This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft File: PxScskgQcfFD-NFWCCear8cdEVw.mft (raw, json) Hash identifier: O/Lo9QqujCvywVYqMWvObn3/sAihcHwI2+sunAzceYw= Subject key identifier: 8D:FC:B8:4F:65:19:E1:B9:9C:1D:BD:FB:E0:09:81:51:90:B6:9F:7B Authority key identifier: 3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C Certificate issuer: /CN=A911C18F/serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Certificate serial: 1F54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft Manifest number: 1F49 Signing time: Thu 18 Dec 2025 15:55:48 +0000 Manifest this update: Thu 18 Dec 2025 15:55:47 +0000 Manifest next update: Thu 25 Dec 2025 15:55:47 +0000 Files and hashes: 1: PxScskgQcfFD-NFWCCear8cdEVw.crl (hash: AVfzrT5ymZCZnLMSzFvJhH9i7CwogvCzqqLjYEu5jRM=) 2: A9FAE7FA5E1911E6B8CE9C5BC4F9AE02.roa (hash: xZ7a43he46yBIpdPfo3VUuRojtSoHm3dh9Gg3MtbJcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8020 (0x1f54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C18F, serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Validity Not Before: Dec 18 15:55:47 2025 GMT Not After : Dec 25 15:55:47 2025 GMT Subject: CN=69442403-7f53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3e:38:2a:39:e5:d4:5e:12:7b:4b:e4:c5:67: b5:99:9d:a2:53:35:09:59:b9:5b:34:20:a4:42:0d: e1:79:89:d4:29:a3:e6:18:43:5d:48:ae:34:eb:20: e0:ed:3a:e4:77:32:5b:76:9d:b7:92:3a:3b:62:78: 34:b1:8d:80:a4:ca:59:35:0c:08:09:12:d6:5d:94: a9:89:49:02:36:da:fa:e6:5b:4d:43:3e:06:4f:17: 7a:c4:2f:a1:75:9c:db:6d:11:67:b4:f1:01:85:58: 96:1a:6b:de:77:b7:dd:5e:04:23:03:7b:49:fd:02: ff:fb:3d:9a:34:8c:f3:31:3a:c0:55:76:86:d4:55: 81:58:28:84:a4:26:4f:a6:08:d9:fa:c5:fd:fa:b8: e8:79:12:f9:84:91:b4:0e:7f:58:9c:20:5a:fe:d8: 81:56:f0:44:3b:08:c5:d4:a1:eb:27:4e:48:90:29: 2c:bc:77:91:e6:7c:3b:f3:64:37:8c:89:12:3e:2c: f7:e5:00:d7:ee:e3:60:c4:58:70:77:eb:bb:e4:1d: 13:a9:30:23:72:5c:04:4a:f0:d0:2c:4e:00:fc:ea: 52:02:71:94:89:be:27:15:e5:0a:42:53:63:ef:e0: fd:7a:ce:dc:07:25:d7:7a:67:24:ff:3f:62:97:2c: 71:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FC:B8:4F:65:19:E1:B9:9C:1D:BD:FB:E0:09:81:51:90:B6:9F:7B X509v3 Authority Key Identifier: keyid:3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f3:5f:86:40:20:53:ea:c0:42:9c:78:70:e0:18:bf:c9:f9: 2c:90:60:53:e8:5f:41:16:d5:55:6c:7b:b8:f3:16:9c:a2:47: 6f:fd:58:3d:02:86:47:c5:0e:87:0b:a9:ee:e9:96:cb:1c:29: 02:5a:15:87:d4:1c:46:d7:5a:8d:4c:79:d1:42:f9:b7:2d:f0: 58:4d:b5:bd:12:7d:c5:51:31:6e:81:0e:80:3d:e6:7e:be:45: 83:16:cd:ab:5a:36:a2:d2:f4:7c:a4:f8:cb:6e:e7:f7:90:97: 9a:35:b2:77:39:b0:3f:ff:66:17:bf:1a:57:ac:35:92:3d:9e: 4d:51:31:ef:81:fe:86:88:30:38:44:82:68:3b:27:4a:4b:17: 16:36:89:90:d6:f4:4d:16:f9:07:be:44:64:7b:17:fd:f7:bd: 9e:d5:24:7d:85:50:98:fe:09:2f:e3:67:5a:aa:16:f6:cd:67: d9:e9:3b:0d:4f:40:70:39:17:49:ff:14:12:cc:89:0b:c8:3c: ba:cf:5d:d8:c5:4a:fd:16:27:61:fb:1d:82:76:c3:08:9e:01: c7:43:0d:33:04:96:55:86:7d:69:61:51:da:cd:c0:0b:12:d2: d0:61:0d:6b:d1:44:42:1a:66:c6:d7:1f:98:d1:b2:0b:25:66: af:b0:a7:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxOEYxMTAvBgNVBAUTKDNGMTQ5Q0IyNDgxMDcxRjE0M0Y4RDE1NjA4Mjc5QUFG QzcxRDExNUMwHhcNMjUxMjE4MTU1NTQ3WhcNMjUxMjI1MTU1NTQ3WjAYMRYwFAYD VQQDDA02OTQ0MjQwMy03ZjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjD44Kjnl1F4Se0vkxWe1mZ2iUzUJWblbNCCkQg3heYnUKaPmGENdSK406yDg 7TrkdzJbdp23kjo7Yng0sY2ApMpZNQwICRLWXZSpiUkCNtr65ltNQz4GTxd6xC+h dZzbbRFntPEBhViWGmved7fdXgQjA3tJ/QL/+z2aNIzzMTrAVXaG1FWBWCiEpCZP pgjZ+sX9+rjoeRL5hJG0Dn9YnCBa/tiBVvBEOwjF1KHrJ05IkCksvHeR5nw782Q3 jIkSPiz35QDX7uNgxFhwd+u75B0TqTAjclwESvDQLE4A/OpSAnGUib4nFeUKQlNj 7+D9es7cByXXemck/z9ilyxxUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI38uE9l GeG5nB29++AJgVGQtp97MB8GA1UdIwQYMBaAFD8UnLJIEHHxQ/jRVggnmq/HHRFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE4Ri84RTdBOUJBQzVF MTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNmRkQtTkZXQ0NlYXI4Y2RF VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B4U2Nza2dRY2ZGRC1ORldDQ2VhcjhjZEVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE4Ri84RTdBOUJBQzVFMTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNm RkQtTkZXQ0NlYXI4Y2RFVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/81+GQCBT6sBCnHhw4Bi/yfkskGBT6F9BFtVVbHu48xacokdv/Vg9 AoZHxQ6HC6nu6ZbLHCkCWhWH1BxG11qNTHnRQvm3LfBYTbW9En3FUTFugQ6APeZ+ vkWDFs2rWjai0vR8pPjLbuf3kJeaNbJ3ObA//2YXvxpXrDWSPZ5NUTHvgf6GiDA4 RIJoOydKSxcWNomQ1vRNFvkHvkRkexf9972e1SR9hVCY/gkv42daqhb2zWfZ6TsN T0BwORdJ/xQSzIkLyDy6z13YxUr9Fidh+x2CdsMIngHHQw0zBJZVhn1pYVHazcAL EtLQYQ1r0URCGmbG1x+Y0bILJWavsKex -----END CERTIFICATE-----Generated at Fri Dec 19 21:58:09 2025 by rpki-client