This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft File: PbshszWLCF8IIbTcBqkanEXELLw.mft (raw, json) Hash identifier: GkJboEctlmgNlOFJ1K3vz1/K6RhdHaod2PsyFiopnzI= Subject key identifier: 0B:C4:85:6C:6B:FA:DE:42:24:36:47:02:41:DD:EF:92:2D:F2:A8:E3 Authority key identifier: 3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC Certificate issuer: /CN=A9199B5E/serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft Manifest number: 01EF Signing time: Tue 23 Dec 2025 01:35:06 +0000 Manifest this update: Tue 23 Dec 2025 01:35:05 +0000 Manifest next update: Tue 30 Dec 2025 01:35:05 +0000 Files and hashes: 1: PbshszWLCF8IIbTcBqkanEXELLw.crl (hash: 9YvH/6D+fpNlV0HXQvFObRe9otdys8dG+NzgBVw8eg8=) 2: 0FFD0884E94C11EDB883CD14C4F9AE02.roa (hash: HZiGn+RSrQ/z8mUJhOj/YSMFN8ATDW3gRGnLr/Np+qA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199B5E, serialNumber=3DBB21B3358B085F0821B4DC06A91A9C45C42CBC Validity Not Before: Dec 23 01:35:05 2025 GMT Not After : Dec 30 01:35:05 2025 GMT Subject: CN=6949f1ca-1a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c1:66:ba:72:5b:1e:ce:d5:1c:77:35:a5:ed: 52:47:66:fd:77:6b:12:bf:40:81:c9:64:08:bd:fc: 17:b5:22:f3:6a:2d:a0:1e:a0:3b:03:56:d8:1f:e7: fa:2b:4c:63:8d:dc:13:85:a5:1b:8e:2f:0c:c4:ba: ca:9d:c0:75:6f:01:b5:41:25:85:45:70:39:d2:e1: 68:2c:9c:71:aa:c8:f1:08:d1:5d:48:ce:f8:c9:da: 92:3f:86:2e:d2:01:62:b3:a4:1c:96:fb:e8:a4:4c: 5f:1b:6d:a2:00:08:f3:1e:4f:7d:eb:fd:9e:5c:bf: bd:d1:da:9d:87:74:38:3b:58:56:42:7b:73:70:be: 17:5f:af:11:59:1e:5a:6b:70:8e:e5:33:6e:6f:e3: 92:4a:56:71:91:90:40:d4:7b:cd:32:98:19:fc:44: b6:88:8b:d7:89:2b:68:69:7a:af:e5:cc:7f:2b:26: 95:25:8b:8e:56:8e:84:2f:8f:0a:6e:2d:6e:c9:8f: 37:11:99:79:93:eb:2d:93:6f:53:65:ae:cb:03:e5: 3b:06:be:0e:e5:06:24:cf:bd:1f:10:50:c1:44:d8: 69:d8:91:f0:15:a5:4f:ee:b9:30:06:cb:3d:29:80: ae:d0:75:59:30:38:86:a1:4e:56:50:ab:04:f7:89: de:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C4:85:6C:6B:FA:DE:42:24:36:47:02:41:DD:EF:92:2D:F2:A8:E3 X509v3 Authority Key Identifier: keyid:3D:BB:21:B3:35:8B:08:5F:08:21:B4:DC:06:A9:1A:9C:45:C4:2C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbshszWLCF8IIbTcBqkanEXELLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B5E/F8723FE4E94711EDAD106909C4F9AE02/PbshszWLCF8IIbTcBqkanEXELLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ce:92:9e:12:26:46:05:33:bc:5f:4c:1a:ce:2a:b0:86:e6: 04:c6:d8:cf:d7:4d:07:ee:aa:42:b3:50:5e:db:4c:57:a5:6d: cd:c1:83:5f:20:3c:58:d3:66:43:e6:9f:bd:f1:c0:af:43:71: d9:85:9c:cd:d7:9b:70:76:b3:ea:e9:fd:42:b2:0e:3e:d9:2e: 79:ed:df:a4:a9:20:f1:af:56:8d:08:e1:e1:84:42:ae:4d:8a: c0:09:8a:41:44:88:26:02:ce:5d:f2:c1:92:0c:4b:62:a3:7f: b8:d2:f0:ad:80:70:38:81:f2:8b:66:37:05:9a:12:0b:34:d2: 3d:17:c6:d2:ae:34:15:b9:c3:5a:b0:25:32:32:9c:6b:c5:39: 1f:fd:80:b1:92:b0:6c:14:e6:c7:ef:fd:ca:ac:79:4d:76:3c: d1:e5:26:62:8e:66:d3:4d:47:a1:d9:1f:a4:e7:ea:c9:fe:14: f3:fc:22:9e:08:e0:f7:d3:b5:45:79:4a:2c:59:7e:2a:9b:3a: f7:86:ef:8a:fc:ee:d4:7d:5f:d3:1b:33:2b:b5:5d:69:4a:0a: 56:df:a4:71:fa:5a:4d:b5:73:ce:05:e7:fd:7e:49:0f:79:7a: 3b:d3:34:86:82:dd:27:c1:8c:e9:73:aa:56:7f:c8:54:fb:7d: 6b:13:4b:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCNUUxMTAvBgNVBAUTKDNEQkIyMUIzMzU4QjA4NUYwODIxQjREQzA2QTkxQTlD NDVDNDJDQkMwHhcNMjUxMjIzMDEzNTA1WhcNMjUxMjMwMDEzNTA1WjAYMRYwFAYD VQQDDA02OTQ5ZjFjYS0xYTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MFmunJbHs7VHHc1pe1SR2b9d2sSv0CByWQIvfwXtSLzai2gHqA7A1bYH+f6 K0xjjdwThaUbji8MxLrKncB1bwG1QSWFRXA50uFoLJxxqsjxCNFdSM74ydqSP4Yu 0gFis6QclvvopExfG22iAAjzHk996/2eXL+90dqdh3Q4O1hWQntzcL4XX68RWR5a a3CO5TNub+OSSlZxkZBA1HvNMpgZ/ES2iIvXiStoaXqv5cx/KyaVJYuOVo6EL48K bi1uyY83EZl5k+stk29TZa7LA+U7Br4O5QYkz70fEFDBRNhp2JHwFaVP7rkwBss9 KYCu0HVZMDiGoU5WUKsE94neaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvEhWxr +t5CJDZHAkHd75It8qjjMB8GA1UdIwQYMBaAFD27IbM1iwhfCCG03AapGpxFxCy8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI1RS9GODcyM0ZFNEU5 NDcxMUVEQUQxMDY5MDlDNEY5QUUwMi9QYnNoc3pXTENGOElJYlRjQnFrYW5FWEVM THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Bic2hzeldMQ0Y4SUliVGNCcWthbkVYRUxMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUI1RS9GODcyM0ZFNEU5NDcxMUVEQUQxMDY5MDlDNEY5QUUwMi9QYnNoc3pXTENG OElJYlRjQnFrYW5FWEVMTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7zpKeEiZGBTO8X0waziqwhuYExtjP100H7qpCs1Be20xXpW3NwYNf IDxY02ZD5p+98cCvQ3HZhZzN15twdrPq6f1Csg4+2S557d+kqSDxr1aNCOHhhEKu TYrACYpBRIgmAs5d8sGSDEtio3+40vCtgHA4gfKLZjcFmhILNNI9F8bSrjQVucNa sCUyMpxrxTkf/YCxkrBsFObH7/3KrHlNdjzR5SZijmbTTUeh2R+k5+rJ/hTz/CKe COD307VFeUosWX4qmzr3hu+K/O7UfV/TGzMrtV1pSgpW36Rx+lpNtXPOBef9fkkP eXo70zSGgt0nwYzpc6pWf8hU+31rE0tZ -----END CERTIFICATE-----Generated at Tue Dec 23 10:47:31 2025 by rpki-client