This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft File: GW-SdzKT5JVLTZel03rIIKdFwuA.mft (raw, json) Hash identifier: UtbomB3YH6FZ4coeYQNJtx7DDW5SLxKNJVSom+u1ISM= Subject key identifier: AA:D9:B6:8F:00:DB:5F:EB:FF:23:FB:30:EE:63:81:10:50:3D:37:86 Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0 Certificate issuer: /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0 Certificate serial: 0398 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft Manifest number: 036D Signing time: Tue 23 Dec 2025 00:02:55 +0000 Manifest this update: Tue 23 Dec 2025 00:02:54 +0000 Manifest next update: Tue 30 Dec 2025 00:02:54 +0000 Files and hashes: 1: GW-SdzKT5JVLTZel03rIIKdFwuA.crl (hash: xPmPZZJBI/Zn3vtnwEd2J/2Ns8+FZohRgCm9STVsQs8=) 2: EC6F91D234E111F0AC656B38C4F9AE02.roa (hash: E1WKt1YaZn8IuZR2WkpfcwtdDLc+dHKZAfiwmmiESyg=) 3: AEF7F896B23511EF99CCD73DC4F9AE02.roa (hash: zyZNP96AkvyazKN+7Z9uXIl84GYsJy6FhTmGH2JNTf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 920 (0x398) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917315B, serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0 Validity Not Before: Dec 23 00:02:54 2025 GMT Not After : Dec 30 00:02:54 2025 GMT Subject: CN=6949dc2e-5fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:91:d1:3a:ee:5d:21:f0:bd:8d:96:2e:13:06: 4b:17:52:78:a0:3d:f3:5f:14:0b:a1:4d:23:6f:b8: a4:3c:9b:00:d2:c5:48:d4:1e:66:a5:20:d5:35:79: a7:85:80:98:14:fc:55:2f:7f:04:55:23:40:25:27: a7:e8:49:f0:55:70:6a:cf:63:a0:dc:53:70:58:e6: fb:55:ce:ed:2d:88:d5:56:5a:2e:32:b6:1f:cd:1e: 70:6d:dc:a3:00:08:92:d4:dc:6c:17:20:19:2b:fa: 31:2a:33:a7:57:c5:9b:b9:d6:fa:fa:3a:be:78:f5: cc:e6:71:e9:79:58:1c:cd:48:ef:0f:7e:4e:fc:79: ec:f5:f5:61:1b:b9:30:6c:ba:a1:d6:5a:df:b3:27: 64:20:11:53:11:72:40:58:05:a0:cb:1a:b5:97:99: 81:fa:b6:ff:6f:aa:d3:27:9d:20:74:e6:a7:7d:76: 07:a7:b2:12:e2:0f:73:ba:63:1b:3a:f1:d6:57:53: 3c:7c:4e:7a:88:60:24:c4:d3:44:cd:eb:78:50:39: b5:99:89:94:28:fc:f4:27:5a:73:1f:3a:94:3b:85: 3f:42:0b:7c:fa:d5:ac:c0:20:68:42:5b:df:fb:ca: b9:d4:92:41:08:e8:ca:0e:0a:51:49:26:7e:6d:96: 76:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D9:B6:8F:00:DB:5F:EB:FF:23:FB:30:EE:63:81:10:50:3D:37:86 X509v3 Authority Key Identifier: keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:cf:74:4c:b0:81:3f:36:54:10:d2:09:ba:63:88:3b:b1:79: 32:61:e0:52:7d:78:7b:3e:10:22:d1:bc:ad:d3:ef:c4:8d:69: 8b:d2:41:52:e9:fa:cd:0d:f3:30:b2:96:56:59:38:38:d7:32: 31:7e:87:8a:0f:3c:b0:64:25:ed:7e:68:a7:04:d0:23:06:25: 9f:37:72:c4:01:c3:f9:6a:ad:53:d7:d0:e5:a8:b9:75:68:55: af:bf:85:5c:79:61:c9:8b:b9:74:07:6f:19:f7:b4:0c:6f:f1: 85:d1:fd:62:d9:00:04:62:ed:80:68:c9:f5:a7:07:c6:e7:9e: b8:bc:17:4c:8f:8e:6a:55:b0:4a:ce:e6:95:52:c8:03:ea:e4: f3:d6:35:d3:ed:20:7a:d5:85:ca:54:94:ce:5d:cb:e0:0e:06: f3:42:70:02:cb:71:18:18:c9:48:7b:97:f1:87:91:89:5b:f2: 41:cd:3a:3c:5d:54:50:ce:14:bd:cb:3f:eb:ee:bd:c7:88:86: 99:f7:8d:14:24:db:8e:dd:ae:5d:a1:d9:66:1d:c6:02:da:ac: be:91:53:9a:16:1e:0a:96:88:4d:dc:de:aa:db:28:4e:66:5f: 10:3a:9b:ef:02:73:c0:ef:55:9a:1e:04:8e:bf:87:0e:71:ef: 61:20:49:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMxNUIxMTAvBgNVBAUTKDE5NkY5Mjc3MzI5M0U0OTU0QjREOTdBNUQzN0FDODIw QTc0NUMyRTAwHhcNMjUxMjIzMDAwMjU0WhcNMjUxMjMwMDAwMjU0WjAYMRYwFAYD VQQDDA02OTQ5ZGMyZS01ZmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6JHROu5dIfC9jZYuEwZLF1J4oD3zXxQLoU0jb7ikPJsA0sVI1B5mpSDVNXmn hYCYFPxVL38EVSNAJSen6EnwVXBqz2Og3FNwWOb7Vc7tLYjVVlouMrYfzR5wbdyj AAiS1NxsFyAZK/oxKjOnV8Wbudb6+jq+ePXM5nHpeVgczUjvD35O/Hns9fVhG7kw bLqh1lrfsydkIBFTEXJAWAWgyxq1l5mB+rb/b6rTJ50gdOanfXYHp7IS4g9zumMb OvHWV1M8fE56iGAkxNNEzet4UDm1mYmUKPz0J1pzHzqUO4U/Qgt8+tWswCBoQlvf +8q51JJBCOjKDgpRSSZ+bZZ2AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrZto8A 21/r/yP7MO5jgRBQPTeGMB8GA1UdIwQYMBaAFBlvkncyk+SVS02XpdN6yCCnRcLg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE1Qi9ENzM1QTNCNEVE NEIxMUVDQTk1NTM3NzhDNEY5QUUwMi9HVy1TZHpLVDVKVkxUWmVsMDNySUlLZEZ3 dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dXLVNkektUNUpWTFRaZWwwM3JJSUtkRnd1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzE1Qi9ENzM1QTNCNEVENEIxMUVDQTk1NTM3NzhDNEY5QUUwMi9HVy1TZHpLVDVK VkxUWmVsMDNySUlLZEZ3dUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuz3RMsIE/NlQQ0gm6Y4g7sXkyYeBSfXh7PhAi0byt0+/EjWmL0kFS 6frNDfMwspZWWTg41zIxfoeKDzywZCXtfminBNAjBiWfN3LEAcP5aq1T19DlqLl1 aFWvv4VceWHJi7l0B28Z97QMb/GF0f1i2QAEYu2AaMn1pwfG5564vBdMj45qVbBK zuaVUsgD6uTz1jXT7SB61YXKVJTOXcvgDgbzQnACy3EYGMlIe5fxh5GJW/JBzTo8 XVRQzhS9yz/r7r3HiIaZ940UJNuO3a5dodlmHcYC2qy+kVOaFh4KlohN3N6q2yhO Zl8QOpvvAnPA71WaHgSOv4cOce9hIEll -----END CERTIFICATE-----Generated at Tue Dec 23 22:42:23 2025 by rpki-client