRGCc1tnjDj8I4XdR2vBk=) 3: 54EA0F76D36B11EBADF6AD2CC4F9AE02.roa (hash: Sq85s45uXrl7JCtJVQFpetKJe1yt9d4AgSzwgFH0KeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4792 (0x12b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177358, serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82 Validity Not Before: Dec 22 16:47:35 2025 GMT Not After : Dec 29 16:47:35 2025 GMT Subject: CN=69497627-a17c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f8:84:35:90:96:79:cd:69:c8:17:0e:7e:43: ba:16:97:66:b7:be:22:ec:b3:79:bf:39:52:1b:d0: d2:3d:3b:31:83:d8:ac:fe:8a:b1:d1:0e:a0:2c:1f: d8:ff:72:e1:f2:70:8f:67:86:ca:d8:f4:a5:c5:5e: dd:19:03:f8:b2:d4:75:76:cc:db:5a:1d:e5:71:22: fb:b3:70:46:56:df:d4:9a:71:98:7e:27:09:f4:4a: 5d:bf:f0:e7:01:ea:66:07:a7:87:9b:3f:44:03:b4: 3b:3b:ec:cc:f6:6b:86:05:8b:8e:8a:8a:8c:3c:2d: 80:43:9c:87:e3:48:24:c3:f9:6c:a1:65:d6:4f:7d: cf:6d:eb:6f:6f:9f:13:36:42:03:d2:c0:3b:34:57: e1:33:f5:69:03:92:ff:87:df:70:8a:27:fd:6c:51: e4:41:00:e9:78:67:9a:d1:d0:31:43:75:98:14:4c: c3:08:43:5e:f0:f4:e2:2a:bc:8b:bf:f4:d5:27:76: bd:73:d8:a8:5e:16:2d:ec:84:f6:9b:74:2e:c7:0b: f5:71:fe:93:93:1c:a5:1a:a9:da:91:1c:23:2f:b3: 92:d7:3b:24:fd:8c:5b:88:f9:f9:ff:da:40:3d:a7: 9d:e7:43:9b:19:0f:88:8f:43:4f:27:a8:f1:d8:37: 11:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:43:B8:4B:49:3D:CB:B1:D8:73:AE:40:F4:15:8D:5C:59:F1:27:FC X509v3 Authority Key Identifier: keyid:80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:0c:d7:26:42:6e:1b:4c:1e:28:3b:de:62:97:ab:1a:10:4f: 0f:f2:3f:cd:bc:a5:df:9e:3e:7b:04:13:c8:fa:42:71:f1:83: 5f:42:c6:e2:3a:81:15:da:ec:c5:d9:75:04:7c:ee:95:51:27: df:81:03:8b:34:93:7b:25:df:94:c0:10:d6:b0:45:d2:31:8f: d9:fc:79:62:ae:8d:37:15:d7:0b:91:88:b9:64:bb:6b:d2:98: 61:42:8e:ac:16:88:5d:af:b5:e7:e6:ee:f4:46:45:d1:9b:90: 20:0b:25:2b:2b:c6:69:16:3c:78:1c:a3:d2:b3:36:57:11:28: a9:41:85:9a:61:75:8e:b7:4f:82:73:03:59:a0:12:7f:b5:f2: ff:63:86:76:84:74:84:3f:bc:ce:b2:85:07:fe:cd:51:8d:13: 6c:72:32:c8:03:6c:f4:51:cc:12:26:21:47:c5:71:c4:86:4c: e4:03:c5:85:da:ce:c7:45:96:e3:8d:a7:4e:89:55:2a:ec:87: 87:00:f7:28:ab:e3:d0:70:af:2e:53:a5:ac:a7:b1:b7:a3:65: 93:74:23:92:e3:8f:35:54:55:3d:62:a4:f7:61:23:05:d0:1b: a7:55:42:ce:a8:5b:55:cb:0b:a4:30:9a:cb:a6:c8:47:5b:20: a8:d3:ec:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICErgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzczNTgxMTAvBgNVBAUTKDgwRTNDM0FFNTE5QTRGMTgzNzVBQzZBNDNGNTM3QTg1 RkY3QTJBODIwHhcNMjUxMjIyMTY0NzM1WhcNMjUxMjI5MTY0NzM1WjAYMRYwFAYD VQQDDA02OTQ5NzYyNy1hMTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm/iENZCWec1pyBcOfkO6Fpdmt74i7LN5vzlSG9DSPTsxg9is/oqx0Q6gLB/Y /3Lh8nCPZ4bK2PSlxV7dGQP4stR1dszbWh3lcSL7s3BGVt/UmnGYficJ9Epdv/Dn AepmB6eHmz9EA7Q7O+zM9muGBYuOioqMPC2AQ5yH40gkw/lsoWXWT33Pbetvb58T NkID0sA7NFfhM/VpA5L/h99wiif9bFHkQQDpeGea0dAxQ3WYFEzDCENe8PTiKryL v/TVJ3a9c9ioXhYt7IT2m3Quxwv1cf6TkxylGqnakRwjL7OS1zsk/YxbiPn5/9pA Paed50ObGQ+Ij0NPJ6jx2DcRKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINDuEtJ Pcux2HOuQPQVjVxZ8Sf8MB8GA1UdIwQYMBaAFIDjw65Rmk8YN1rGpD9TeoX/eiqC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzM1OC9CRTg0RjA5NERE MEIxMUU4ODU0NDlBNDBDNEY5QUUwMi9nT1BEcmxHYVR4ZzNXc2FrUDFONmhmOTZL b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPUERybEdhVHhnM1dzYWtQMU42aGY5NktvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzM1OC9CRTg0RjA5NEREMEIxMUU4ODU0NDlBNDBDNEY5QUUwMi9nT1BEcmxHYVR4 ZzNXc2FrUDFONmhmOTZLb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJDNcmQm4bTB4oO95il6saEE8P8j/NvKXfnj57BBPI+kJx8YNfQsbi OoEV2uzF2XUEfO6VUSffgQOLNJN7Jd+UwBDWsEXSMY/Z/Hliro03FdcLkYi5ZLtr 0phhQo6sFohdr7Xn5u70RkXRm5AgCyUrK8ZpFjx4HKPSszZXESipQYWaYXWOt0+C cwNZoBJ/tfL/Y4Z2hHSEP7zOsoUH/s1RjRNscjLIA2z0UcwSJiFHxXHEhkzkA8WF 2s7HRZbjjadOiVUq7IeHAPcoq+PQcK8uU6Wsp7G3o2WTdCOS4481VFU9YqT3YSMF 0BunVULOqFtVywukMJrLpshHWyCo0+xD -----END CERTIFICATE-----Generated at Tue Dec 23 21:32:54 2025 by rpki-client