This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
File: Psg0IE1rqvmRQMA712IRRcB7umI.mft (raw, json)
Hash identifier: 2L13AFj+eWyTTDHE0JqYigogGQspmqFzRCgaSYxjtkE=
Subject key identifier: 0E:05:31:1E:C6:A0:B8:06:91:74:41:BB:E6:FE:05:0C:FA:20:D6:4E
Authority key identifier: 3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
Certificate issuer: /CN=A9196D24/serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Certificate serial: 3508
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
Manifest number: 34F9
Signing time: Fri 26 Dec 2025 15:02:14 +0000
Manifest this update: Fri 26 Dec 2025 15:02:14 +0000
Manifest next update: Fri 02 Jan 2026 15:02:14 +0000
Files and hashes: 1: Psg0IE1rqvmRQMA712IRRcB7umI.crl (hash: FJYVE4FRx8bqVTTOgxT429CcxsMugI/DguNTHDm4xT8=)
2: E73006AA682811EB8D635520C4F9AE02.roa (hash: 3dh9yLLZm2+U6xobWuHKGIC0VGl5iGyZmQBPzOFbKDA=)
3: E7DDE5B8682811EB8D635520C4F9AE02.roa (hash: JPpUiaz8as6ncagKgyuUXaP5ZRdmrTGzakjmAvPZHY0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Jan 2026 15:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13576 (0x3508)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196D24, serialNumber=3EC834204D6BAAF99140C03BD7621145C07BBA62
Validity
Not Before: Dec 26 15:02:14 2025 GMT
Not After : Jan 2 15:02:14 2026 GMT
Subject: CN=694ea376-f7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a3:50:78:3d:64:57:d4:77:68:2c:0b:90:bf:
2d:d1:31:b7:53:06:c4:4a:ac:26:82:a9:8e:20:49:
53:07:96:51:6f:c8:d9:d2:f7:21:ad:59:92:7e:e1:
33:9f:97:aa:eb:e0:ad:03:82:a5:7c:ac:84:cc:da:
8a:d0:54:06:13:b8:03:84:09:2e:2f:83:e5:47:00:
cf:bc:93:3d:ce:b0:56:74:e4:1c:24:18:30:43:bb:
7c:24:03:8c:44:41:ad:e9:d6:b4:80:07:cf:56:27:
dc:5b:05:1f:b8:8d:af:19:ed:09:cf:76:f9:c7:2d:
e8:7a:6b:49:34:a9:1a:7b:1e:89:a3:a0:d9:f7:67:
0f:2b:86:62:c4:cb:02:8f:b1:63:71:36:4c:4a:b8:
ef:0a:8a:07:24:e5:d3:59:74:d1:97:42:24:d6:61:
9f:0d:90:d0:9d:41:7f:12:8b:13:67:06:4f:3e:ec:
60:07:45:f8:7e:52:26:b6:3d:ec:3e:db:e1:ee:3e:
89:c9:ec:db:e6:38:46:af:00:52:d2:8d:83:3c:52:
75:8a:96:4b:48:4f:d2:22:a5:9a:03:ed:78:fe:5e:
71:49:c4:15:c3:bc:ca:de:dc:c7:56:49:a7:b9:17:
8b:24:c8:0b:07:ba:1b:bd:b4:f4:f9:8e:cb:cb:84:
61:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:05:31:1E:C6:A0:B8:06:91:74:41:BB:E6:FE:05:0C:FA:20:D6:4E
X509v3 Authority Key Identifier:
keyid:3E:C8:34:20:4D:6B:AA:F9:91:40:C0:3B:D7:62:11:45:C0:7B:BA:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Psg0IE1rqvmRQMA712IRRcB7umI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D24/550E27F21DA411E28C533B9A08B02CD2/Psg0IE1rqvmRQMA712IRRcB7umI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5d:ac:5b:d4:b2:86:da:b9:06:b0:66:69:3f:a1:4e:6d:e4:
be:72:24:c9:4e:c5:9e:df:d3:26:14:60:88:21:16:aa:45:a1:
6f:c8:51:58:a5:3f:91:26:5d:1a:14:bf:49:54:f0:8f:3a:31:
00:78:7b:65:0b:eb:2d:42:fa:f9:c7:6c:6f:4b:8e:ad:da:3a:
18:3c:01:60:89:3e:94:18:e1:af:74:23:64:b0:f1:96:85:33:
92:b0:af:70:9c:76:f6:ab:51:ea:c2:ef:fc:59:d3:cc:17:9e:
f1:45:33:57:32:86:0b:fa:e9:c9:10:06:e3:7a:96:71:7e:13:
f8:de:64:a9:7a:b5:cb:db:0b:0d:b6:42:a6:fd:8f:a3:34:cb:
ac:03:08:3d:95:59:a1:b0:92:86:15:21:3d:cd:e0:96:bf:a8:
56:43:ae:95:e4:9c:cf:78:81:14:5a:87:71:c1:15:ab:48:0c:
c1:63:00:58:fe:5d:d3:c0:c5:e7:0f:80:eb:5f:2d:0d:d6:49:
71:45:1b:a6:6d:4d:66:b8:85:25:36:76:c6:21:3d:35:fe:8f:
be:68:4f:7c:4f:47:38:e9:27:f9:75:12:31:14:b8:dc:d1:67:
ed:e4:4f:64:59:34:a5:1d:71:11:91:fb:0f:0b:d8:c4:a3:92:
7d:b6:89:86
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTZEMjQxMTAvBgNVBAUTKDNFQzgzNDIwNEQ2QkFBRjk5MTQwQzAzQkQ3NjIxMTQ1
QzA3QkJBNjIwHhcNMjUxMjI2MTUwMjE0WhcNMjYwMTAyMTUwMjE0WjAYMRYwFAYD
VQQDDA02OTRlYTM3Ni1mN2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2KNQeD1kV9R3aCwLkL8t0TG3UwbESqwmgqmOIElTB5ZRb8jZ0vchrVmSfuEz
n5eq6+CtA4KlfKyEzNqK0FQGE7gDhAkuL4PlRwDPvJM9zrBWdOQcJBgwQ7t8JAOM
REGt6da0gAfPVifcWwUfuI2vGe0Jz3b5xy3oemtJNKkaex6Jo6DZ92cPK4ZixMsC
j7FjcTZMSrjvCooHJOXTWXTRl0Ik1mGfDZDQnUF/EosTZwZPPuxgB0X4flImtj3s
Ptvh7j6Jyezb5jhGrwBS0o2DPFJ1ipZLSE/SIqWaA+14/l5xScQVw7zK3tzHVkmn
uReLJMgLB7obvbT0+Y7Ly4RhwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4FMR7G
oLgGkXRBu+b+BQz6INZOMB8GA1UdIwQYMBaAFD7INCBNa6r5kUDAO9diEUXAe7pi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkQyNC81NTBFMjdGMjFE
QTQxMUUyOEM1MzNCOUEwOEIwMkNEMi9Qc2cwSUUxcnF2bVJRTUE3MTJJUlJjQjd1
bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BzZzBJRTFycXZtUlFNQTcxMklSUmNCN3VtSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NkQyNC81NTBFMjdGMjFEQTQxMUUyOEM1MzNCOUEwOEIwMkNEMi9Qc2cwSUUxcnF2
bVJRTUE3MTJJUlJjQjd1bUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQANXaxb1LKG2rkGsGZpP6FObeS+ciTJTsWe39MmFGCIIRaqRaFvyFFY
pT+RJl0aFL9JVPCPOjEAeHtlC+stQvr5x2xvS46t2joYPAFgiT6UGOGvdCNksPGW
hTOSsK9wnHb2q1Hqwu/8WdPMF57xRTNXMoYL+unJEAbjepZxfhP43mSperXL2wsN
tkKm/Y+jNMusAwg9lVmhsJKGFSE9zeCWv6hWQ66V5JzPeIEUWodxwRWrSAzBYwBY
/l3TwMXnD4DrXy0N1klxRRumbU1muIUlNnbGIT01/o++aE98T0c46Sf5dRIxFLjc
0Wft5E9kWTSlHXERkfsPC9jEo5J9tomG
-----END CERTIFICATE-----
Generated at Sat Dec 27 17:37:36 2025 by rpki-client