This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft File: GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft (raw, json) Hash identifier: 5zbrXjY8rHvbjW8Q6rR+Zac4fhL3VstgOx8IU7FX3+c= Subject key identifier: B9:DC:FA:89:F2:10:51:44:18:BF:2E:CA:FF:5D:B9:90:C3:33:29:F0 Authority key identifier: 1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 Certificate issuer: /CN=A9174C93/serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Certificate serial: 0C90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft Manifest number: 0C88 Signing time: Mon 22 Dec 2025 18:04:26 +0000 Manifest this update: Mon 22 Dec 2025 18:04:25 +0000 Manifest next update: Mon 29 Dec 2025 18:04:25 +0000 Files and hashes: 1: GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl (hash: bSfk8TsTWELU7yhUc/5IGV4dSIeftUEnbqtajOg7ORg=) 2: C300B2460C2811EAA5153045C4F9AE02.roa (hash: NG87DnznnSO4SFH6RPE3pwKGFEdLouyBdOYhn2LMujw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3216 (0xc90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C93, serialNumber=1B041605D6D8386CF7225D679B410348991FE233 Validity Not Before: Dec 22 18:04:25 2025 GMT Not After : Dec 29 18:04:25 2025 GMT Subject: CN=6949882a-8a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:16:cc:06:28:61:8a:96:c2:9a:2b:a2:4b:60: ad:53:bf:0e:df:d6:ff:94:cb:ab:35:5d:2e:d6:ac: 21:3f:46:33:38:dc:90:49:a3:d7:25:12:3f:ef:0b: d8:8a:4e:1c:d7:62:1d:a5:8d:0c:cb:47:06:6c:2b: 7e:aa:77:ee:c9:4c:07:1b:49:c0:45:e2:09:2e:6f: c3:89:b7:b2:ed:6c:71:15:ac:bd:29:5a:1e:02:e4: 17:5a:4f:0a:25:6f:d6:db:8e:08:69:cd:89:7a:22: fc:f8:c8:4a:25:bb:7d:df:69:e5:0f:b1:ac:cc:bb: 55:61:95:10:58:a8:cc:f8:33:97:2b:cd:bc:7a:ce: 84:4f:82:57:07:f0:e1:43:7f:32:d6:f6:2f:d6:42: 77:e4:e3:47:33:1d:7a:3a:98:e4:a9:21:89:66:fc: 20:f3:2e:7b:ab:63:0c:03:79:6b:8b:99:9e:44:55: 4b:30:77:0d:e5:29:48:9e:a7:2f:30:91:9c:e3:fb: 00:a4:7b:e3:58:53:e3:fd:62:a2:04:5c:37:b8:9c: d2:7d:60:b9:db:ab:da:5e:f4:06:9e:1d:0a:1a:59: ea:c3:a1:86:d7:97:92:16:42:2e:7b:8e:41:10:f0: 14:3c:7a:ba:b0:dd:8b:9e:e9:7a:42:59:89:72:07: 70:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DC:FA:89:F2:10:51:44:18:BF:2E:CA:FF:5D:B9:90:C3:33:29:F0 X509v3 Authority Key Identifier: keyid:1B:04:16:05:D6:D8:38:6C:F7:22:5D:67:9B:41:03:48:99:1F:E2:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwQWBdbYOGz3Il1nm0EDSJkf4jM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C93/C8E8B1F60C2611EA80EF4041C4F9AE02/GwQWBdbYOGz3Il1nm0EDSJkf4jM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:93:b4:0c:d0:a5:0e:dd:4c:52:0e:dc:f2:c4:f6:40:c7:7a: 5d:97:e3:95:6e:f1:9b:95:82:d9:b2:a4:8a:70:b2:ec:b3:1d: fc:94:9b:1e:30:09:89:de:e3:ce:2b:f0:18:e0:df:b2:7e:ee: 88:0c:9c:12:f3:c2:55:c3:f2:77:98:44:a3:c0:03:a9:f3:f1: 89:93:fa:0d:17:3a:7b:dd:63:f0:a1:9e:63:0e:23:2c:7d:e9: e1:2a:83:9b:6d:30:6a:d8:6c:26:e4:26:cd:cb:ec:6e:b6:1a: 3f:01:0a:e3:ba:77:8a:20:57:04:b6:2d:65:34:15:fe:29:5e: 8f:4f:49:44:55:6b:21:7a:6f:25:ff:43:78:4d:4f:4b:f4:20: 46:20:b3:4b:4c:9b:cb:2d:2f:da:d5:5b:35:47:29:ea:0e:46: 78:58:3f:f3:1f:81:dc:ed:9b:7d:34:ea:9e:ba:5e:28:24:30: 62:cd:be:1d:44:73:b2:5d:5a:7c:64:d0:b8:58:a6:b1:22:3a: 66:f6:69:f8:f1:4c:e5:78:25:12:3b:a8:a7:7a:b7:99:d8:22: 3b:ff:32:30:16:f4:49:f4:4b:6a:35:65:4f:43:3d:79:26:39: 7c:6d:5b:d2:77:7e:65:a8:d8:7a:d0:c8:e9:ab:21:e6:e7:1c: 3c:06:0f:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDOTMxMTAvBgNVBAUTKDFCMDQxNjA1RDZEODM4NkNGNzIyNUQ2NzlCNDEwMzQ4 OTkxRkUyMzMwHhcNMjUxMjIyMTgwNDI1WhcNMjUxMjI5MTgwNDI1WjAYMRYwFAYD VQQDDA02OTQ5ODgyYS04YTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7BbMBihhipbCmiuiS2CtU78O39b/lMurNV0u1qwhP0YzONyQSaPXJRI/7wvY ik4c12IdpY0My0cGbCt+qnfuyUwHG0nAReIJLm/Dibey7WxxFay9KVoeAuQXWk8K JW/W244Iac2JeiL8+MhKJbt932nlD7GszLtVYZUQWKjM+DOXK828es6ET4JXB/Dh Q38y1vYv1kJ35ONHMx16OpjkqSGJZvwg8y57q2MMA3lri5meRFVLMHcN5SlInqcv MJGc4/sApHvjWFPj/WKiBFw3uJzSfWC526vaXvQGnh0KGlnqw6GG15eSFkIue45B EPAUPHq6sN2Lnul6QlmJcgdwzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnc+ony EFFEGL8uyv9duZDDMynwMB8GA1UdIwQYMBaAFBsEFgXW2Dhs9yJdZ5tBA0iZH+Iz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEM5My9DOEU4QjFGNjBD MjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9HejNJbDFubTBFRFNKa2Y0 ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d3UVdCZGJZT0d6M0lsMW5tMEVEU0prZjRqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEM5My9DOEU4QjFGNjBDMjYxMUVBODBFRjQwNDFDNEY5QUUwMi9Hd1FXQmRiWU9H ejNJbDFubTBFRFNKa2Y0ak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwk7QM0KUO3UxSDtzyxPZAx3pdl+OVbvGblYLZsqSKcLLssx38lJse MAmJ3uPOK/AY4N+yfu6IDJwS88JVw/J3mESjwAOp8/GJk/oNFzp73WPwoZ5jDiMs fenhKoObbTBq2Gwm5CbNy+xutho/AQrjuneKIFcEti1lNBX+KV6PT0lEVWshem8l /0N4TU9L9CBGILNLTJvLLS/a1Vs1RynqDkZ4WD/zH4Hc7Zt9NOqeul4oJDBizb4d RHOyXVp8ZNC4WKaxIjpm9mn48UzleCUSO6inereZ2CI7/zIwFvRJ9EtqNWVPQz15 Jjl8bVvSd35lqNh60MjpqyHm5xw8Bg/O -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:10 2025 by rpki-client