This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150B47/DA1755781DA311E2BED7789908B02CD2/PkPgI8CFNZTq13soKJo_HxDDCR0.mft File: PkPgI8CFNZTq13soKJo_HxDDCR0.mft (raw, json) Hash identifier: FQogaKjnJcoo43y+bKnWZK7uzxStnmPaWrlsD4yDexs= Subject key identifier: 85:55:AE:3B:EE:B3:09:8C:EF:32:45:C9:9D:35:42:01:A0:21:FA:27 Authority key identifier: 3E:43:E0:23:C0:85:35:94:EA:D7:7B:28:28:9A:3F:1F:10:C3:09:1D Certificate issuer: /CN=A9150B47/serialNumber=3E43E023C0853594EAD77B28289A3F1F10C3091D Certificate serial: 34E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkPgI8CFNZTq13soKJo_HxDDCR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150B47/DA1755781DA311E2BED7789908B02CD2/PkPgI8CFNZTq13soKJo_HxDDCR0.mft Manifest number: 34E6 Signing time: Thu 18 Dec 2025 15:04:06 +0000 Manifest this update: Thu 18 Dec 2025 15:04:06 +0000 Manifest next update: Thu 25 Dec 2025 15:04:06 +0000 Files and hashes: 1: PkPgI8CFNZTq13soKJo_HxDDCR0.crl (hash: TIQYarNqfvhBPYRC9s8F9105sHlUOBJcSvX7cIXF8Xc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150B47/DA1755781DA311E2BED7789908B02CD2/PkPgI8CFNZTq13soKJo_HxDDCR0.crl rsync://rpki.apnic.net/member_repository/A9150B47/DA1755781DA311E2BED7789908B02CD2/PkPgI8CFNZTq13soKJo_HxDDCR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkPgI8CFNZTq13soKJo_HxDDCR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:04:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13545 (0x34e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150B47, serialNumber=3E43E023C0853594EAD77B28289A3F1F10C3091D Validity Not Before: Dec 18 15:04:06 2025 GMT Not After : Dec 25 15:04:06 2025 GMT Subject: CN=694417e6-6f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1f:79:07:12:18:08:db:78:61:75:08:04:5b: a1:6d:95:10:79:1a:45:1f:8a:33:ea:4b:3e:1f:aa: e3:88:dc:08:38:d7:16:65:9f:45:29:53:85:42:4e: d0:ba:42:36:c7:7c:8f:f6:55:e4:be:6f:6b:8a:55: 71:bb:b7:60:4e:c6:65:8d:c1:4f:bc:7e:38:7e:91: 09:2c:bd:30:12:a3:a9:48:65:a3:32:29:cd:dc:e5: 27:2e:31:a2:03:6d:9e:3e:a9:87:22:a9:2d:b0:b3: ca:e0:d8:ac:2e:2b:80:d4:3c:1f:3b:17:7d:46:78: d0:b4:3d:05:29:b3:1c:bb:73:5c:11:fa:dc:4a:09: dc:82:16:f6:e5:e1:9b:d9:e8:14:8c:e4:10:c2:a4: fc:3a:0c:15:ad:cf:2f:21:ea:3a:d1:74:84:48:00: 38:ec:d1:ca:1c:a3:3e:75:93:d0:2e:8a:06:63:e2: 48:87:64:3c:85:5c:00:9a:e0:39:b6:3e:8e:c7:03: 23:16:d8:52:d9:31:7e:89:3a:3e:54:8e:25:12:f9: 4a:19:57:db:23:cd:f2:1e:fc:16:75:5a:02:3c:16: 45:96:0a:54:82:b1:0a:fa:a5:4b:5f:bb:8c:44:5b: 6a:1f:ff:14:88:ac:ff:b6:42:fb:74:92:5b:d6:5d: 6d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:55:AE:3B:EE:B3:09:8C:EF:32:45:C9:9D:35:42:01:A0:21:FA:27 X509v3 Authority Key Identifier: keyid:3E:43:E0:23:C0:85:35:94:EA:D7:7B:28:28:9A:3F:1F:10:C3:09:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150B47/DA1755781DA311E2BED7789908B02CD2/PkPgI8CFNZTq13soKJo_HxDDCR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkPgI8CFNZTq13soKJo_HxDDCR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150B47/DA1755781DA311E2BED7789908B02CD2/PkPgI8CFNZTq13soKJo_HxDDCR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:98:bd:0b:3d:a9:7a:6b:02:be:ce:a5:c4:74:53:b0:f3:9e: ab:d1:ba:c9:46:7d:4e:2e:67:ce:c7:27:a7:ed:c3:ff:24:d1: 67:69:c0:96:bf:6c:cf:72:9d:f6:3f:e5:b0:7d:b4:83:d0:dc: 56:c7:3a:df:0d:9a:cc:18:40:0e:83:9e:50:d4:1b:2d:6a:f5: bf:1d:05:62:46:fe:46:2c:ae:d0:b6:10:19:aa:10:f3:c5:82: 8d:90:d0:3c:9a:5b:3f:fe:1c:b9:f6:ed:62:03:25:15:df:d4: c5:92:f0:07:b1:d0:34:c9:b1:41:ca:bf:28:1b:0c:c4:32:97: 47:9c:ef:ed:4a:6f:64:f2:4d:33:ef:e9:3c:b5:21:5e:b2:e0: 45:26:40:a4:7e:a5:c9:ba:02:2f:fd:b4:ee:15:e6:38:a7:85: 62:a2:67:b9:2d:b4:fb:d9:81:67:61:6e:34:10:6d:e1:19:3e: c1:30:62:d2:b0:2c:00:c4:f2:bc:bf:61:ef:e1:ce:72:54:db: d9:c7:d4:d2:38:f0:3b:2d:78:9d:95:7f:c5:7b:7a:4e:f1:9a: 6b:42:e0:38:b9:9a:74:23:d1:65:f5:39:d7:84:a3:32:fe:de: dd:d9:b9:61:9f:66:02:17:ec:dc:b3:b8:d8:a7:31:d9:1d:15: 4b:89:bb:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBCNDcxMTAvBgNVBAUTKDNFNDNFMDIzQzA4NTM1OTRFQUQ3N0IyODI4OUEzRjFG MTBDMzA5MUQwHhcNMjUxMjE4MTUwNDA2WhcNMjUxMjI1MTUwNDA2WjAYMRYwFAYD VQQDDA02OTQ0MTdlNi02ZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlR95BxIYCNt4YXUIBFuhbZUQeRpFH4oz6ks+H6rjiNwIONcWZZ9FKVOFQk7Q ukI2x3yP9lXkvm9rilVxu7dgTsZljcFPvH44fpEJLL0wEqOpSGWjMinN3OUnLjGi A22ePqmHIqktsLPK4NisLiuA1DwfOxd9RnjQtD0FKbMcu3NcEfrcSgncghb25eGb 2egUjOQQwqT8OgwVrc8vIeo60XSESAA47NHKHKM+dZPQLooGY+JIh2Q8hVwAmuA5 tj6OxwMjFthS2TF+iTo+VI4lEvlKGVfbI83yHvwWdVoCPBZFlgpUgrEK+qVLX7uM RFtqH/8UiKz/tkL7dJJb1l1tfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVVrjvu swmM7zJFyZ01QgGgIfonMB8GA1UdIwQYMBaAFD5D4CPAhTWU6td7KCiaPx8Qwwkd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEI0Ny9EQTE3NTU3ODFE QTMxMUUyQkVENzc4OTkwOEIwMkNEMi9Qa1BnSThDRk5aVHExM3NvS0pvX0h4RERD UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BrUGdJOENGTlpUcTEzc29LSm9fSHhERENSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MEI0Ny9EQTE3NTU3ODFEQTMxMUUyQkVENzc4OTkwOEIwMkNEMi9Qa1BnSThDRk5a VHExM3NvS0pvX0h4RERDUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7mL0LPal6awK+zqXEdFOw856r0brJRn1OLmfOxyen7cP/JNFnacCW v2zPcp32P+WwfbSD0NxWxzrfDZrMGEAOg55Q1BstavW/HQViRv5GLK7QthAZqhDz xYKNkNA8mls//hy59u1iAyUV39TFkvAHsdA0ybFByr8oGwzEMpdHnO/tSm9k8k0z 7+k8tSFesuBFJkCkfqXJugIv/bTuFeY4p4Viome5LbT72YFnYW40EG3hGT7BMGLS sCwAxPK8v2Hv4c5yVNvZx9TSOPA7LXidlX/Fe3pO8ZprQuA4uZp0I9Fl9TnXhKMy /t7d2blhn2YCF+zcs7jYpzHZHRVLibs3 -----END CERTIFICATE-----Generated at Fri Dec 19 22:10:29 2025 by rpki-client