This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft File: pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft (raw, json) Hash identifier: ydJHkY3JeKR6efWODFrG66uNTm3qmqz55fViv8734xo= Subject key identifier: 1F:64:77:6C:2A:3D:D0:C1:1E:21:D9:0B:FF:F6:60:95:95:7D:0A:26 Authority key identifier: A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B Certificate issuer: /CN=A9166292/serialNumber=A4FB20C72497262DC477F14943008F91077E659B Certificate serial: 04EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft Manifest number: 04E3 Signing time: Sun 28 Dec 2025 22:55:03 +0000 Manifest this update: Sun 28 Dec 2025 22:55:02 +0000 Manifest next update: Sun 04 Jan 2026 22:55:02 +0000 Files and hashes: 1: pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl (hash: 7t7uTcqwql0AhjZsu9Z2ekxnipGFpHGYI7tDvfMYBdI=) 2: 78771A0C490D11EC8E4D1136C4F9AE02.roa (hash: W3P07rEg277S0+nKFcRTQkiwY4kqyr3sWUcdKv4U2lQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 22:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1260 (0x4ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166292, serialNumber=A4FB20C72497262DC477F14943008F91077E659B Validity Not Before: Dec 28 22:55:02 2025 GMT Not After : Jan 4 22:55:02 2026 GMT Subject: CN=6951b546-d9b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f7:da:c9:44:56:a2:c4:dd:fc:a5:20:8b:5a: 0c:f7:65:f7:76:a3:c6:a6:7a:c0:2a:23:f2:08:46: 83:d2:28:cb:a0:b3:61:ba:78:19:88:3a:4e:25:be: b3:00:95:26:ba:d5:67:4c:9b:3f:28:30:e1:bc:20: 00:23:18:60:02:55:f9:5f:db:c3:53:25:d2:95:af: e2:f7:7a:4c:fc:8a:ea:6a:a3:ec:e3:98:4e:2d:d0: 94:55:20:59:5d:7a:58:62:ab:b2:56:31:ce:50:f6: f7:0c:96:c5:c5:43:00:02:c9:e2:0c:c4:17:b9:4d: d7:21:3d:ef:da:a1:b6:9d:0c:3b:59:d2:f9:e2:7d: bd:2d:45:80:db:dc:53:b0:49:bf:f5:ac:bc:13:3c: 7e:ba:85:35:8c:4c:b3:43:aa:63:f6:3b:3d:73:c7: 78:09:14:0a:42:12:c2:cf:b5:01:d3:da:2c:05:55: ff:ab:8b:ea:4a:10:63:0a:0f:bb:2f:26:27:72:c2: 53:df:e6:23:93:37:5a:be:10:f1:5e:82:67:14:fd: 17:ea:44:c8:b1:43:ce:80:b8:c8:1c:30:5f:0a:9b: 3a:f1:6f:c9:80:b8:24:ea:ae:70:29:c8:db:85:81: b5:4a:4e:10:e2:de:27:9f:b8:fe:15:e8:05:b6:b1: eb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:64:77:6C:2A:3D:D0:C1:1E:21:D9:0B:FF:F6:60:95:95:7D:0A:26 X509v3 Authority Key Identifier: keyid:A4:FB:20:C7:24:97:26:2D:C4:77:F1:49:43:00:8F:91:07:7E:65:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166292/AEB56750468C11EC8D7BF268C4F9AE02/pPsgxySXJi3Ed_FJQwCPkQd-ZZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:ee:be:8e:73:eb:ed:c4:bb:ec:a3:5a:68:bc:37:01:93:df: a7:3f:f3:a2:c4:6c:76:d8:19:e2:93:89:40:d7:af:1a:17:dd: a7:1f:84:e0:be:1c:f5:ed:b6:55:4d:c1:68:07:17:b3:2d:0a: b7:a7:d2:da:1a:d2:3b:4b:6a:35:85:ea:fa:a8:43:92:e3:fb: 6f:9a:ad:3d:4c:28:1a:7b:28:72:70:71:89:d0:73:57:71:86: f4:c0:a7:a3:6a:0d:79:92:95:d0:6c:73:a1:85:ba:66:35:ed: f8:47:8e:76:b1:98:ac:ad:21:48:d3:a1:c4:8a:02:5b:5c:00: a7:38:f8:96:01:18:bb:e8:26:60:46:88:7b:a3:fd:9e:7e:a6: 6e:bb:db:96:32:78:a8:de:70:dc:69:74:25:88:d8:54:a9:cb: ce:66:0b:57:d3:9c:35:a5:25:82:77:7d:e1:43:ee:b8:15:c4: 3c:0a:89:ac:7e:a3:58:65:c8:2a:df:a6:a4:8f:59:d8:e9:74: c3:41:30:4c:ed:2f:dd:76:95:87:95:80:e6:a4:27:c7:a6:43: 5a:ac:78:17:05:cb:7e:82:c6:d8:6b:93:0a:9c:a9:57:63:72: 47:c7:60:31:d6:4c:83:2a:68:93:25:f1:0b:66:95:c1:2f:25: a8:b9:09:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjYyOTIxMTAvBgNVBAUTKEE0RkIyMEM3MjQ5NzI2MkRDNDc3RjE0OTQzMDA4Rjkx MDc3RTY1OUIwHhcNMjUxMjI4MjI1NTAyWhcNMjYwMTA0MjI1NTAyWjAYMRYwFAYD VQQDDA02OTUxYjU0Ni1kOWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqffayURWosTd/KUgi1oM92X3dqPGpnrAKiPyCEaD0ijLoLNhungZiDpOJb6z AJUmutVnTJs/KDDhvCAAIxhgAlX5X9vDUyXSla/i93pM/IrqaqPs45hOLdCUVSBZ XXpYYquyVjHOUPb3DJbFxUMAAsniDMQXuU3XIT3v2qG2nQw7WdL54n29LUWA29xT sEm/9ay8Ezx+uoU1jEyzQ6pj9js9c8d4CRQKQhLCz7UB09osBVX/q4vqShBjCg+7 LyYncsJT3+YjkzdavhDxXoJnFP0X6kTIsUPOgLjIHDBfCps68W/JgLgk6q5wKcjb hYG1Sk4Q4t4nn7j+FegFtrHrEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9kd2wq PdDBHiHZC//2YJWVfQomMB8GA1UdIwQYMBaAFKT7IMcklyYtxHfxSUMAj5EHfmWb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjI5Mi9BRUI1Njc1MDQ2 OEMxMUVDOEQ3QkYyNjhDNEY5QUUwMi9wUHNneHlTWEppM0VkX0ZKUXdDUGtRZC1a WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BQc2d4eVNYSmkzRWRfRkpRd0NQa1FkLVpacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjI5Mi9BRUI1Njc1MDQ2OEMxMUVDOEQ3QkYyNjhDNEY5QUUwMi9wUHNneHlTWEpp M0VkX0ZKUXdDUGtRZC1aWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE7r6Oc+vtxLvso1povDcBk9+nP/OixGx22Bnik4lA168aF92nH4Tg vhz17bZVTcFoBxezLQq3p9LaGtI7S2o1her6qEOS4/tvmq09TCgaeyhycHGJ0HNX cYb0wKejag15kpXQbHOhhbpmNe34R452sZisrSFI06HEigJbXACnOPiWARi76CZg Roh7o/2efqZuu9uWMnio3nDcaXQliNhUqcvOZgtX05w1pSWCd33hQ+64FcQ8Coms fqNYZcgq36akj1nY6XTDQTBM7S/ddpWHlYDmpCfHpkNarHgXBct+gsbYa5MKnKlX Y3JHx2Ax1kyDKmiTJfELZpXBLyWouQks -----END CERTIFICATE-----Generated at Mon Dec 29 16:23:08 2025 by rpki-client