This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft File: PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft (raw, json) Hash identifier: JEqVcVRIM+02DmIRvXcITi0HV1wzaD+mgWbiD2sIaOw= Subject key identifier: CF:70:CA:2E:9E:DE:01:10:39:73:28:A0:64:6C:BE:C2:FA:75:C4:81 Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 0837 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft Manifest number: 0815 Signing time: Wed 24 Dec 2025 20:26:58 +0000 Manifest this update: Wed 24 Dec 2025 20:26:57 +0000 Manifest next update: Wed 31 Dec 2025 20:26:57 +0000 Files and hashes: 1: PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl (hash: SYnf3zKj/ppOn8egn+cURyMnPBiE+MWMGo/O2e9Ol24=) 2: BADD8D386C4411EFA8952B76C4F9AE02.roa (hash: dvnOEo+3N790+AtnbaRMi3nEBY3/eARCboXR6RYFGJE=) 3: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (hash: 5NqgNIsXa19amtn4HMMc6db3EBMX1bO+m+WZsJmO+bs=) 4: 7828365EDA2611F0BCFB2DAA88D3641D.roa (hash: CPnwSndL6yv7cgAcBTGXUetTG0Q/qxMwYfZpc5rdosg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 20:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2103 (0x837) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Dec 24 20:26:57 2025 GMT Not After : Dec 31 20:26:57 2025 GMT Subject: CN=694c4c92-3c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c5:4c:fa:b8:e1:c4:5c:5d:7c:7f:3f:96:81: 32:96:d5:33:71:c4:e6:81:3c:0b:50:6d:09:8b:18: b8:3c:49:14:ed:e0:81:8c:22:df:a5:2c:2a:86:c4: 54:80:8d:8a:8b:ef:ee:30:c8:a8:c3:7a:ec:38:89: 88:22:37:6b:4e:a1:5e:b3:ea:15:d9:6d:a7:f8:d6: 21:ec:e4:80:d5:07:8f:dc:6a:a2:62:a5:c4:0b:e4: 62:77:91:82:3d:50:ef:6d:04:65:2c:32:08:67:40: 04:84:d7:5f:62:29:3a:21:d5:6e:79:e8:20:4a:18: 47:2c:fe:cc:bb:9d:9e:1e:a6:14:ba:52:12:a0:b0: 6e:ba:74:b5:35:46:b8:09:5d:48:e2:0a:b1:90:f0: 29:a9:37:8d:0d:53:6d:07:f1:d3:c8:dc:4f:1a:b8: 4e:8b:39:f0:eb:1c:3b:16:fb:c5:62:09:2d:aa:ac: d0:23:3f:05:92:2d:61:10:f7:4b:d1:c9:6e:20:b3: 27:d9:f3:86:f1:6c:7a:2a:a7:47:cd:7d:f9:ec:bd: 4f:77:47:54:a1:6a:5f:c9:58:61:96:ef:3f:be:11: 76:d7:79:27:8f:15:fc:a7:25:c8:af:ec:00:15:c2: 6e:b9:e1:99:b8:7f:42:58:0d:72:03:0f:0f:6d:40: 99:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:70:CA:2E:9E:DE:01:10:39:73:28:A0:64:6C:BE:C2:FA:75:C4:81 X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:cc:a1:38:c4:42:7a:de:b9:34:3e:e1:c0:85:d5:2e:cb:22: d3:41:ac:7e:5d:8f:06:a4:b9:f6:e4:c0:fd:21:43:73:17:c0: ed:c7:bc:dc:ae:43:1e:db:25:f6:aa:b1:9e:0c:5b:4c:a7:aa: 01:0a:0f:7b:4a:38:d1:6e:2f:98:db:1c:53:2a:92:5b:8a:9b: b5:ce:c2:bd:64:fb:3a:4e:55:55:58:35:08:e7:cb:1e:97:dc: f4:6f:4a:ae:d7:f3:3d:24:f4:b0:56:d4:f4:0c:09:e6:cc:d9: 5e:2c:41:9e:bf:66:f2:bf:bf:aa:39:26:10:cf:9c:87:d4:bd: 4b:c8:0f:0a:78:99:9a:4e:fb:23:db:62:d5:ad:c0:a2:17:10: 74:cf:c3:08:46:09:1a:72:f2:14:20:c2:59:e0:b7:7f:c9:c4: a8:2a:89:c7:71:b2:e7:14:3f:21:36:65:a0:0c:1f:77:10:08: ce:bd:41:93:7f:48:ba:a1:e9:e9:a4:48:26:38:b0:3b:5a:e1: cb:c4:16:42:42:bf:1d:7c:2c:83:3a:d4:b0:89:e4:bf:e3:07: 23:0a:f5:b9:20:e0:0a:28:b9:72:c9:9b:a1:f5:4f:2b:c9:88: 0f:b0:69:64:92:ec:1b:a7:8c:75:bb:6a:55:de:79:38:d2:67: 30:7a:92:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjUxMjI0MjAyNjU3WhcNMjUxMjMxMjAyNjU3WjAYMRYwFAYD VQQDDA02OTRjNGM5Mi0zYzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsVM+rjhxFxdfH8/loEyltUzccTmgTwLUG0Jixi4PEkU7eCBjCLfpSwqhsRU gI2Ki+/uMMiow3rsOImIIjdrTqFes+oV2W2n+NYh7OSA1QeP3GqiYqXEC+Rid5GC PVDvbQRlLDIIZ0AEhNdfYik6IdVueeggShhHLP7Mu52eHqYUulISoLBuunS1NUa4 CV1I4gqxkPApqTeNDVNtB/HTyNxPGrhOiznw6xw7FvvFYgktqqzQIz8Fki1hEPdL 0cluILMn2fOG8Wx6KqdHzX357L1Pd0dUoWpfyVhhlu8/vhF213knjxX8pyXIr+wA FcJuueGZuH9CWA1yAw8PbUCZRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9wyi6e 3gEQOXMooGRsvsL6dcSBMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUYxOC9BMzg0MjkxQzBBQTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhp MHY3TlJkQmktemFaOERReUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgzKE4xEJ63rk0PuHAhdUuyyLTQax+XY8GpLn25MD9IUNzF8Dtx7zc rkMe2yX2qrGeDFtMp6oBCg97SjjRbi+Y2xxTKpJbipu1zsK9ZPs6TlVVWDUI58se l9z0b0qu1/M9JPSwVtT0DAnmzNleLEGev2byv7+qOSYQz5yH1L1LyA8KeJmaTvsj 22LVrcCiFxB0z8MIRgkacvIUIMJZ4Ld/ycSoKonHcbLnFD8hNmWgDB93EAjOvUGT f0i6oenppEgmOLA7WuHLxBZCQr8dfCyDOtSwieS/4wcjCvW5IOAKKLlyyZuh9U8r yYgPsGlkkuwbp4x1u2pV3nk40mcwepLr -----END CERTIFICATE-----Generated at Thu Dec 25 21:25:15 2025 by rpki-client