This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft File: PxScskgQcfFD-NFWCCear8cdEVw.mft (raw, json) Hash identifier: y2ax6Q1pOJAQ+FTMNRiwaKN4K22Pv5O7uAue3kp5c1M= Subject key identifier: 5B:C3:D6:C7:61:6F:24:E3:7D:FC:28:8F:3A:39:88:F9:78:4C:C5:16 Authority key identifier: 3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C Certificate issuer: /CN=A911C18F/serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Certificate serial: 1F56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft Manifest number: 1F4B Signing time: Mon 22 Dec 2025 15:49:23 +0000 Manifest this update: Mon 22 Dec 2025 15:49:23 +0000 Manifest next update: Mon 29 Dec 2025 15:49:23 +0000 Files and hashes: 1: PxScskgQcfFD-NFWCCear8cdEVw.crl (hash: RVJyP422acrNIwrqTJEfoUJT5NS/YlKxFN+uf7zUt+w=) 2: A9FAE7FA5E1911E6B8CE9C5BC4F9AE02.roa (hash: xZ7a43he46yBIpdPfo3VUuRojtSoHm3dh9Gg3MtbJcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8022 (0x1f56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C18F, serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Validity Not Before: Dec 22 15:49:23 2025 GMT Not After : Dec 29 15:49:23 2025 GMT Subject: CN=69496883-ad22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:cb:7b:6b:3a:d8:47:39:88:35:d9:6e:bd: 27:a0:c4:16:18:b9:f0:9d:e2:74:cb:ee:b9:33:c5: c4:75:77:2b:05:84:ab:c6:d4:08:6b:cf:52:7c:3a: 95:da:2e:90:d3:0f:43:19:c6:1e:ac:65:1e:25:31: f5:6a:16:8b:1b:84:5f:1a:e9:96:68:0d:f9:19:59: fb:a6:ed:7f:6a:eb:37:f9:18:3c:e3:24:48:59:94: 11:1a:ba:3f:c1:ef:16:5a:3d:b8:87:c2:9e:e7:cf: 68:a9:9b:bf:f5:7c:a9:20:ef:6d:3f:c7:9c:29:1d: 41:37:b8:5e:38:c5:ea:cf:f4:54:ec:d4:57:d4:33: 84:a3:12:1f:e9:8d:87:ee:c6:04:e1:a7:04:fa:09: 1c:4d:d3:ec:92:8e:f8:41:19:e4:5d:9b:3a:a2:84: 7e:3d:1c:d6:4f:ac:74:e9:d7:cd:b9:0d:01:f5:c7: a1:01:35:7f:b7:68:58:cd:a3:ca:51:10:3c:d3:58: ee:1a:2e:85:1b:2a:8b:6f:ad:b0:26:0e:79:64:19: b1:2d:12:b9:95:0b:e8:4d:8f:0d:7c:51:8f:67:ae: 2a:b0:99:fc:aa:3d:a6:fc:99:04:71:2f:73:8d:46: 74:3b:34:93:75:b6:1a:b1:09:88:ef:44:55:1f:3d: ef:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C3:D6:C7:61:6F:24:E3:7D:FC:28:8F:3A:39:88:F9:78:4C:C5:16 X509v3 Authority Key Identifier: keyid:3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:59:7a:fa:b5:e3:86:a3:78:52:87:4c:28:6e:d1:72:67:74: 08:b4:a2:6d:54:cf:b5:cd:4a:85:fc:41:bf:93:38:04:49:d1: 47:93:76:72:7c:38:9b:b9:3b:64:3c:ad:10:0c:66:6f:c3:b1: ae:19:ea:04:9a:bf:f9:2f:9a:d8:23:ad:dc:c0:1b:a2:b8:70: 81:0a:52:77:19:98:24:bf:82:0b:f4:c8:a6:f4:a1:1c:22:ae: c1:a2:eb:44:b0:08:60:b2:e4:56:3e:c8:4d:ea:1f:36:28:d1: 6f:a8:e5:f3:76:a9:d4:fb:58:23:01:63:a7:cc:14:d4:ed:36: c6:3b:c2:a1:ff:d3:9a:7c:bd:d5:fc:a7:56:bc:f0:13:ea:3c: 84:51:81:bb:33:1a:70:00:93:26:e3:86:b5:46:fb:bd:5c:3e: 60:de:60:80:e9:a0:1e:bf:e6:32:db:65:ce:2f:10:7a:1d:30: 40:ff:c5:60:4e:22:7a:91:02:35:10:89:78:90:88:62:df:83: ec:8e:19:5a:d5:6a:d8:02:51:d1:d8:de:ff:9f:d4:fb:f2:87: eb:59:ea:a0:28:02:ce:9f:2e:44:b7:45:34:cc:d0:9a:e8:2a: b4:9f:ce:a0:85:ea:f5:8e:64:ea:00:b4:c0:09:b1:ba:33:1f: e4:eb:80:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxOEYxMTAvBgNVBAUTKDNGMTQ5Q0IyNDgxMDcxRjE0M0Y4RDE1NjA4Mjc5QUFG QzcxRDExNUMwHhcNMjUxMjIyMTU0OTIzWhcNMjUxMjI5MTU0OTIzWjAYMRYwFAYD VQQDDA02OTQ5Njg4My1hZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArI7Le2s62Ec5iDXZbr0noMQWGLnwneJ0y+65M8XEdXcrBYSrxtQIa89SfDqV 2i6Q0w9DGcYerGUeJTH1ahaLG4RfGumWaA35GVn7pu1/aus3+Rg84yRIWZQRGro/ we8WWj24h8Ke589oqZu/9XypIO9tP8ecKR1BN7heOMXqz/RU7NRX1DOEoxIf6Y2H 7sYE4acE+gkcTdPsko74QRnkXZs6ooR+PRzWT6x06dfNuQ0B9cehATV/t2hYzaPK URA801juGi6FGyqLb62wJg55ZBmxLRK5lQvoTY8NfFGPZ64qsJn8qj2m/JkEcS9z jUZ0OzSTdbYasQmI70RVHz3vzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvD1sdh byTjffwojzo5iPl4TMUWMB8GA1UdIwQYMBaAFD8UnLJIEHHxQ/jRVggnmq/HHRFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE4Ri84RTdBOUJBQzVF MTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNmRkQtTkZXQ0NlYXI4Y2RF VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B4U2Nza2dRY2ZGRC1ORldDQ2VhcjhjZEVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE4Ri84RTdBOUJBQzVFMTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNm RkQtTkZXQ0NlYXI4Y2RFVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfWXr6teOGo3hSh0wobtFyZ3QItKJtVM+1zUqF/EG/kzgESdFHk3Zy fDibuTtkPK0QDGZvw7GuGeoEmr/5L5rYI63cwBuiuHCBClJ3GZgkv4IL9Mim9KEc Iq7BoutEsAhgsuRWPshN6h82KNFvqOXzdqnU+1gjAWOnzBTU7TbGO8Kh/9OafL3V /KdWvPAT6jyEUYG7MxpwAJMm44a1Rvu9XD5g3mCA6aAev+Yy22XOLxB6HTBA/8Vg TiJ6kQI1EIl4kIhi34Psjhla1WrYAlHR2N7/n9T78ofrWeqgKALOny5Et0U0zNCa 6Cq0n86gher1jmTqALTACbG6Mx/k64AX -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:20 2025 by rpki-client