This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft File: gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft (raw, json) Hash identifier: RODvbrS3J99MLQZmbBo0CeMn4SRmjKpUkYpU6eLgme4= Subject key identifier: 40:C4:AF:2F:99:81:F8:DB:E9:2D:72:85:35:DB:18:9C:61:8D:A2:DC Authority key identifier: 83:0D:CF:CB:5A:9A:A0:C7:FA:7D:7A:B9:98:9D:A2:34:3D:ED:2C:22 Certificate issuer: /CN=A911C005/serialNumber=830DCFCB5A9AA0C7FA7D7AB9989DA2343DED2C22 Certificate serial: 0972 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft Manifest number: 0966 Signing time: Mon 22 Dec 2025 19:31:21 +0000 Manifest this update: Mon 22 Dec 2025 19:31:21 +0000 Manifest next update: Mon 29 Dec 2025 19:31:21 +0000 Files and hashes: 1: gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl (hash: yDBb7scPl3WBLdYeqSAXMm8AQ7RpMWqjUwOscNYRlqU=) 2: B0071914AAE811EA8412810FC4F9AE02.roa (hash: ojZF8Xg4/gBKedLUsgMWVXrFZGNR/WxrXtUpw168pus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2418 (0x972) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C005, serialNumber=830DCFCB5A9AA0C7FA7D7AB9989DA2343DED2C22 Validity Not Before: Dec 22 19:31:21 2025 GMT Not After : Dec 29 19:31:21 2025 GMT Subject: CN=69499c89-2fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:57:d9:4c:7e:56:e2:ea:2c:7b:84:d3:ea:7f: fc:0f:0d:d8:19:11:9e:89:f2:cf:75:15:ea:b6:22: f7:8b:eb:f5:00:ea:ed:49:cf:ed:30:a2:95:c5:69: 69:b1:46:ac:d8:72:b6:31:84:69:eb:db:a8:79:37: 45:30:52:4e:38:ee:46:05:e9:80:48:f8:31:64:d1: 08:fc:06:b7:a9:1f:e4:28:d6:54:08:2e:6c:4b:05: 38:60:e7:d0:36:eb:41:fd:4a:65:88:af:3b:78:77: 28:ff:d9:af:ce:c6:89:ad:74:3d:a3:83:a4:28:29: 60:ae:5c:5b:3a:49:62:0a:fc:b4:f0:69:65:47:e8: 15:39:ac:70:e4:ed:35:49:3d:09:e3:6d:0b:f9:de: 3e:63:4b:d6:78:da:eb:cb:c5:b1:4e:09:c2:aa:d2: 9a:6c:7a:a4:12:b4:71:dc:bf:74:06:7c:15:b8:dd: 1c:e9:ff:d4:bb:93:47:ca:eb:3b:4c:52:1d:22:d5: ba:6d:ee:10:87:7d:0c:0c:6e:7f:a0:37:33:9d:92: d6:86:39:09:85:19:d9:b6:f5:77:c4:56:a1:6a:72: 92:24:3e:8c:0e:13:1d:8a:03:d5:2b:ae:c6:fa:a5: 2f:20:67:35:3e:0b:9e:86:48:70:3a:1d:b7:1b:7c: 73:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C4:AF:2F:99:81:F8:DB:E9:2D:72:85:35:DB:18:9C:61:8D:A2:DC X509v3 Authority Key Identifier: keyid:83:0D:CF:CB:5A:9A:A0:C7:FA:7D:7A:B9:98:9D:A2:34:3D:ED:2C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:c6:a8:6d:03:75:3c:b8:57:aa:45:c7:c7:96:f2:78:94:cb: f6:5b:65:ec:c6:72:66:2f:0e:f0:d0:80:02:c7:62:3a:51:90: 50:d4:e1:75:fb:e0:22:b2:1a:50:d9:0b:fb:7d:31:a9:6a:4f: 35:dc:72:ee:03:e6:44:66:41:5e:16:76:59:24:11:b1:c8:8e: ab:60:24:cd:98:f3:2e:a8:f2:d1:fd:80:20:b2:bc:2b:2c:f0: 56:31:91:f8:00:3d:05:d7:a3:0e:84:c6:1c:e4:22:21:d6:93: 7c:e1:9a:3c:78:29:a3:18:85:c4:9d:76:7d:90:9d:8f:af:53: 93:93:7c:4f:31:2f:3b:05:d0:2a:f7:ce:7c:17:49:c7:af:04: c8:46:75:dc:52:9a:51:b3:71:a9:e3:86:2b:2b:a4:bb:34:f3: f6:46:b4:dd:96:99:83:c4:12:9f:30:ed:07:6d:0a:76:3d:6f: b2:35:f5:2b:d7:6c:d1:ca:35:25:81:2d:ba:2d:22:11:b2:7e: 78:9a:91:68:cc:40:87:3d:4d:63:8b:ac:ab:e0:21:ef:f4:74: 0b:7b:3f:ff:4b:f0:e3:6e:64:ef:3d:de:03:7b:91:08:86:de: 07:d6:25:c9:fa:71:26:d6:9f:f2:7f:82:fe:b2:b4:75:2a:a9: a7:7c:be:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMwMDUxMTAvBgNVBAUTKDgzMERDRkNCNUE5QUEwQzdGQTdEN0FCOTk4OURBMjM0 M0RFRDJDMjIwHhcNMjUxMjIyMTkzMTIxWhcNMjUxMjI5MTkzMTIxWjAYMRYwFAYD VQQDDA02OTQ5OWM4OS0yZmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1fZTH5W4uose4TT6n/8Dw3YGRGeifLPdRXqtiL3i+v1AOrtSc/tMKKVxWlp sUas2HK2MYRp69uoeTdFMFJOOO5GBemASPgxZNEI/Aa3qR/kKNZUCC5sSwU4YOfQ NutB/UpliK87eHco/9mvzsaJrXQ9o4OkKClgrlxbOkliCvy08GllR+gVOaxw5O01 ST0J420L+d4+Y0vWeNrry8WxTgnCqtKabHqkErRx3L90BnwVuN0c6f/Uu5NHyus7 TFIdItW6be4Qh30MDG5/oDcznZLWhjkJhRnZtvV3xFahanKSJD6MDhMdigPVK67G +qUvIGc1PguehkhwOh23G3xzHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDEry+Z gfjb6S1yhTXbGJxhjaLcMB8GA1UdIwQYMBaAFIMNz8tamqDH+n16uZidojQ97Swi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzAwNS84Q0E2ODI3NkFB RTcxMUVBQTkxMjJCMEVDNEY5QUUwMi9ndzNQeTFxYW9NZjZmWHE1bUoyaU5EM3RM Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3M1B5MXFhb01mNmZYcTVtSjJpTkQzdExDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzAwNS84Q0E2ODI3NkFBRTcxMUVBQTkxMjJCMEVDNEY5QUUwMi9ndzNQeTFxYW9N ZjZmWHE1bUoyaU5EM3RMQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxxqhtA3U8uFeqRcfHlvJ4lMv2W2XsxnJmLw7w0IACx2I6UZBQ1OF1 ++AishpQ2Qv7fTGpak813HLuA+ZEZkFeFnZZJBGxyI6rYCTNmPMuqPLR/YAgsrwr LPBWMZH4AD0F16MOhMYc5CIh1pN84Zo8eCmjGIXEnXZ9kJ2Pr1OTk3xPMS87BdAq 9858F0nHrwTIRnXcUppRs3Gp44YrK6S7NPP2RrTdlpmDxBKfMO0HbQp2PW+yNfUr 12zRyjUlgS26LSIRsn54mpFozECHPU1ji6yr4CHv9HQLez//S/DjbmTvPd4De5EI ht4H1iXJ+nEm1p/yf4L+srR1KqmnfL5H -----END CERTIFICATE-----Generated at Wed Dec 24 15:45:12 2025 by rpki-client