This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft File: Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json) Hash identifier: 1g5sIzxebG4yPBAp0YyXayPIDmyKDEp31I7J+jjCFSM= Subject key identifier: 82:77:7D:8C:2C:AF:4F:BA:17:CF:E2:3D:AA:37:19:28:7A:F0:FD:04 Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62 Certificate issuer: /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62 Certificate serial: 3507 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft Manifest number: 34F8 Signing time: Wed 24 Dec 2025 15:03:01 +0000 Manifest this update: Wed 24 Dec 2025 15:03:00 +0000 Manifest next update: Wed 31 Dec 2025 15:03:00 +0000 Files and hashes: 1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: KF0EYjins/MXnLOm184F0da0O3BkH/JCKK+wF1y1Z5w=) 2: E73006AA682811EB8D635520C4F9AE02.roa (hash: 3dh9yLLZm2+U6xobWuHKGIC0VGl5iGyZmQBPzOFbKDA=) 3: E7DDE5B8682811EB8D635520C4F9AE02.roa (hash: JPpUiaz8as6ncagKgyuUXaP5ZRdmrTGzakjmAvPZHY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 15:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13575 (0x3507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62 Validity Not Before: Dec 24 15:03:00 2025 GMT Not After : Dec 31 15:03:00 2025 GMT Subject: CN=694c00a5-6879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:49:2f:d5:45:e5:23:96:b4:7d:0f:f0:f2:93: 1c:c6:a0:bc:0b:ee:47:67:a9:96:e8:f0:9c:1e:5e: f8:20:ee:32:94:d2:7e:6a:98:d9:40:5a:dc:2a:66: d6:28:23:c2:f4:ab:dd:da:d9:c7:9a:cf:43:87:14: b3:15:a1:85:1d:a8:25:38:52:e8:d0:89:02:ef:96: 8e:84:0d:11:f6:6c:3a:75:ae:95:77:08:5b:83:dd: cd:98:59:cd:ff:18:78:b6:4f:7d:31:75:97:1e:96: 34:9c:1a:6f:19:b3:21:30:78:bc:de:f4:3e:62:cb: 5a:d0:22:13:7c:a0:dd:8f:fd:9a:98:07:92:85:23: 6f:1a:20:b0:28:9c:de:08:a3:75:7e:97:ee:f4:52: a2:eb:73:15:38:5f:1f:6c:7e:ae:5d:9f:73:05:05: 83:10:eb:31:c5:47:25:83:2d:a0:e1:33:20:46:1e: f0:99:c1:32:3b:45:a1:b2:03:ec:f9:5b:d5:c2:f7: 76:c0:63:3c:01:b0:f1:53:e1:e5:e2:2c:10:31:fe: 48:fb:fe:8f:6b:74:b0:59:60:b5:da:a1:df:12:44: 23:61:f9:b4:63:97:23:93:8f:c3:2d:63:99:9c:52: 27:44:28:87:0b:62:ce:15:46:76:4e:6b:9b:94:03: 7f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:77:7D:8C:2C:AF:4F:BA:17:CF:E2:3D:AA:37:19:28:7A:F0:FD:04 X509v3 Authority Key Identifier: keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:84:ae:a5:87:f2:06:b5:ba:0e:7c:ab:66:70:19:8a:16:59: 95:2b:09:7d:1b:64:05:37:69:c5:d9:a7:05:61:47:ef:ce:b3: 0f:91:c9:43:51:1c:d5:98:d0:02:99:db:f4:e6:95:ea:c8:5d: 42:42:5b:44:c2:6a:5f:14:08:bd:2d:1f:de:6f:3f:cf:a2:62: 86:fc:f7:3d:4c:9d:f1:b1:3e:ec:aa:07:1e:c2:c4:e4:c7:45: 04:c6:a5:60:03:33:ea:ca:05:e7:e6:30:09:e9:ef:0e:f0:ce: d1:ba:54:96:21:fb:ed:e5:10:7e:f9:c3:04:60:65:2c:34:04: b1:1e:17:6b:21:18:73:91:68:23:6f:4b:40:fb:52:26:95:e7: 3a:a2:b0:e3:48:8b:44:37:67:61:ed:3d:0f:ce:cf:b1:5c:c0: 47:e4:4d:82:cb:35:03:a2:7e:1a:3b:75:ca:06:43:67:99:8c: 13:16:9e:6b:db:73:e1:26:11:29:25:e1:5c:9a:9e:13:86:a9: 94:d6:d4:9c:91:fa:32:bc:42:e3:f9:da:5f:61:a5:7f:88:10: 1f:9e:c7:0b:d9:bd:3d:e9:4d:14:48:01:d1:7b:1c:d2:72:92: 35:59:90:18:b5:c9:2e:98:b4:3d:f0:ad:25:90:e8:7d:ee:08: c9:1d:47:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZEMjQxMTAvBgNVBAUTKDNFQzgzNDIwNEQ2QkFBRjk5MTQwQzAzQkQ3NjIxMTQ1 QzA3QkJBNjIwHhcNMjUxMjI0MTUwMzAwWhcNMjUxMjMxMTUwMzAwWjAYMRYwFAYD VQQDDA02OTRjMDBhNS02ODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA60kv1UXlI5a0fQ/w8pMcxqC8C+5HZ6mW6PCcHl74IO4ylNJ+apjZQFrcKmbW KCPC9Kvd2tnHms9DhxSzFaGFHaglOFLo0IkC75aOhA0R9mw6da6Vdwhbg93NmFnN /xh4tk99MXWXHpY0nBpvGbMhMHi83vQ+Ysta0CITfKDdj/2amAeShSNvGiCwKJze CKN1fpfu9FKi63MVOF8fbH6uXZ9zBQWDEOsxxUclgy2g4TMgRh7wmcEyO0WhsgPs +VvVwvd2wGM8AbDxU+Hl4iwQMf5I+/6Pa3SwWWC12qHfEkQjYfm0Y5cjk4/DLWOZ nFInRCiHC2LOFUZ2TmublAN/UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJ3fYws r0+6F8/iPao3GSh68P0EMB8GA1UdIwQYMBaAFD7INCBNa6r5kUDAO9diEUXAe7pi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkQyNC81NTBFMjdGMjFE QTQxMUUyOEM1MzNCOUEwOEIwMkNEMi9Qc2cwSUUxcnF2bVJRTUE3MTJJUlJjQjd1 bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BzZzBJRTFycXZtUlFNQTcxMklSUmNCN3VtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkQyNC81NTBFMjdGMjFEQTQxMUUyOEM1MzNCOUEwOEIwMkNEMi9Qc2cwSUUxcnF2 bVJRTUE3MTJJUlJjQjd1bUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkhK6lh/IGtboOfKtmcBmKFlmVKwl9G2QFN2nF2acFYUfvzrMPkclD URzVmNACmdv05pXqyF1CQltEwmpfFAi9LR/ebz/PomKG/Pc9TJ3xsT7sqgcewsTk x0UExqVgAzPqygXn5jAJ6e8O8M7RulSWIfvt5RB++cMEYGUsNASxHhdrIRhzkWgj b0tA+1Imlec6orDjSItEN2dh7T0Pzs+xXMBH5E2CyzUDon4aO3XKBkNnmYwTFp5r 23PhJhEpJeFcmp4ThqmU1tSckfoyvELj+dpfYaV/iBAfnscL2b096U0USAHRexzS cpI1WZAYtckumLQ98K0lkOh97gjJHUe6 -----END CERTIFICATE-----Generated at Thu Dec 25 03:35:54 2025 by rpki-client