This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft File: gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft (raw, json) Hash identifier: XoA0q1JDRRblck4m5FZaxHWXERPDA7h93wz8ih8+NA4= Subject key identifier: 61:57:D4:74:BC:68:1C:60:5D:03:BD:68:4A:8E:1A:2F:5E:25:B6:84 Authority key identifier: 81:2F:F0:DE:1C:34:41:46:3C:C9:5C:A8:84:23:BE:5A:10:AD:B1:74 Certificate issuer: /CN=A914E4E2/serialNumber=812FF0DE1C3441463CC95CA88423BE5A10ADB174 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft Manifest number: 03 Signing time: Fri 19 Dec 2025 07:03:08 +0000 Manifest this update: Fri 19 Dec 2025 07:03:07 +0000 Manifest next update: Fri 26 Dec 2025 07:03:07 +0000 Files and hashes: 1: gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl (hash: O5WZEZRcnjiFeL+gKKGJnsuMjT/aMQ8SwO3ejZ/rNQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E4E2, serialNumber=812FF0DE1C3441463CC95CA88423BE5A10ADB174 Validity Not Before: Dec 19 07:03:07 2025 GMT Not After : Dec 26 07:03:07 2025 GMT Subject: CN=6944f8ac-17aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:37:c5:08:69:cf:3f:ea:ad:67:75:36:b1:aa: 75:05:1a:63:d4:cb:a1:4e:9d:24:58:ea:8c:64:5e: 7c:f6:02:21:41:e4:62:c7:ac:9c:2a:fb:4b:bd:5c: 82:04:24:5c:22:50:02:c6:0d:b3:a2:60:d0:12:07: 7a:1b:f5:d4:4e:a6:db:ef:b5:79:7d:fc:f4:17:91: 3b:d3:b4:aa:23:da:b1:18:58:41:fd:40:22:36:7a: 39:77:7b:3d:de:a6:50:03:a7:c9:be:46:d2:6d:47: 01:5d:ac:33:bc:d5:b2:6b:d1:fc:6f:f1:7d:42:69: 9b:12:1a:6e:1d:4f:54:88:ca:bf:a7:2e:ee:fc:e7: 48:2a:34:e3:0d:4b:3a:f6:25:a6:34:87:2a:7b:09: 58:06:50:04:9b:34:f4:db:a4:cf:32:72:b9:dc:62: 42:0c:68:86:b5:f9:0b:02:89:54:55:44:7d:19:a5: 7b:cd:f2:9a:01:22:8a:4d:f3:31:99:3c:57:ed:f3: cd:5d:a7:ac:54:9e:53:ad:dd:64:18:6b:68:4b:48: 9b:73:3a:d3:40:0c:a0:31:4e:79:41:ad:b8:45:da: 08:c3:ed:0d:b9:54:aa:9a:42:8d:ed:22:8f:49:ca: 5c:c3:12:5f:b5:09:4a:92:6a:a4:de:94:bc:78:bc: 71:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:57:D4:74:BC:68:1C:60:5D:03:BD:68:4A:8E:1A:2F:5E:25:B6:84 X509v3 Authority Key Identifier: keyid:81:2F:F0:DE:1C:34:41:46:3C:C9:5C:A8:84:23:BE:5A:10:AD:B1:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e5:9d:0e:48:26:22:5d:db:de:38:e3:90:29:45:bb:60:4e: 5b:6e:0a:1e:f5:8c:b2:2f:3a:18:8c:53:0e:67:23:a6:eb:01: 50:6b:de:a0:bc:29:92:7d:04:aa:60:96:01:56:c8:b0:e4:57: 7b:e9:f6:de:c0:36:49:2e:ab:14:86:06:e8:ff:0f:e3:e5:05: ea:4a:09:0a:ce:b6:73:37:34:69:3d:50:a3:30:62:d6:69:f2: 5d:85:b6:37:a7:0f:3a:0c:6c:11:2b:71:9b:ba:14:a3:a1:d4: d2:7c:31:e6:7a:60:9e:03:8a:d9:1e:6e:1d:23:1d:9e:11:69: 5d:c2:3f:99:97:5c:80:62:3e:e7:29:72:2a:7c:4f:30:2b:6e: f3:8f:4a:42:e6:d0:2c:1c:50:f5:59:0b:40:50:ab:a7:0d:a0: 84:16:9b:e6:f5:e5:65:db:ee:40:93:77:57:32:77:5a:52:8e: ae:14:14:17:4f:21:21:f1:25:d6:33:8f:0e:1c:03:b7:b2:3b: 8f:f7:5c:1c:05:60:b2:4a:91:c1:cf:fd:74:05:b0:e5:ec:40: 91:23:c5:5a:fd:59:16:22:5b:e8:38:06:f2:8b:75:e7:e3:b4: e9:cb:69:15:09:5b:2c:03:d9:ba:40:66:4d:87:e8:cb:06:14: f7:e4:cf:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTRFMjExMC8GA1UEBRMoODEyRkYwREUxQzM0NDE0NjNDQzk1Q0E4ODQyM0JFNUEx MEFEQjE3NDAeFw0yNTEyMTkwNzAzMDdaFw0yNTEyMjYwNzAzMDdaMBgxFjAUBgNV BAMMDTY5NDRmOGFjLTE3YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDON8UIac8/6q1ndTaxqnUFGmPUy6FOnSRY6oxkXnz2AiFB5GLHrJwq+0u9XIIE JFwiUALGDbOiYNASB3ob9dROptvvtXl9/PQXkTvTtKoj2rEYWEH9QCI2ejl3ez3e plADp8m+RtJtRwFdrDO81bJr0fxv8X1CaZsSGm4dT1SIyr+nLu7850gqNOMNSzr2 JaY0hyp7CVgGUASbNPTbpM8ycrncYkIMaIa1+QsCiVRVRH0ZpXvN8poBIopN8zGZ PFft881dp6xUnlOt3WQYa2hLSJtzOtNADKAxTnlBrbhF2gjD7Q25VKqaQo3tIo9J ylzDEl+1CUqSaqTelLx4vHHBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYVfUdLxo HGBdA71oSo4aL14ltoQwHwYDVR0jBBgwFoAUgS/w3hw0QUY8yVyohCO+WhCtsXQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFNEUyLzQxQ0U5REVFREFG QTExRjA5QUY2MTYyMDdDRDM2NDFEL2dTX3czaHcwUVVZOHlWeW9oQ08tV2hDdHNY US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZ1NfdzNodzBRVVk4eVZ5b2hDTy1XaEN0c1hRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF NEUyLzQxQ0U5REVFREFGQTExRjA5QUY2MTYyMDdDRDM2NDFEL2dTX3czaHcwUVVZ OHlWeW9oQ08tV2hDdHNYUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH7lnQ5IJiJd294445ApRbtgTltuCh71jLIvOhiMUw5nI6brAVBr3qC8 KZJ9BKpglgFWyLDkV3vp9t7ANkkuqxSGBuj/D+PlBepKCQrOtnM3NGk9UKMwYtZp 8l2FtjenDzoMbBErcZu6FKOh1NJ8MeZ6YJ4Ditkebh0jHZ4RaV3CP5mXXIBiPucp cip8TzArbvOPSkLm0CwcUPVZC0BQq6cNoIQWm+b15WXb7kCTd1cyd1pSjq4UFBdP ISHxJdYzjw4cA7eyO4/3XBwFYLJKkcHP/XQFsOXsQJEjxVr9WRYiW+g4BvKLdefj tOnLaRUJWywD2bpAZk2H6MsGFPfkz7I= -----END CERTIFICATE-----Generated at Sat Dec 20 00:28:11 2025 by rpki-client