This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
File: GWhCPtbSSViApWptsCvGcpjF5oY.mft (raw, json)
Hash identifier: os6UtUeA+OWn4VIkBNBGw47xEgyswfqxKFeLDkqizuw=
Subject key identifier: C8:5D:BA:FD:7E:A9:C9:52:C2:95:6A:B0:0A:8B:E1:1F:62:20:D5:40
Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
Certificate issuer: /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
Certificate serial: 10DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
Manifest number: 10C2
Signing time: Sat 20 Dec 2025 17:03:55 +0000
Manifest this update: Sat 20 Dec 2025 17:03:54 +0000
Manifest next update: Sat 27 Dec 2025 17:03:54 +0000
Files and hashes: 1: GWhCPtbSSViApWptsCvGcpjF5oY.crl (hash: +3p7/6yURLIRBwh8aLKnuYzzZdKDnds8V4gBHU7EsoE=)
2: 2884888A717011E99BA2FB3DC4F9AE02.roa (hash: vyuDgVud8VeU+L1s3GBCpzmY/+n8YurORFgDE2x/P9Y=)
3: D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa (hash: EHJm/HiHyHS2wDLaVYk3k6uReoau+etZZWwlwm0AUaM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl
rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 17:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4316 (0x10dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D3A9, serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
Validity
Not Before: Dec 20 17:03:54 2025 GMT
Not After : Dec 27 17:03:54 2025 GMT
Subject: CN=6946d6fb-bfff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:a3:82:a7:87:12:67:0e:ae:b1:2c:84:db:
be:0e:c7:bb:ed:ce:2e:f7:73:b4:1a:53:0f:f3:22:
71:69:99:01:d5:16:d0:e1:82:45:34:65:07:c9:c1:
cd:ad:53:a3:c0:0b:9b:c9:70:47:e3:de:90:6a:62:
7b:fd:42:89:8e:91:dc:03:ce:95:45:09:8d:1c:a1:
56:32:89:11:11:52:3e:bd:30:6e:73:68:df:3e:20:
d6:a6:f8:b9:13:8a:10:57:f7:7f:39:12:65:67:7a:
9b:1b:3f:cb:06:b4:1a:32:87:23:19:33:c0:3b:c2:
bf:39:42:0f:ac:25:27:15:02:e1:3b:d6:26:33:9f:
92:b4:26:70:23:0c:f1:94:6b:9c:25:9b:40:f2:ad:
36:15:74:d3:95:69:ed:bd:28:34:55:4d:0f:08:03:
2c:7a:08:79:ee:41:91:94:86:9e:02:e5:05:1a:70:
92:41:90:65:e7:2e:3f:0e:d7:b4:27:8d:64:45:55:
8f:6c:0d:f9:f7:be:21:02:cd:66:10:f3:3c:38:1a:
4c:7e:c4:a5:62:fd:a9:f2:b0:0b:59:05:38:04:46:
f6:27:dd:4f:0d:b5:5b:79:45:fb:6c:b2:ed:fa:e1:
4a:ac:a8:34:21:73:c6:0e:ee:cb:d6:fe:17:48:57:
02:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5D:BA:FD:7E:A9:C9:52:C2:95:6A:B0:0A:8B:E1:1F:62:20:D5:40
X509v3 Authority Key Identifier:
keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4d:9f:2f:30:95:3d:3e:4f:c4:52:48:b4:c0:be:f5:7b:c8:
c0:75:6c:6c:c9:ce:dd:f1:62:f3:38:54:06:3c:d4:26:19:16:
c8:29:13:70:03:f8:a2:06:08:52:74:e1:9d:80:77:48:ba:22:
84:f4:9d:26:d4:a6:c6:65:ef:a3:62:87:81:72:98:14:d7:e0:
94:a7:d4:ba:d8:89:cd:e8:9f:3f:2b:b0:a8:fe:b8:cd:27:5f:
f4:63:55:50:24:01:09:01:4e:13:1c:ab:58:3f:a8:37:41:07:
6b:45:37:af:65:b5:bf:da:14:ba:54:c2:6a:d3:40:39:39:eb:
73:36:23:06:41:15:34:48:7f:ef:4e:99:93:da:51:9d:0a:d0:
e7:c8:a1:fc:34:a6:30:66:5a:0b:39:93:16:b3:64:00:a5:e8:
ef:56:be:a2:27:42:ae:b6:ab:77:cd:50:b3:53:7c:4e:73:9c:
3f:b3:d4:23:80:a5:8e:5a:b5:39:4c:fe:4f:ad:48:28:f8:5c:
9f:f3:a2:55:90:a9:df:96:1c:6e:5b:ad:07:9b:31:ae:91:cf:
b0:9f:25:27:9e:c1:1c:70:f1:b8:d7:95:fa:97:ae:ac:6c:98:
0c:0f:c4:1a:c5:5d:d3:ce:be:be:9e:6d:8d:ee:ae:c5:10:e6:
dd:95:4b:6f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICENwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQzQTkxMTAvBgNVBAUTKDE5Njg0MjNFRDZEMjQ5NTg4MEE1NkE2REIwMkJDNjcy
OThDNUU2ODYwHhcNMjUxMjIwMTcwMzU0WhcNMjUxMjI3MTcwMzU0WjAYMRYwFAYD
VQQDDA02OTQ2ZDZmYi1iZmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtlGjgqeHEmcOrrEshNu+Dse77c4u93O0GlMP8yJxaZkB1RbQ4YJFNGUHycHN
rVOjwAubyXBH496QamJ7/UKJjpHcA86VRQmNHKFWMokREVI+vTBuc2jfPiDWpvi5
E4oQV/d/ORJlZ3qbGz/LBrQaMocjGTPAO8K/OUIPrCUnFQLhO9YmM5+StCZwIwzx
lGucJZtA8q02FXTTlWntvSg0VU0PCAMsegh57kGRlIaeAuUFGnCSQZBl5y4/Dte0
J41kRVWPbA35974hAs1mEPM8OBpMfsSlYv2p8rALWQU4BEb2J91PDbVbeUX7bLLt
+uFKrKg0IXPGDu7L1v4XSFcCkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhduv1+
qclSwpVqsAqL4R9iINVAMB8GA1UdIwQYMBaAFBloQj7W0klYgKVqbbArxnKYxeaG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDNBOS9CQjdGRkI4RTNB
OTIxMUU5QjUyRENGNTNDNEY5QUUwMi9HV2hDUHRiU1NWaUFwV3B0c0N2R2NwakY1
b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dXaENQdGJTU1ZpQXBXcHRzQ3ZHY3BqRjVvWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDNBOS9CQjdGRkI4RTNBOTIxMUU5QjUyRENGNTNDNEY5QUUwMi9HV2hDUHRiU1NW
aUFwV3B0c0N2R2NwakY1b1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAeTZ8vMJU9Pk/EUki0wL71e8jAdWxsyc7d8WLzOFQGPNQmGRbIKRNw
A/iiBghSdOGdgHdIuiKE9J0m1KbGZe+jYoeBcpgU1+CUp9S62InN6J8/K7Co/rjN
J1/0Y1VQJAEJAU4THKtYP6g3QQdrRTevZbW/2hS6VMJq00A5OetzNiMGQRU0SH/v
TpmT2lGdCtDnyKH8NKYwZloLOZMWs2QApejvVr6iJ0Kutqt3zVCzU3xOc5w/s9Qj
gKWOWrU5TP5PrUgo+Fyf86JVkKnflhxuW60HmzGukc+wnyUnnsEccPG415X6l66s
bJgMD8QaxV3Tzr6+nm2N7q7FEObdlUtv
-----END CERTIFICATE-----
Generated at Mon Dec 22 14:30:37 2025 by rpki-client