This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft File: PSzMkYN0TcaWqFVry5BDhI6V33A.mft (raw, json) Hash identifier: 8g8O4FOQ9LavbCagyY3MQFOq84Z6q6ElWaHldKKC1F8= Subject key identifier: 73:E2:81:1D:14:B2:5C:13:36:D1:08:66:39:1D:4F:30:12:3A:DB:2A Authority key identifier: 3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70 Certificate issuer: /CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70 Certificate serial: 03E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft Manifest number: 03DA Signing time: Sat 20 Dec 2025 23:50:16 +0000 Manifest this update: Sat 20 Dec 2025 23:50:16 +0000 Manifest next update: Sat 27 Dec 2025 23:50:16 +0000 Files and hashes: 1: PSzMkYN0TcaWqFVry5BDhI6V33A.crl (hash: iXrHcbYtpKI+ZoiNDXmF+HCj5ptO5XDGFBNpcheBYiI=) 2: 69A20286514B11F0B8A8C66DC4F9AE02.roa (hash: FMJfMOhKmr3+LIFoso7iYyeae1vQb80K64qzROcKGwI=) 3: 804B03560A7211EE8FA2CD58C4F9AE02.roa (hash: +4X61DthcWz4IP6DOyrL7Yd1Zc+RFVYAukm8M+MD8hs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1000 (0x3e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D826, serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70 Validity Not Before: Dec 20 23:50:16 2025 GMT Not After : Dec 27 23:50:16 2025 GMT Subject: CN=69473638-1139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:cc:b0:3b:5e:a0:09:c6:93:8e:b4:ae:a1:e6: c5:bb:2b:4d:74:97:25:3b:b3:ed:67:d9:b7:76:a4: d5:ba:da:80:84:3b:fd:c8:00:7c:57:8c:9d:86:c2: 7f:b6:5e:fb:48:92:8e:34:99:3b:2f:86:f7:9c:12: fc:05:5e:64:18:20:b4:07:7d:e4:44:94:0e:33:3d: 56:c1:a2:8d:04:16:9d:6b:a2:f9:d7:43:7a:20:f6: 44:69:49:eb:ce:be:fc:54:f1:56:76:bf:9f:af:c0: a3:63:1e:f7:a0:a1:7c:6b:86:83:e5:46:0f:68:07: 44:09:4a:02:23:6f:6d:85:a7:68:c8:a6:b5:c1:4a: c1:84:51:7d:6f:44:bf:6e:c9:7e:ca:01:3f:66:9d: 5b:eb:41:5a:78:f5:bc:80:2c:c4:a2:a2:b6:4a:c2: 24:87:ed:32:3e:bf:40:63:15:42:b2:80:e9:d1:fd: 03:69:e5:83:20:5b:69:5d:f4:26:29:25:68:4c:7f: b4:8b:20:ff:93:b0:20:5d:79:de:bb:26:17:ea:ce: 93:0b:25:50:66:cc:9c:e9:c6:b9:bd:32:d2:8b:c1: f4:74:95:b9:54:bc:af:b9:af:a1:ed:1b:af:b3:1f: 59:13:41:73:a1:59:09:4c:75:74:13:fe:5a:de:5c: 6b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E2:81:1D:14:B2:5C:13:36:D1:08:66:39:1D:4F:30:12:3A:DB:2A X509v3 Authority Key Identifier: keyid:3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:77:14:b7:5c:04:38:0e:4a:ca:8a:9e:76:fe:f3:1d:d7:35: 19:5b:b4:aa:93:73:d2:72:1d:6e:63:e1:16:74:20:eb:69:c4: cf:35:00:25:66:f1:99:49:8a:66:02:55:04:21:54:e1:b4:64: 32:f4:7e:43:19:46:4d:e6:0c:91:fe:26:aa:34:56:c2:fe:aa: 73:e8:ad:b4:01:29:95:ad:9e:bb:a6:0c:e8:aa:72:85:6c:18: 48:ad:f9:00:b5:9c:c7:44:9e:43:0b:19:5b:ef:04:ad:14:d3: da:da:0e:fe:42:06:59:f3:d7:3e:b7:b5:e6:5e:81:86:58:34: 01:63:58:54:c4:0d:66:19:a3:bf:65:c0:9c:3e:12:43:f2:4b: 3f:0e:f0:1b:c4:46:75:f9:77:a0:cc:55:ee:f6:cc:31:2b:7f: 71:b2:45:9a:20:6c:aa:c9:08:56:43:74:ff:d7:64:14:92:0b: 60:32:43:c9:8d:2a:ff:76:5d:98:f2:ad:f0:1b:53:33:a0:d6: b2:39:a7:1d:b3:1a:b9:6e:2f:9b:14:01:60:3e:68:48:1e:fd: 25:5d:1b:d4:10:35:61:86:f2:5d:e1:27:b0:24:bc:03:23:2a: 0d:2d:34:29:82:79:52:5c:6a:19:9c:24:14:a4:36:39:59:19: 1b:fc:70:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ4MjYxMTAvBgNVBAUTKDNEMkNDQzkxODM3NDREQzY5NkE4NTU2QkNCOTA0Mzg0 OEU5NURGNzAwHhcNMjUxMjIwMjM1MDE2WhcNMjUxMjI3MjM1MDE2WjAYMRYwFAYD VQQDDA02OTQ3MzYzOC0xMTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5MywO16gCcaTjrSuoebFuytNdJclO7PtZ9m3dqTVutqAhDv9yAB8V4ydhsJ/ tl77SJKONJk7L4b3nBL8BV5kGCC0B33kRJQOMz1WwaKNBBada6L510N6IPZEaUnr zr78VPFWdr+fr8CjYx73oKF8a4aD5UYPaAdECUoCI29thadoyKa1wUrBhFF9b0S/ bsl+ygE/Zp1b60FaePW8gCzEoqK2SsIkh+0yPr9AYxVCsoDp0f0DaeWDIFtpXfQm KSVoTH+0iyD/k7AgXXneuyYX6s6TCyVQZsyc6ca5vTLSi8H0dJW5VLyvua+h7Ruv sx9ZE0FzoVkJTHV0E/5a3lxrcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPigR0U slwTNtEIZjkdTzASOtsqMB8GA1UdIwQYMBaAFD0szJGDdE3GlqhVa8uQQ4SOld9w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDgyNi9DRjRFMUQ3NEFF NEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRjYVdxRlZyeTVCRGhJNlYz M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTek1rWU4wVGNhV3FGVnJ5NUJEaEk2VjMzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDgyNi9DRjRFMUQ3NEFFNEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRj YVdxRlZyeTVCRGhJNlYzM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsdxS3XAQ4DkrKip52/vMd1zUZW7Sqk3PSch1uY+EWdCDracTPNQAl ZvGZSYpmAlUEIVThtGQy9H5DGUZN5gyR/iaqNFbC/qpz6K20ASmVrZ67pgzoqnKF bBhIrfkAtZzHRJ5DCxlb7wStFNPa2g7+QgZZ89c+t7XmXoGGWDQBY1hUxA1mGaO/ ZcCcPhJD8ks/DvAbxEZ1+XegzFXu9swxK39xskWaIGyqyQhWQ3T/12QUkgtgMkPJ jSr/dl2Y8q3wG1MzoNayOacdsxq5bi+bFAFgPmhIHv0lXRvUEDVhhvJd4SewJLwD IyoNLTQpgnlSXGoZnCQUpDY5WRkb/HCb -----END CERTIFICATE-----Generated at Sun Dec 21 12:15:14 2025 by rpki-client