This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft File: GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json) Hash identifier: B7qdjqKy+uSw937s0bKNRFdTPc59+Fuh+0bHouLxThQ= Subject key identifier: F6:94:76:8E:66:98:1A:A6:8B:AF:F8:6E:72:5D:63:8D:BB:5B:09:DC Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F Certificate issuer: /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Certificate serial: 09DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft Manifest number: 09CF Signing time: Sun 14 Dec 2025 19:25:21 +0000 Manifest this update: Sun 14 Dec 2025 19:25:20 +0000 Manifest next update: Sun 21 Dec 2025 19:25:20 +0000 Files and hashes: 1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: UQLJvdGRguP7p8QDM1Zv3xveGKrjGc5/3fd9bsM4tX4=) 2: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: AS8hUi479g1JOMhqd/DGudZL1BV4/ri0MrfNsHx+xyY=) 3: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: F610C7Ym+IbTxaB7/QFjiGQSnmA/MEfTbDdc0n6x2y4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 19:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2527 (0x9df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F Validity Not Before: Dec 14 19:25:20 2025 GMT Not After : Dec 21 19:25:20 2025 GMT Subject: CN=693f0f21-a3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cd:60:f1:c1:14:37:a5:fb:7b:d7:62:e9:45: 73:a4:7c:f8:c3:de:69:5a:cd:58:42:ef:35:1e:98: 91:81:f7:e1:f6:4d:7e:34:a6:91:63:63:2e:5d:4e: 9b:55:41:a4:38:0f:20:7d:33:ab:23:5e:5a:fb:c0: eb:38:3a:9f:62:41:3c:75:1e:60:d4:ce:0f:1a:f5: 2f:b8:30:a3:f1:48:ce:d0:9b:96:73:9b:37:d1:c7: 00:ef:d9:78:01:49:61:26:bb:00:26:6c:5b:87:84: e1:4c:6a:88:8f:1d:00:09:23:db:f7:25:16:a0:52: 27:11:34:d1:28:06:e8:82:c3:de:70:ac:6f:2f:05: 43:14:95:cf:b3:0f:1a:84:55:31:5b:a0:99:48:57: bb:92:9e:58:20:42:f2:95:55:e4:91:72:83:e4:2f: ad:9b:dc:74:5d:f2:c2:1b:b3:d2:12:c0:0f:87:e0: 62:2e:35:e5:6c:57:c8:8e:87:0d:4a:13:ce:f7:f6: 6f:b2:67:98:bd:60:89:12:2b:07:72:c3:6c:40:d6: 76:21:ec:cd:14:6d:ba:f8:65:57:31:3b:a0:2f:46: d2:cb:c3:5b:2c:a4:bc:87:b6:01:f9:4f:34:f5:73: f7:18:6a:bb:31:40:38:83:95:be:ca:22:fa:3f:79: 4e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:94:76:8E:66:98:1A:A6:8B:AF:F8:6E:72:5D:63:8D:BB:5B:09:DC X509v3 Authority Key Identifier: keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:07:f9:f3:b6:4a:20:f3:05:a8:d7:35:4b:26:1d:75:e8:b8: 55:77:13:7c:51:c8:9e:e8:88:49:e5:00:9c:06:8c:66:aa:80: e5:93:7e:b8:91:22:4d:97:c7:8d:0f:ba:65:67:53:38:52:8a: ff:29:cb:9d:36:5f:e0:5a:c7:e9:d7:fd:4d:78:a5:1e:19:0b: 8d:ac:4f:c3:84:69:dc:40:75:26:c4:53:ea:0a:b0:14:48:da: 7d:9f:d7:9f:69:47:c3:0e:f3:0f:5d:f9:11:ed:ac:1c:ed:30: d3:0e:ac:8e:28:11:e6:b3:53:04:74:77:67:44:56:77:08:d5: 86:4f:68:70:7a:ea:38:55:ee:c2:1f:f0:5e:29:5f:72:d5:a8: b8:af:50:44:5d:83:e2:b9:9d:67:15:fb:c2:6c:4e:7a:02:41: c5:26:e0:0f:dc:55:f6:8d:a7:cb:86:6a:a6:0a:6a:14:b1:0f: 3a:29:6a:a0:a3:d4:b3:66:23:16:d0:7e:cf:eb:b6:50:9d:42: ba:3c:8a:ce:47:15:f6:56:8b:41:96:43:73:80:7d:1b:a7:7a: cf:41:03:a7:d7:28:b2:0f:9e:21:8d:fd:23:b3:4b:b1:9d:0e: 77:d7:92:da:af:bf:80:f6:e1:eb:5f:0a:b6:dd:95:37:49:e1: da:23:74:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQUMxMTAvBgNVBAUTKDE4RDVDRkM4QUFGNTE3QjA3NkQxRkM5QzJFNjVGNjkx NDM1RDNBNUYwHhcNMjUxMjE0MTkyNTIwWhcNMjUxMjIxMTkyNTIwWjAYMRYwFAYD VQQDDA02OTNmMGYyMS1hM2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqc1g8cEUN6X7e9di6UVzpHz4w95pWs1YQu81HpiRgffh9k1+NKaRY2MuXU6b VUGkOA8gfTOrI15a+8DrODqfYkE8dR5g1M4PGvUvuDCj8UjO0JuWc5s30ccA79l4 AUlhJrsAJmxbh4ThTGqIjx0ACSPb9yUWoFInETTRKAbogsPecKxvLwVDFJXPsw8a hFUxW6CZSFe7kp5YIELylVXkkXKD5C+tm9x0XfLCG7PSEsAPh+BiLjXlbFfIjocN ShPO9/ZvsmeYvWCJEisHcsNsQNZ2IezNFG26+GVXMTugL0bSy8NbLKS8h7YB+U80 9XP3GGq7MUA4g5W+yiL6P3lO+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPaUdo5m mBqmi6/4bnJdY427WwncMB8GA1UdIwQYMBaAFBjVz8iq9RewdtH8nC5l9pFDXTpf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBQy82RUEzOUMwNjk0 MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3QjIwZnljTG1YMmtVTmRP bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dOWFB5S3IxRjdCMjBmeWNMbVgya1VOZE9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBQy82RUEzOUMwNjk0MkYxMUVBQjE2NDUyN0VDNEY5QUUwMi9HTlhQeUtyMUY3 QjIwZnljTG1YMmtVTmRPbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIB/nztkog8wWo1zVLJh116LhVdxN8Ucie6IhJ5QCcBoxmqoDlk364 kSJNl8eND7plZ1M4Uor/KcudNl/gWsfp1/1NeKUeGQuNrE/DhGncQHUmxFPqCrAU SNp9n9efaUfDDvMPXfkR7awc7TDTDqyOKBHms1MEdHdnRFZ3CNWGT2hweuo4Ve7C H/BeKV9y1ai4r1BEXYPiuZ1nFfvCbE56AkHFJuAP3FX2jafLhmqmCmoUsQ86KWqg o9SzZiMW0H7P67ZQnUK6PIrORxX2VotBlkNzgH0bp3rPQQOn1yiyD54hjf0js0ux nQ5315Lar7+A9uHrXwq23ZU3SeHaI3RC -----END CERTIFICATE-----Generated at Tue Dec 16 10:57:11 2025 by rpki-client