This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft File: PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json) Hash identifier: DRSD8G0FGJptxGF2iJtDrezzlOJQuygVDE++Yp32Wpo= Subject key identifier: E8:0B:85:6B:3C:DA:07:98:18:DB:B4:A8:D4:B7:B7:D6:81:D7:2F:D2 Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 Certificate issuer: /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft Manifest number: 0174 Signing time: Mon 29 Dec 2025 02:59:44 +0000 Manifest this update: Mon 29 Dec 2025 02:59:43 +0000 Manifest next update: Mon 05 Jan 2026 02:59:43 +0000 Files and hashes: 1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: BaPgmhf6ygmITVLOuCYlZwNljYRwY8zEhHNBnIfaErE=) 2: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: vjgahSKHgAt0pKH9ZvyBQssVmzZCnj8JvOvCUHQg/Eg=) 3: 78321A66068D11EF92608943C4F9AE02.roa (hash: t3FRQePlchRMM21FbtXsaZzbDzSWRANgfDaLHDn0f9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 02:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Validity Not Before: Dec 29 02:59:43 2025 GMT Not After : Jan 5 02:59:43 2026 GMT Subject: CN=6951eea0-7db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a7:cb:2f:d4:d7:f5:e9:c9:cc:ca:eb:9d:1c: e8:d5:79:8f:ff:be:67:c4:ee:26:7a:e9:67:7c:b4: 48:2e:83:45:80:2e:91:a2:ac:22:0e:84:ab:58:ec: 0a:5e:f4:80:6f:bc:46:ec:cc:40:e2:50:5f:cb:a8: 3e:b3:87:4b:c7:78:23:40:24:06:67:05:d2:58:5a: 7a:c1:3b:0c:65:41:49:54:b1:2d:68:fd:f0:a9:57: 29:78:d2:3f:ed:b5:a3:27:bd:ad:87:7b:2f:47:b4: aa:f7:81:d6:fe:1a:a8:f5:d4:e7:a7:d5:28:cc:b7: 71:16:11:f5:c2:9d:8d:3f:2a:d2:50:0c:9e:c1:63: 26:52:24:32:f3:82:b3:72:0c:f6:cc:87:5b:67:3d: 2a:b7:c8:06:8b:dc:c3:72:30:b9:f3:71:46:16:de: 8f:12:bf:5e:e0:a9:a7:b4:6a:d7:e6:5d:73:c3:f8: 9f:57:74:2c:05:6d:ef:fe:be:4e:fc:8b:3d:ae:ed: 19:49:38:84:2a:4f:20:c1:46:ec:17:f0:14:4c:f9: c4:bf:3b:18:97:01:c5:b9:83:ba:80:83:d1:d2:65: 5c:6c:97:3c:2b:65:43:4f:cb:ac:e0:4c:36:46:fc: cb:13:fa:c2:07:c4:48:70:67:7b:2b:9a:5c:3e:1b: 28:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0B:85:6B:3C:DA:07:98:18:DB:B4:A8:D4:B7:B7:D6:81:D7:2F:D2 X509v3 Authority Key Identifier: keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:42:68:b6:8f:54:09:3f:a2:08:ac:e1:70:21:d5:7b:2e:bf: d3:c6:b1:44:fb:7b:54:17:fa:84:d5:c2:52:85:d6:73:6a:c8: f9:56:1e:d7:3f:f2:da:23:fe:c5:5c:22:0a:9c:c2:b3:3c:08: 65:a3:c7:89:5f:f5:52:c6:1e:c6:68:d2:75:c3:4e:e7:2c:e8: da:af:9e:64:d8:14:20:ee:47:de:3d:cd:69:87:c7:08:fb:85: c4:91:5b:ed:0d:18:41:96:d3:a9:e8:cb:47:8a:3f:60:fb:5f: 96:53:f4:25:6e:f6:a8:83:fb:7a:58:c7:6a:45:93:d9:0f:76: 1b:95:68:38:41:f9:aa:f1:12:59:aa:aa:ae:66:cf:c1:05:0d: e6:91:83:15:ad:e1:95:ca:ac:89:b5:ae:37:e7:8a:7c:ad:0c: 7e:12:4d:94:54:1c:77:a2:c0:0b:37:50:c0:59:99:ac:87:c9: 71:a6:5d:b2:28:7e:d2:54:62:7c:18:81:f4:48:04:f5:c5:19: 9c:1c:bc:68:da:de:1e:f8:1b:45:b7:c5:f4:d1:5f:6b:1a:33: 96:77:b9:2f:53:b1:3b:b0:c1:b9:fe:01:4e:cf:91:3a:df:fc: b1:02:46:ee:66:10:e4:30:3d:69:07:0c:25:f1:15:22:d0:bd: 60:2c:be:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDNEN0ZFQUNCNjMzQTZCODI5MzIzQjFFOTk0NEQ0QUY5 OEREREEzNzIwHhcNMjUxMjI5MDI1OTQzWhcNMjYwMTA1MDI1OTQzWjAYMRYwFAYD VQQDDA02OTUxZWVhMC03ZGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9qfLL9TX9enJzMrrnRzo1XmP/75nxO4meulnfLRILoNFgC6RoqwiDoSrWOwK XvSAb7xG7MxA4lBfy6g+s4dLx3gjQCQGZwXSWFp6wTsMZUFJVLEtaP3wqVcpeNI/ 7bWjJ72th3svR7Sq94HW/hqo9dTnp9UozLdxFhH1wp2NPyrSUAyewWMmUiQy84Kz cgz2zIdbZz0qt8gGi9zDcjC583FGFt6PEr9e4KmntGrX5l1zw/ifV3QsBW3v/r5O /Is9ru0ZSTiEKk8gwUbsF/AUTPnEvzsYlwHFuYO6gIPR0mVcbJc8K2VDT8us4Ew2 RvzLE/rCB8RIcGd7K5pcPhsoUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgLhWs8 2geYGNu0qNS3t9aB1y/SMB8GA1UdIwQYMBaAFD1/6stjOmuCkyOx6ZRNSvmN3aNy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy82NEJGRjE0RUIz RjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0S1RJN0hwbEUxSy1ZM2Rv M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYX3F5Mk02YTRLVEk3SHBsRTFLLVkzZG8zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy82NEJGRjE0RUIzRjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0 S1RJN0hwbEUxSy1ZM2RvM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuQmi2j1QJP6IIrOFwIdV7Lr/TxrFE+3tUF/qE1cJShdZzasj5Vh7X P/LaI/7FXCIKnMKzPAhlo8eJX/VSxh7GaNJ1w07nLOjar55k2BQg7kfePc1ph8cI +4XEkVvtDRhBltOp6MtHij9g+1+WU/Qlbvaog/t6WMdqRZPZD3YblWg4Qfmq8RJZ qqquZs/BBQ3mkYMVreGVyqyJta4354p8rQx+Ek2UVBx3osALN1DAWZmsh8lxpl2y KH7SVGJ8GIH0SAT1xRmcHLxo2t4e+BtFt8X00V9rGjOWd7kvU7E7sMG5/gFOz5E6 3/yxAkbuZhDkMD1pBwwl8RUi0L1gLL60 -----END CERTIFICATE-----Generated at Wed Dec 31 00:04:20 2025 by rpki-client