This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft File: GkAQC15dw00ay1htJzOQptUXff8.mft (raw, json) Hash identifier: 5QGcvJ6Zbj7h40UDwJHWrKc1L6+cH4xmXu7AFf6hNUg= Subject key identifier: C4:F0:8A:AB:0A:F5:76:33:E0:3B:F3:E1:EF:21:44:83:7B:F2:EE:F6 Authority key identifier: 1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF Certificate issuer: /CN=A9194C99/serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF Certificate serial: 0413 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft Manifest number: 040E Signing time: Sat 06 Dec 2025 23:04:04 +0000 Manifest this update: Sat 06 Dec 2025 23:04:03 +0000 Manifest next update: Sat 13 Dec 2025 23:04:03 +0000 Files and hashes: 1: GkAQC15dw00ay1htJzOQptUXff8.crl (hash: oexy9SWh7A3+xy6faLmvcx9zqty8H4yAlT78KGfLyas=) 2: 8AB545D294A711ECA073AB56C4F9AE02.roa (hash: Vcf2mCMS48B4jAqDXmFIESOPS9I9k4iNYocNkMUmAvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 23:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1043 (0x413) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C99, serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF Validity Not Before: Dec 6 23:04:03 2025 GMT Not After : Dec 13 23:04:03 2025 GMT Subject: CN=6934b664-d710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ec:f1:95:ca:3e:a0:67:8d:8d:b1:c0:ef:46: a0:cd:f3:2d:76:6e:37:5f:a3:a9:80:67:26:5d:7e: ed:8a:3b:93:88:0d:6e:6a:4b:2f:6b:ec:82:f4:a3: b4:3c:c3:ef:4b:a6:43:b7:c8:84:32:2d:09:4e:46: fa:5b:3c:d9:ce:87:e5:6c:bf:4a:0f:f7:b4:05:16: b4:be:fd:8b:4b:0e:e1:07:06:eb:31:42:61:2f:5e: 7b:1c:bc:2f:6b:7e:7e:e4:d4:d2:12:94:00:3c:17: 49:c5:39:66:f4:2c:6c:f9:5f:d6:28:65:f5:e3:ba: 59:7d:89:18:1d:a4:05:cb:1c:95:eb:a5:18:7f:83: 42:38:c3:8f:d8:46:43:4e:41:12:69:d9:78:34:2c: 76:0b:17:e1:5f:f0:bb:fd:08:c1:c0:d8:e5:ad:6c: 7a:4b:c9:98:e4:af:be:20:62:63:e3:99:1e:2a:f1: ab:70:ec:a7:40:ff:06:3b:53:9f:dd:f7:21:2f:79: c8:3d:8e:f1:85:74:4f:51:5b:fb:69:8c:48:f0:a1: 08:a6:91:15:c5:47:88:95:78:79:dd:45:0e:b6:04: 49:ff:0a:41:7e:42:b3:73:03:1d:a7:a6:96:a1:2c: f8:95:69:64:7b:20:da:8c:b2:17:7e:4f:05:96:88: 55:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F0:8A:AB:0A:F5:76:33:E0:3B:F3:E1:EF:21:44:83:7B:F2:EE:F6 X509v3 Authority Key Identifier: keyid:1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:42:1a:e5:39:a0:a0:f1:54:e8:2e:66:95:fc:2f:45:64:41: 67:d0:ab:88:36:48:0e:cd:fa:37:34:e7:73:67:5f:59:fb:9e: 1a:29:f8:c5:0f:49:da:96:14:ea:06:b8:b8:12:f3:ff:81:17: 5f:83:cc:92:09:b1:f2:55:3b:30:01:4e:6b:b7:bf:79:a8:18: 08:a8:1d:f8:51:89:f7:8a:0d:a9:af:bd:d9:2e:f5:dc:f7:6e: 71:23:cf:60:e2:19:a7:cf:4b:45:46:11:bd:db:50:d4:c5:15: 24:e6:73:c1:b2:60:94:f2:d2:15:22:29:74:f7:e3:47:b7:c6: 6f:06:7f:3d:6c:72:67:aa:52:2c:41:6f:08:84:00:4c:3e:b0: a2:4f:24:65:d7:f7:f3:3d:a1:ab:23:87:2b:b2:41:a8:88:0f: c9:33:62:1e:54:52:81:e1:f3:06:17:4b:af:96:68:57:cd:58: 30:ea:92:8d:62:54:73:80:d6:fc:30:35:e0:53:68:7d:2f:9b: 9a:75:2a:18:75:28:08:b3:e0:28:98:c5:da:72:27:10:39:b7: 82:0c:48:a4:d8:f8:b8:0c:30:45:3d:d6:a2:b7:f8:11:39:da: 1a:3a:8e:54:6b:3d:e0:8e:5f:0c:23:17:c5:97:e6:2f:86:94: 50:9c:2a:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDOTkxMTAvBgNVBAUTKDFBNDAxMDBCNUU1REMzNEQxQUNCNTg2RDI3MzM5MEE2 RDUxNzdERkYwHhcNMjUxMjA2MjMwNDAzWhcNMjUxMjEzMjMwNDAzWjAYMRYwFAYD VQQDEw02OTM0YjY2NC1kNzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOzxlco+oGeNjbHA70agzfMtdm43X6OpgGcmXX7tijuTiA1uaksva+yC9KO0 PMPvS6ZDt8iEMi0JTkb6WzzZzoflbL9KD/e0BRa0vv2LSw7hBwbrMUJhL157HLwv a35+5NTSEpQAPBdJxTlm9Cxs+V/WKGX147pZfYkYHaQFyxyV66UYf4NCOMOP2EZD TkESadl4NCx2CxfhX/C7/QjBwNjlrWx6S8mY5K++IGJj45keKvGrcOynQP8GO1Of 3fchL3nIPY7xhXRPUVv7aYxI8KEIppEVxUeIlXh53UUOtgRJ/wpBfkKzcwMdp6aW oSz4lWlkeyDajLIXfk8FlohVjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTwiqsK 9XYz4Dvz4e8hRIN78u72MB8GA1UdIwQYMBaAFBpAEAteXcNNGstYbSczkKbVF33/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM5OS8yNTE1MkU1Qzk0 QTQxMUVDQkJBN0E1NTJDNEY5QUUwMi9Ha0FRQzE1ZHcwMGF5MWh0SnpPUXB0VVhm ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0drQVFDMTVkdzAwYXkxaHRKek9RcHRVWGZmOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEM5OS8yNTE1MkU1Qzk0QTQxMUVDQkJBN0E1NTJDNEY5QUUwMi9Ha0FRQzE1ZHcw MGF5MWh0SnpPUXB0VVhmZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGQhrlOaCg8VToLmaV/C9FZEFn0KuINkgOzfo3NOdzZ19Z+54aKfjF D0nalhTqBri4EvP/gRdfg8ySCbHyVTswAU5rt795qBgIqB34UYn3ig2pr73ZLvXc 925xI89g4hmnz0tFRhG921DUxRUk5nPBsmCU8tIVIil09+NHt8ZvBn89bHJnqlIs QW8IhABMPrCiTyRl1/fzPaGrI4crskGoiA/JM2IeVFKB4fMGF0uvlmhXzVgw6pKN YlRzgNb8MDXgU2h9L5uadSoYdSgIs+AomMXacicQObeCDEik2Pi4DDBFPdait/gR OdoaOo5Uaz3gjl8MIxfFl+YvhpRQnCph -----END CERTIFICATE-----Generated at Sun Dec 7 09:49:42 2025 by rpki-client