This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft File: PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft (raw, json) Hash identifier: 2nSw6L9mt0DmJFkmfALqoc3EMEYjovrukPT8+rWFVpw= Subject key identifier: 44:F8:FC:1E:E8:2F:04:F1:7B:75:4E:5E:BC:20:F2:AE:88:59:3C:76 Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 0839 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft Manifest number: 0817 Signing time: Sun 28 Dec 2025 20:24:11 +0000 Manifest this update: Sun 28 Dec 2025 20:24:10 +0000 Manifest next update: Sun 04 Jan 2026 20:24:10 +0000 Files and hashes: 1: PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl (hash: Tkvk1kzLLWBFJfr7fZBgd5ZpR9pUzEGIzNNQvmZ22u0=) 2: BADD8D386C4411EFA8952B76C4F9AE02.roa (hash: dvnOEo+3N790+AtnbaRMi3nEBY3/eARCboXR6RYFGJE=) 3: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (hash: 5NqgNIsXa19amtn4HMMc6db3EBMX1bO+m+WZsJmO+bs=) 4: 7828365EDA2611F0BCFB2DAA88D3641D.roa (hash: CPnwSndL6yv7cgAcBTGXUetTG0Q/qxMwYfZpc5rdosg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 20:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2105 (0x839) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Dec 28 20:24:10 2025 GMT Not After : Jan 4 20:24:10 2026 GMT Subject: CN=695191eb-f52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:f4:46:f5:fb:bf:82:bf:16:3c:d4:db:ff: 7d:fc:e5:c3:6f:6e:f5:5e:9f:f1:17:3e:21:c1:3f: 6d:6c:17:69:16:ee:bc:f8:de:11:b3:01:63:87:95: d1:de:72:cc:04:3f:db:e7:76:47:e7:8a:30:b5:9b: 81:62:b5:7f:d6:99:19:61:10:4c:64:c6:50:dd:7c: 14:5f:b7:01:aa:61:1f:df:db:1c:13:d7:80:17:63: cb:8f:46:ab:4b:6c:e7:7d:ad:e5:af:78:5a:34:59: 06:23:8b:bd:a1:79:4a:f8:92:e9:94:94:56:8d:85: 54:b6:34:29:6b:f3:60:9b:86:4e:dc:20:d9:76:96: a0:fa:ec:cd:7e:86:dd:38:3e:0d:c7:48:e6:ce:30: 03:1f:70:6a:dc:fe:dc:b3:41:fb:e4:6f:ef:a8:df: 9f:27:c3:09:f3:3e:f9:f9:95:6e:ae:70:59:c8:0c: f5:15:ee:f5:b6:0e:75:0e:dc:4d:97:b3:be:25:7a: 11:81:f2:c9:b6:4f:e0:af:74:b9:c7:e5:21:5f:47: 4e:b8:7d:0a:58:b6:08:5a:8b:c0:2b:f4:7a:78:6c: df:fb:9d:a0:e6:c0:2c:fd:c1:30:b2:d7:de:30:1a: 42:06:62:b2:57:8d:e2:d1:cf:f6:76:f2:c5:af:ad: d7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F8:FC:1E:E8:2F:04:F1:7B:75:4E:5E:BC:20:F2:AE:88:59:3C:76 X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:18:cf:91:97:b3:b1:09:f8:27:b8:25:fd:62:26:19:29:ef: e1:d8:22:d9:e4:36:8c:1d:3f:3e:9a:7d:5a:ab:31:80:17:0f: 2e:4f:7d:38:b2:b7:6f:4d:ae:f6:30:51:de:6a:3c:55:0b:93: 0c:0e:f5:b7:46:7f:31:6d:6d:02:ae:e7:28:0f:87:76:9b:a1: cb:6d:cc:b1:cb:dd:78:87:6c:56:87:12:83:82:60:6f:b5:48: 22:85:ad:f8:6a:06:c9:7d:fb:d7:07:30:a4:20:63:e5:1b:db: 8f:09:e9:8c:4a:5a:ca:73:56:5f:a3:1c:ad:6c:6f:d6:2c:9b: 68:ed:bd:d7:75:0e:53:10:58:0e:b4:f5:56:43:a5:da:a4:fe: 90:2a:f1:a9:25:60:b0:35:6c:bb:95:1a:b9:f5:78:b1:92:17: 4a:7e:76:77:3a:dd:0e:00:32:6c:5e:b9:c3:7d:ca:c8:1c:67: da:fb:c7:0f:80:b9:9f:5c:28:37:4d:b1:b1:f2:ba:bf:c9:79: 77:78:e7:81:1f:1c:97:ec:4d:d9:ad:e4:b7:af:e8:f4:8f:ee: 81:b5:07:38:93:7e:1e:bd:dd:e7:8a:6e:f9:c8:59:82:e8:9a: b3:29:8d:e7:d2:4a:48:73:69:84:e7:74:c5:6e:39:d9:c1:31: 94:eb:6c:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjUxMjI4MjAyNDEwWhcNMjYwMTA0MjAyNDEwWjAYMRYwFAYD VQQDDA02OTUxOTFlYi1mNTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8v0RvX7v4K/FjzU2/99/OXDb271Xp/xFz4hwT9tbBdpFu68+N4RswFjh5XR 3nLMBD/b53ZH54owtZuBYrV/1pkZYRBMZMZQ3XwUX7cBqmEf39scE9eAF2PLj0ar S2znfa3lr3haNFkGI4u9oXlK+JLplJRWjYVUtjQpa/Ngm4ZO3CDZdpag+uzNfobd OD4Nx0jmzjADH3Bq3P7cs0H75G/vqN+fJ8MJ8z75+ZVurnBZyAz1Fe71tg51DtxN l7O+JXoRgfLJtk/gr3S5x+UhX0dOuH0KWLYIWovAK/R6eGzf+52g5sAs/cEwstfe MBpCBmKyV43i0c/2dvLFr63XFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFET4/B7o LwTxe3VOXrwg8q6IWTx2MB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUYxOC9BMzg0MjkxQzBBQTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhp MHY3TlJkQmktemFaOERReUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7GM+Rl7OxCfgnuCX9YiYZKe/h2CLZ5DaMHT8+mn1aqzGAFw8uT304 srdvTa72MFHeajxVC5MMDvW3Rn8xbW0CrucoD4d2m6HLbcyxy914h2xWhxKDgmBv tUgiha34agbJffvXBzCkIGPlG9uPCemMSlrKc1ZfoxytbG/WLJto7b3XdQ5TEFgO tPVWQ6XapP6QKvGpJWCwNWy7lRq59XixkhdKfnZ3Ot0OADJsXrnDfcrIHGfa+8cP gLmfXCg3TbGx8rq/yXl3eOeBHxyX7E3ZreS3r+j0j+6BtQc4k34evd3nim75yFmC 6JqzKY3n0kpIc2mE53TFbjnZwTGU62wg -----END CERTIFICATE-----Generated at Sun Dec 28 23:39:21 2025 by rpki-client