This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft File: Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json) Hash identifier: as9CwNI0epMAo+D1DZNc3Lc0apylIVNFybxUmI1xRFM= Subject key identifier: 1E:5E:12:85:57:3F:B2:97:03:A3:EA:A3:A7:98:70:E7:86:9D:41:10 Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62 Certificate issuer: /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62 Certificate serial: 3505 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft Manifest number: 34F6 Signing time: Sat 20 Dec 2025 15:03:05 +0000 Manifest this update: Sat 20 Dec 2025 15:03:05 +0000 Manifest next update: Sat 27 Dec 2025 15:03:05 +0000 Files and hashes: 1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: y99O/xckblOJBqaoroCzz5ei3F3MppDsWExxnfcjOEQ=) 2: E73006AA682811EB8D635520C4F9AE02.roa (hash: 3dh9yLLZm2+U6xobWuHKGIC0VGl5iGyZmQBPzOFbKDA=) 3: E7DDE5B8682811EB8D635520C4F9AE02.roa (hash: JPpUiaz8as6ncagKgyuUXaP5ZRdmrTGzakjmAvPZHY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13573 (0x3505) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62 Validity Not Before: Dec 20 15:03:05 2025 GMT Not After : Dec 27 15:03:05 2025 GMT Subject: CN=6946baa9-23be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b0:bc:88:78:66:fd:e9:42:b5:35:00:95:15: 17:95:75:56:a2:ca:31:4c:c8:40:47:35:f6:11:7a: ec:87:91:f1:c0:05:83:6f:5d:74:f4:1f:74:ea:8c: 3f:85:14:f1:4e:6a:95:e3:56:20:c0:93:e8:d5:57: 1a:84:50:33:8f:1a:d8:6f:36:6d:18:0b:ff:e4:0a: 3a:4e:5c:d9:b8:1c:54:79:f4:08:4d:20:88:83:85: d8:4e:47:93:c1:95:42:81:02:4f:da:af:5a:0a:f0: 65:20:15:0e:50:5c:91:0c:94:91:88:55:c4:f3:65: 45:bd:c6:56:ec:4d:6d:5d:30:da:40:3c:af:d2:d3: 52:e1:53:e6:8e:56:03:ec:8e:65:60:e9:93:3d:4b: 95:e9:c2:90:33:3d:2d:37:f5:1d:d9:63:45:53:5c: 48:8a:79:23:b6:96:f9:27:fa:e3:f5:07:21:45:15: 40:10:aa:53:00:c6:a5:70:19:2e:4d:8a:40:95:6a: 57:5a:77:a6:8e:17:7d:91:fd:58:aa:28:17:f5:b9: 6f:e7:7a:94:7f:5e:1d:31:d5:d8:ef:a0:f8:d8:b8: 41:8b:df:f8:74:f5:35:02:ff:16:4f:34:71:03:41: e7:ce:21:69:76:c4:64:f6:70:90:aa:ac:72:4a:5d: d4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5E:12:85:57:3F:B2:97:03:A3:EA:A3:A7:98:70:E7:86:9D:41:10 X509v3 Authority Key Identifier: keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:e7:2d:89:9c:37:8f:f1:99:74:fa:9a:6e:34:96:f7:da:b1: 82:e4:29:ce:d2:14:c2:2d:4f:d0:2e:fa:8f:bf:9b:e4:64:9a: 39:c1:c4:e7:2d:73:5e:1f:7e:c0:86:55:74:c5:ae:3d:1b:f5: 91:81:29:84:b8:82:f1:2b:e4:c7:7d:32:ba:6b:02:15:21:5a: c1:38:76:fd:11:a8:4c:3c:9c:b4:2b:5d:2f:aa:33:2d:e2:29: d4:53:03:e2:03:4c:58:f6:31:6d:44:a8:ac:f3:2a:12:00:ec: 20:7a:8f:b8:3d:d1:50:c0:39:b8:66:89:6d:d2:42:cc:cd:40: 01:be:ea:82:23:75:9d:d0:27:ee:30:49:cb:25:5c:9f:25:69: 16:73:04:0f:01:98:d2:4f:6b:06:59:cf:f4:87:6b:cc:b1:3d: 39:d2:b6:a5:ed:d5:3b:99:dc:29:b1:c9:a5:0d:eb:01:97:74: 40:d7:04:a9:a2:c6:93:76:b4:19:cd:49:29:da:fd:72:bd:ad: 78:42:1d:8b:c4:4d:da:26:98:3b:b0:ed:10:ac:55:0f:67:5d: 95:3a:6f:3a:b2:68:8f:6d:f2:e5:79:ba:1a:2e:ec:bb:1f:7f: af:d6:1c:fa:96:2d:43:3e:67:d5:34:62:41:d9:b6:5d:97:aa: dc:15:f3:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZEMjQxMTAvBgNVBAUTKDNFQzgzNDIwNEQ2QkFBRjk5MTQwQzAzQkQ3NjIxMTQ1 QzA3QkJBNjIwHhcNMjUxMjIwMTUwMzA1WhcNMjUxMjI3MTUwMzA1WjAYMRYwFAYD VQQDDA02OTQ2YmFhOS0yM2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7C8iHhm/elCtTUAlRUXlXVWosoxTMhARzX2EXrsh5HxwAWDb1109B906ow/ hRTxTmqV41YgwJPo1VcahFAzjxrYbzZtGAv/5Ao6TlzZuBxUefQITSCIg4XYTkeT wZVCgQJP2q9aCvBlIBUOUFyRDJSRiFXE82VFvcZW7E1tXTDaQDyv0tNS4VPmjlYD 7I5lYOmTPUuV6cKQMz0tN/Ud2WNFU1xIinkjtpb5J/rj9QchRRVAEKpTAMalcBku TYpAlWpXWnemjhd9kf1YqigX9blv53qUf14dMdXY76D42LhBi9/4dPU1Av8WTzRx A0HnziFpdsRk9nCQqqxySl3UZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5eEoVX P7KXA6Pqo6eYcOeGnUEQMB8GA1UdIwQYMBaAFD7INCBNa6r5kUDAO9diEUXAe7pi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkQyNC81NTBFMjdGMjFE QTQxMUUyOEM1MzNCOUEwOEIwMkNEMi9Qc2cwSUUxcnF2bVJRTUE3MTJJUlJjQjd1 bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BzZzBJRTFycXZtUlFNQTcxMklSUmNCN3VtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkQyNC81NTBFMjdGMjFEQTQxMUUyOEM1MzNCOUEwOEIwMkNEMi9Qc2cwSUUxcnF2 bVJRTUE3MTJJUlJjQjd1bUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ5y2JnDeP8Zl0+ppuNJb32rGC5CnO0hTCLU/QLvqPv5vkZJo5wcTn LXNeH37AhlV0xa49G/WRgSmEuILxK+THfTK6awIVIVrBOHb9EahMPJy0K10vqjMt 4inUUwPiA0xY9jFtRKis8yoSAOwgeo+4PdFQwDm4Zolt0kLMzUABvuqCI3Wd0Cfu MEnLJVyfJWkWcwQPAZjST2sGWc/0h2vMsT050ral7dU7mdwpscmlDesBl3RA1wSp osaTdrQZzUkp2v1yva14Qh2LxE3aJpg7sO0QrFUPZ12VOm86smiPbfLleboaLuy7 H3+v1hz6li1DPmfVNGJB2bZdl6rcFfMb -----END CERTIFICATE-----Generated at Sun Dec 21 12:47:31 2025 by rpki-client