This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft File: PX_qy2M6a4KTI7HplE1K-Y3do3I.mft (raw, json) Hash identifier: hsG5SfdUrotMFk5f5a/4zuQREzDFDUb1ZMHOc8w9oH8= Subject key identifier: D3:1B:7C:E0:A5:6F:E8:28:E4:F3:4C:DC:39:E9:0A:F0:9B:E2:79:99 Authority key identifier: 3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 Certificate issuer: /CN=A9172BD3/serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Certificate serial: 0176 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft Manifest number: 0170 Signing time: Sun 21 Dec 2025 03:07:52 +0000 Manifest this update: Sun 21 Dec 2025 03:07:52 +0000 Manifest next update: Sun 28 Dec 2025 03:07:52 +0000 Files and hashes: 1: PX_qy2M6a4KTI7HplE1K-Y3do3I.crl (hash: sLP5sZiCbK36tf9z+7Wgoyoo0NpS6DwWsj4MqKE2xnA=) 2: 97F15FD8068D11EF839A3054C4F9AE02.roa (hash: vjgahSKHgAt0pKH9ZvyBQssVmzZCnj8JvOvCUHQg/Eg=) 3: 78321A66068D11EF92608943C4F9AE02.roa (hash: t3FRQePlchRMM21FbtXsaZzbDzSWRANgfDaLHDn0f9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 374 (0x176) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172BD3, serialNumber=3D7FEACB633A6B829323B1E9944D4AF98DDDA372 Validity Not Before: Dec 21 03:07:52 2025 GMT Not After : Dec 28 03:07:52 2025 GMT Subject: CN=69476488-eb79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:90:6b:cd:64:c2:13:4b:6c:15:05:da:88:21: b8:3c:e7:f2:1b:b0:29:a1:a6:a6:b8:52:38:3d:d0: 47:5e:45:da:46:c6:79:9f:49:d7:67:44:91:25:8c: 15:60:90:03:e0:0e:5a:02:cc:56:26:3a:00:7a:28: a5:60:d4:8d:87:e0:ca:d6:88:8e:b0:67:05:8f:c2: fe:a0:d3:84:53:59:10:e9:42:6f:35:bb:40:0a:38: 0a:cb:26:00:0f:d8:57:1a:2a:33:61:3d:94:49:bf: a1:e1:0f:0b:c3:60:4f:7f:8b:f7:f4:ea:25:df:6d: e9:aa:89:f0:cc:63:84:f1:b9:2c:c4:b1:7b:b0:0a: 15:e9:08:2a:b2:98:c0:c7:75:7a:a8:b6:7a:1d:92: 26:f3:4f:bf:ce:8e:68:3b:3a:19:81:fc:40:6e:57: 1a:4a:b0:71:99:6c:b4:6b:73:11:8a:5c:c7:dd:cf: 9d:0d:f0:d4:cd:c5:54:41:47:fc:fe:5c:fc:b2:62: 21:77:56:a9:e4:57:43:e6:35:fc:c7:f7:9c:94:c7: ef:7d:fb:01:0b:ee:24:f4:e2:d9:b5:0e:54:ae:44: 36:bd:55:d6:fa:99:f0:de:99:6c:f9:8a:d9:13:6d: e5:b1:9d:d1:f8:fb:dc:bb:80:ce:ef:ed:1d:8d:2f: 8b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1B:7C:E0:A5:6F:E8:28:E4:F3:4C:DC:39:E9:0A:F0:9B:E2:79:99 X509v3 Authority Key Identifier: keyid:3D:7F:EA:CB:63:3A:6B:82:93:23:B1:E9:94:4D:4A:F9:8D:DD:A3:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PX_qy2M6a4KTI7HplE1K-Y3do3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/64BFF14EB3F711EE92A47717C4F9AE02/PX_qy2M6a4KTI7HplE1K-Y3do3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:75:9d:b4:f8:52:78:4d:d6:b0:a2:9e:68:63:89:f4:fc:c3: e7:27:0e:e1:5a:36:70:a1:f3:d0:d9:56:9f:dc:0c:56:c0:84: f1:c7:55:52:1a:33:58:5d:90:e6:92:81:70:14:01:ce:cd:83: 5a:73:56:9f:62:0c:f6:48:e8:7e:69:3e:a5:10:70:52:7c:60: 47:01:36:ea:ff:f5:bd:26:05:98:73:b4:07:d4:68:fc:de:e2: ee:17:36:38:f0:c6:64:88:f7:d1:14:79:41:6d:62:70:cf:8e: 90:a4:58:e7:d8:99:46:68:c3:ae:31:a6:7c:bc:20:99:63:16: 04:58:00:5d:eb:28:f0:f2:fc:fe:b3:5f:85:87:95:5d:b1:66: 6f:46:3b:ff:c3:6a:7b:d7:b9:53:b5:15:19:b9:5d:c4:8e:a0: 78:76:9c:e7:b6:6e:fc:51:06:8b:29:3c:0c:60:90:5f:28:30: c8:e7:7b:f8:76:01:07:25:53:f2:d5:34:e3:c5:eb:57:a5:6e: 09:84:20:c4:b0:1d:07:bf:7d:e1:fd:2e:7c:87:88:d6:75:9e: 74:a6:9b:3d:58:9c:59:9c:c2:cb:de:6a:03:62:92:65:e4:cd: 22:31:45:91:04:97:c0:56:3c:1d:37:92:89:f8:a5:76:c3:c8: 73:1e:5d:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJCRDMxMTAvBgNVBAUTKDNEN0ZFQUNCNjMzQTZCODI5MzIzQjFFOTk0NEQ0QUY5 OEREREEzNzIwHhcNMjUxMjIxMDMwNzUyWhcNMjUxMjI4MDMwNzUyWjAYMRYwFAYD VQQDDA02OTQ3NjQ4OC1lYjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnJBrzWTCE0tsFQXaiCG4POfyG7ApoaamuFI4PdBHXkXaRsZ5n0nXZ0SRJYwV YJAD4A5aAsxWJjoAeiilYNSNh+DK1oiOsGcFj8L+oNOEU1kQ6UJvNbtACjgKyyYA D9hXGiozYT2USb+h4Q8Lw2BPf4v39Ool323pqonwzGOE8bksxLF7sAoV6QgqspjA x3V6qLZ6HZIm80+/zo5oOzoZgfxAblcaSrBxmWy0a3MRilzH3c+dDfDUzcVUQUf8 /lz8smIhd1ap5FdD5jX8x/eclMfvffsBC+4k9OLZtQ5UrkQ2vVXW+pnw3pls+YrZ E23lsZ3R+Pvcu4DO7+0djS+LIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMbfOCl b+go5PNM3DnpCvCb4nmZMB8GA1UdIwQYMBaAFD1/6stjOmuCkyOx6ZRNSvmN3aNy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkJEMy82NEJGRjE0RUIz RjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0S1RJN0hwbEUxSy1ZM2Rv M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYX3F5Mk02YTRLVEk3SHBsRTFLLVkzZG8zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkJEMy82NEJGRjE0RUIzRjcxMUVFOTJBNDc3MTdDNEY5QUUwMi9QWF9xeTJNNmE0 S1RJN0hwbEUxSy1ZM2RvM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIdZ20+FJ4Tdawop5oY4n0/MPnJw7hWjZwofPQ2Vaf3AxWwITxx1VS GjNYXZDmkoFwFAHOzYNac1afYgz2SOh+aT6lEHBSfGBHATbq//W9JgWYc7QH1Gj8 3uLuFzY48MZkiPfRFHlBbWJwz46QpFjn2JlGaMOuMaZ8vCCZYxYEWABd6yjw8vz+ s1+Fh5VdsWZvRjv/w2p717lTtRUZuV3EjqB4dpzntm78UQaLKTwMYJBfKDDI53v4 dgEHJVPy1TTjxetXpW4JhCDEsB0Hv33h/S58h4jWdZ50pps9WJxZnMLL3moDYpJl 5M0iMUWRBJfAVjwdN5KJ+KV2w8hzHl1u -----END CERTIFICATE-----Generated at Sun Dec 21 08:17:18 2025 by rpki-client