This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft File: PP5vPrHYknFeQTbpuoVrmPZxR7A.mft (raw, json) Hash identifier: WIlFv2Ol55mApSI7z02mUsA9+9HSaCBIn4E2Ig3P5vo= Subject key identifier: 9B:8C:DE:67:80:F1:C0:01:1A:A2:C8:D2:DC:D6:B6:92:AB:9A:AD:8D Authority key identifier: 3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0 Certificate issuer: /CN=A9122D89/serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0 Certificate serial: 0809 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft Manifest number: 0802 Signing time: Mon 22 Dec 2025 21:17:08 +0000 Manifest this update: Mon 22 Dec 2025 21:17:08 +0000 Manifest next update: Mon 29 Dec 2025 21:17:08 +0000 Files and hashes: 1: PP5vPrHYknFeQTbpuoVrmPZxR7A.crl (hash: 9kvYf+LYhHuLKm+FZgCdkcoq7lAFOKEvLaDzNBcURCk=) 2: 7E8114F414E611EB82C98471C4F9AE02.roa (hash: 5irZrEFk8FHbNW4pjJl+pAv8i1MZscE1joryry7BH0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2057 (0x809) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122D89, serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0 Validity Not Before: Dec 22 21:17:08 2025 GMT Not After : Dec 29 21:17:08 2025 GMT Subject: CN=6949b554-9e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:83:99:dc:49:f2:c3:c9:92:67:18:0f:ea:47: 9d:bf:82:9d:31:82:de:87:b1:1e:50:fe:ee:1d:d1: eb:5b:a6:f0:ef:72:77:9f:6b:59:7f:93:6f:b3:93: 13:d5:44:94:7b:18:90:8d:09:d3:a3:8e:e7:b7:2a: f7:1a:22:85:d0:56:92:ac:df:38:ad:f1:99:9b:11: ce:09:bd:93:38:b4:a8:22:9d:86:e8:54:0e:3b:fc: 11:07:7f:86:a8:53:19:d6:9c:e5:eb:7b:7c:6a:ff: 1e:45:0d:35:e4:ef:11:75:2a:b6:f0:ef:42:96:9a: 82:4f:35:d5:a1:0d:72:df:71:6a:ba:a0:32:0a:f3: 03:58:8a:d7:45:57:06:3f:d9:1e:35:a4:4f:fe:6d: c4:6d:2a:70:d5:f7:db:19:e4:c5:77:4e:1a:a1:af: c0:aa:f3:1e:e9:3a:b0:8a:88:33:3c:9c:24:a4:07: 26:79:b4:d5:0d:e3:0b:ca:da:58:f3:6f:bf:9a:d2: 5d:15:ab:c4:20:84:69:34:fe:25:12:3b:ae:44:ed: a5:57:4a:70:2f:c6:41:b3:00:ee:7e:2f:73:26:b5: 41:c3:aa:68:a6:51:af:41:b5:9f:d3:18:b8:39:58: 5d:ea:cf:e2:16:ab:39:ec:07:dd:52:67:26:26:3e: 82:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8C:DE:67:80:F1:C0:01:1A:A2:C8:D2:DC:D6:B6:92:AB:9A:AD:8D X509v3 Authority Key Identifier: keyid:3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:60:35:c6:c5:63:f1:b8:ed:05:29:0d:7b:84:27:0d:4c:ac: d6:78:9f:e6:10:84:77:ad:9b:2c:94:24:34:21:a4:bd:86:40: 88:3e:f7:2a:56:b0:b7:60:f9:89:98:61:17:36:6e:59:47:1f: 28:dd:d0:28:d4:33:76:f5:37:26:b4:23:9a:79:f2:80:fb:e8: d6:aa:c4:0d:79:65:d5:95:d9:8f:b8:c0:99:fd:ca:13:49:ea: 91:a5:84:31:9c:f5:30:88:48:9d:59:1c:1f:fc:68:0d:d9:1e: dd:14:eb:bf:e7:c6:f5:34:38:b4:c9:62:92:4f:96:31:eb:89: a9:37:53:d9:a8:b8:e1:29:22:aa:21:bb:66:51:ee:b7:a1:59: 8e:2e:a5:df:a3:aa:4b:7d:1f:f2:96:42:64:c3:dd:21:c9:f0: 6b:ea:fb:10:a0:eb:bc:e7:6f:9c:ed:9a:a2:bf:64:ae:15:1d: dc:63:39:d9:bc:76:d2:65:f8:89:fb:ec:d3:5c:b1:92:3c:33: ba:b3:99:d5:4b:f5:84:cd:21:ea:3b:70:be:01:71:d2:91:20: fa:00:98:72:1f:8e:17:a7:cf:c4:0b:c5:8e:60:e9:1a:49:82: 93:e9:c3:d1:57:d3:85:30:de:f0:bf:7b:79:65:36:b3:b6:b5: ed:c4:63:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx MjJEODkxMTAvBgNVBAUTKDNDRkU2RjNFQjFEODkyNzE1RTQxMzZFOUJBODU2Qjk4 RjY3MTQ3QjAwHhcNMjUxMjIyMjExNzA4WhcNMjUxMjI5MjExNzA4WjAYMRYwFAYD VQQDDA02OTQ5YjU1NC05ZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhoOZ3Enyw8mSZxgP6kedv4KdMYLeh7EeUP7uHdHrW6bw73J3n2tZf5Nvs5MT 1USUexiQjQnTo47ntyr3GiKF0FaSrN84rfGZmxHOCb2TOLSoIp2G6FQOO/wRB3+G qFMZ1pzl63t8av8eRQ015O8RdSq28O9ClpqCTzXVoQ1y33FquqAyCvMDWIrXRVcG P9keNaRP/m3EbSpw1ffbGeTFd04aoa/AqvMe6TqwiogzPJwkpAcmebTVDeMLytpY 82+/mtJdFavEIIRpNP4lEjuuRO2lV0pwL8ZBswDufi9zJrVBw6poplGvQbWf0xi4 OVhd6s/iFqs57AfdUmcmJj6CvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuM3meA 8cABGqLI0tzWtpKrmq2NMB8GA1UdIwQYMBaAFDz+bz6x2JJxXkE26bqFa5j2cUew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkQ4OS9DNkE0QTVFMjA4 NDQxMUVCOUM3MzY1MTRDNEY5QUUwMi9QUDV2UHJIWWtuRmVRVGJwdW9Wcm1QWnhS N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BQNXZQckhZa25GZVFUYnB1b1ZybVBaeFI3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkQ4OS9DNkE0QTVFMjA4NDQxMUVCOUM3MzY1MTRDNEY5QUUwMi9QUDV2UHJIWWtu RmVRVGJwdW9Wcm1QWnhSN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZYDXGxWPxuO0FKQ17hCcNTKzWeJ/mEIR3rZsslCQ0IaS9hkCIPvcq VrC3YPmJmGEXNm5ZRx8o3dAo1DN29TcmtCOaefKA++jWqsQNeWXVldmPuMCZ/coT SeqRpYQxnPUwiEidWRwf/GgN2R7dFOu/58b1NDi0yWKST5Yx64mpN1PZqLjhKSKq IbtmUe63oVmOLqXfo6pLfR/ylkJkw90hyfBr6vsQoOu852+c7Zqiv2SuFR3cYznZ vHbSZfiJ++zTXLGSPDO6s5nVS/WEzSHqO3C+AXHSkSD6AJhyH44Xp8/EC8WOYOka SYKT6cPRV9OFMN7wv3t5ZTaztrXtxGOv -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:48 2025 by rpki-client