This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft File: GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft (raw, json) Hash identifier: 9hoTMQSGyqIkeQ4ZQ5E7AU969c0o3leXrerEB39OdRA= Subject key identifier: F9:F5:48:E1:10:90:AE:6A:AD:B2:E8:F4:AA:A2:D5:CF:7B:15:A9:F1 Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84 Certificate issuer: /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84 Certificate serial: 02FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft Manifest number: 02EA Signing time: Tue 23 Dec 2025 00:21:11 +0000 Manifest this update: Tue 23 Dec 2025 00:21:11 +0000 Manifest next update: Tue 30 Dec 2025 00:21:11 +0000 Files and hashes: 1: GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl (hash: /vhCxWjxEEN2nVERphjMy7FoaKQ2qNq+Co1MqXIocXg=) 2: CF0D85CEFE5211EFA5AB8F82C4F9AE02.roa (hash: gpdjBjddXDySP7XwpO7PUD9YoIqfcH1r8H5PmyuUxoY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 764 (0x2fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187F7E, serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84 Validity Not Before: Dec 23 00:21:11 2025 GMT Not After : Dec 30 00:21:11 2025 GMT Subject: CN=6949e077-8c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:02:94:24:8e:f1:3c:96:85:97:f9:8a:e5:43: f8:7d:c9:db:b8:cd:cd:d2:31:7d:99:a7:28:08:f8: 24:7c:ce:c2:e1:f8:94:78:56:0d:f2:6f:f6:f2:83: 26:69:0f:16:5a:f4:63:21:67:37:e8:ea:8b:0b:d4: c1:44:a7:4a:69:9a:b1:9d:0d:1d:a1:2c:5b:ff:45: 03:23:37:90:2b:a1:3d:6a:48:3e:23:7c:32:9a:dc: 02:06:4b:9d:be:1b:d3:b1:6a:8b:a1:31:34:b9:4b: 83:f8:35:57:16:d6:8c:cc:a4:33:8b:62:f5:e2:b9: 4a:c0:0e:c1:e0:0d:e7:b5:38:3f:69:6f:ec:07:ec: 4f:fa:62:47:5f:2e:1c:5c:a7:d9:80:d2:d6:94:8e: 63:fc:6b:f1:23:6b:cc:24:a8:40:92:9d:0b:cf:5a: b0:92:e5:71:e0:21:1c:97:f5:fa:5d:73:80:6b:b1: 4d:da:db:a8:54:48:5e:72:a7:94:3f:66:9b:33:7f: 65:99:86:31:ff:35:7b:34:0d:b4:f6:ba:7a:f6:1b: d9:13:b0:4a:48:85:35:de:4b:fc:b0:e3:3d:6c:1a: e8:a1:7f:a7:2b:c5:7c:5c:16:32:0f:c9:cc:0e:6b: 5e:40:9c:9e:d4:d0:c2:f1:bb:78:1a:91:f3:44:dd: aa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F5:48:E1:10:90:AE:6A:AD:B2:E8:F4:AA:A2:D5:CF:7B:15:A9:F1 X509v3 Authority Key Identifier: keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:93:35:02:cd:4f:eb:d9:1a:91:70:f3:38:9a:84:6b:81:b4: b6:c6:d0:fd:16:34:7b:39:4a:a3:80:7e:30:30:ce:1c:8c:8a: 95:2e:02:a3:e4:54:ef:76:1e:2a:f2:cd:bc:ea:c6:3d:2b:bb: ec:4c:a5:a4:54:f5:eb:17:27:59:9b:b6:44:94:0e:5b:34:03: f9:4d:d8:2f:78:c8:13:24:42:49:a5:65:3c:f2:78:03:e9:b4: 58:e0:f3:7e:13:41:23:36:76:fe:63:35:4d:70:69:44:ee:8e: d7:73:04:7a:f8:75:02:df:cd:e9:f1:b2:6c:d4:cc:81:fb:84: 12:0c:68:94:34:e9:08:d5:82:13:16:7c:d3:b7:5b:9d:ae:a3: 16:a8:cf:5d:4e:4d:96:93:45:a3:69:32:90:d2:e3:5e:08:ce: 86:7b:a1:d8:29:bc:65:e4:c6:26:ef:a4:48:ee:67:f7:e6:a0: 6e:bc:ee:be:d8:14:28:65:56:e1:c2:78:35:84:5f:ce:f0:04: c0:5f:01:cb:30:85:64:e5:fc:d3:5d:63:cf:b0:8d:bf:c5:e5: 53:3d:07:78:88:44:f1:44:f4:65:95:73:46:21:ea:0e:52:4d: c2:b0:cb:cc:ab:81:df:cc:48:b8:b1:3d:d9:ab:2e:66:56:28: bd:bc:90:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdGN0UxMTAvBgNVBAUTKDFBNjgyOTQxRjg3ODlDNENFQTNDQzMzQjYzNzNFNDk0 NzYzMEJDODQwHhcNMjUxMjIzMDAyMTExWhcNMjUxMjMwMDAyMTExWjAYMRYwFAYD VQQDDA02OTQ5ZTA3Ny04YzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnwKUJI7xPJaFl/mK5UP4fcnbuM3N0jF9macoCPgkfM7C4fiUeFYN8m/28oMm aQ8WWvRjIWc36OqLC9TBRKdKaZqxnQ0doSxb/0UDIzeQK6E9akg+I3wymtwCBkud vhvTsWqLoTE0uUuD+DVXFtaMzKQzi2L14rlKwA7B4A3ntTg/aW/sB+xP+mJHXy4c XKfZgNLWlI5j/GvxI2vMJKhAkp0Lz1qwkuVx4CEcl/X6XXOAa7FN2tuoVEhecqeU P2abM39lmYYx/zV7NA209rp69hvZE7BKSIU13kv8sOM9bBrooX+nK8V8XBYyD8nM DmteQJye1NDC8bt4GpHzRN2qTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPn1SOEQ kK5qrbLo9Kqi1c97FanxMB8GA1UdIwQYMBaAFBpoKUH4eJxM6jzDO2Nz5JR2MLyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0Y3RS9DNzYzQjVFMDEw RTkxMUVEODVDQ0VBMzdDNEY5QUUwMi9HbWdwUWZoNG5FenFQTU03WTNQa2xIWXd2 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dtZ3BRZmg0bkV6cVBNTTdZM1BrbEhZd3ZJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0Y3RS9DNzYzQjVFMDEwRTkxMUVEODVDQ0VBMzdDNEY5QUUwMi9HbWdwUWZoNG5F enFQTU03WTNQa2xIWXd2SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDkzUCzU/r2RqRcPM4moRrgbS2xtD9FjR7OUqjgH4wMM4cjIqVLgKj 5FTvdh4q8s286sY9K7vsTKWkVPXrFydZm7ZElA5bNAP5TdgveMgTJEJJpWU88ngD 6bRY4PN+E0EjNnb+YzVNcGlE7o7XcwR6+HUC383p8bJs1MyB+4QSDGiUNOkI1YIT FnzTt1udrqMWqM9dTk2Wk0WjaTKQ0uNeCM6Ge6HYKbxl5MYm76RI7mf35qBuvO6+ 2BQoZVbhwng1hF/O8ATAXwHLMIVk5fzTXWPPsI2/xeVTPQd4iETxRPRllXNGIeoO Uk3CsMvMq4HfzEi4sT3Zqy5mVii9vJBL -----END CERTIFICATE-----Generated at Wed Dec 24 16:01:07 2025 by rpki-client