This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft File: PI-14Mz34QXfzLtMj4NZ71phXx8.mft (raw, json) Hash identifier: HOr2on1DvKM81iRGTinHzTZ9NMDGhIpNLSHJ1p5bf5U= Subject key identifier: D0:42:72:67:40:79:8E:28:7E:77:E9:F0:E9:70:1F:52:74:A5:E6:2F Authority key identifier: 3C:8F:B5:E0:CC:F7:E1:05:DF:CC:BB:4C:8F:83:59:EF:5A:61:5F:1F Certificate issuer: /CN=A9134C75/serialNumber=3C8FB5E0CCF7E105DFCCBB4C8F8359EF5A615F1F Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft Manifest number: 1D Signing time: Tue 23 Dec 2025 06:40:07 +0000 Manifest this update: Tue 23 Dec 2025 06:40:06 +0000 Manifest next update: Tue 30 Dec 2025 06:40:06 +0000 Files and hashes: 1: PI-14Mz34QXfzLtMj4NZ71phXx8.crl (hash: 1UzKfp71p/Dp5SdG9UO+W/tKb0XG8PfTf3qcvtdgSZU=) 2: 5672783CBA2111F08A546E86C4F9AE02.roa (hash: hKmNb8cXZBZYEP/LnSxHf1U104+IEZAgDxNJ3uKpFbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.crl rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134C75, serialNumber=3C8FB5E0CCF7E105DFCCBB4C8F8359EF5A615F1F Validity Not Before: Dec 23 06:40:06 2025 GMT Not After : Dec 30 06:40:06 2025 GMT Subject: CN=694a3947-bb3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ac:81:2e:48:c8:01:c1:c0:e6:c0:84:f8:5e: 1e:ad:88:31:96:04:9b:df:8d:03:50:05:64:b0:ac: 4f:93:82:45:ab:da:84:9e:82:7f:db:cd:00:d1:1e: 8b:de:d9:cb:ec:b4:76:55:58:40:9f:2c:89:e2:78: d5:3d:7e:b4:5d:93:72:ad:37:e5:80:b4:b6:fe:2c: 5e:89:ee:fe:79:a7:a6:36:ec:42:d0:4a:ac:64:4b: fc:3f:7d:c7:0b:8c:ab:bf:cb:b3:6c:b6:cb:62:80: f5:76:a9:58:f3:b2:9a:4f:b4:35:d2:52:a9:38:d0: 01:5b:17:3e:5a:48:aa:4d:2b:88:c5:8a:21:d9:c8: 07:07:17:c0:a5:9a:5c:80:e6:61:13:ac:dd:73:c6: 53:c2:3c:c5:2c:04:17:c7:81:c6:b6:7f:4b:0a:e3: 93:44:82:56:6b:2d:43:b4:c4:a0:fe:66:6a:8e:b5: 9c:82:3d:58:9e:da:93:3e:ef:d6:03:0c:48:e0:50: ad:e9:44:d6:46:af:15:16:11:31:92:a1:d0:df:cb: 36:fb:56:03:c8:a4:79:11:86:7c:ce:8e:d1:38:28: 17:70:e2:e4:ec:4f:91:66:9e:00:ef:92:b5:17:f6: c1:86:a1:40:bc:55:8b:f3:f0:4b:43:22:4f:4f:1a: 1a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:42:72:67:40:79:8E:28:7E:77:E9:F0:E9:70:1F:52:74:A5:E6:2F X509v3 Authority Key Identifier: keyid:3C:8F:B5:E0:CC:F7:E1:05:DF:CC:BB:4C:8F:83:59:EF:5A:61:5F:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:b8:24:ef:03:30:47:84:37:b6:e0:a9:e7:fd:d5:55:a2:14: 63:d9:a6:27:09:80:de:40:a7:b8:a7:e6:f8:72:35:7d:7f:47: 29:f7:2d:26:0e:f8:be:f6:67:d2:6f:bd:c6:1f:df:62:53:00: 8a:65:df:f9:3f:28:93:3e:3d:65:90:84:ce:43:4a:a2:d6:51: 91:de:5d:b1:69:3f:b4:99:be:fc:e4:74:10:b2:d8:94:32:87: 6b:1e:38:dc:06:e8:e0:e1:5e:37:58:e5:70:73:ce:f1:08:56: 64:18:b7:e1:8f:b6:cd:ff:0f:18:9d:ae:b1:66:55:ae:b7:fb: 21:23:de:c0:95:9d:4a:eb:3b:b2:bc:76:7c:21:d3:fb:9e:b7: 3d:64:48:43:18:78:ff:bf:8a:38:3f:4a:9d:1a:8c:29:41:80: c1:90:5e:30:c9:96:b2:b3:5f:7a:c3:e5:3b:d6:c9:ae:00:ce: 6d:bc:6f:b5:8c:5a:42:da:a3:bd:34:a8:d3:f3:ef:18:55:2f: 9e:50:56:a0:df:9e:8f:b7:a9:02:a5:14:24:66:9a:c7:d1:66: 81:c9:68:67:62:7d:5e:0a:88:ae:4d:fc:92:55:2c:aa:fc:75: 6b:96:d5:34:68:07:fa:bb:61:48:d8:f0:53:a6:76:39:90:d7: 42:8f:1f:dc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NEM3NTExMC8GA1UEBRMoM0M4RkI1RTBDQ0Y3RTEwNURGQ0NCQjRDOEY4MzU5RUY1 QTYxNUYxRjAeFw0yNTEyMjMwNjQwMDZaFw0yNTEyMzAwNjQwMDZaMBgxFjAUBgNV BAMMDTY5NGEzOTQ3LWJiM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvrIEuSMgBwcDmwIT4Xh6tiDGWBJvfjQNQBWSwrE+TgkWr2oSegn/bzQDRHove 2cvstHZVWECfLInieNU9frRdk3KtN+WAtLb+LF6J7v55p6Y27ELQSqxkS/w/fccL jKu/y7NststigPV2qVjzsppPtDXSUqk40AFbFz5aSKpNK4jFiiHZyAcHF8ClmlyA 5mETrN1zxlPCPMUsBBfHgca2f0sK45NEglZrLUO0xKD+ZmqOtZyCPVie2pM+79YD DEjgUK3pRNZGrxUWETGSodDfyzb7VgPIpHkRhnzOjtE4KBdw4uTsT5FmngDvkrUX 9sGGoUC8VYvz8EtDIk9PGhrFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0EJyZ0B5 jih+d+nw6XAfUnSl5i8wHwYDVR0jBBgwFoAUPI+14Mz34QXfzLtMj4NZ71phXx8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0Qzc1LzBGODJGNTg0QkEx RjExRjA5RDlFMjUzQ0M0RjlBRTAyL1BJLTE0TXozNFFYZnpMdE1qNE5aNzFwaFh4 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEktMTRNejM0UVhmekx0TWo0Tlo3MXBoWHg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 Qzc1LzBGODJGNTg0QkExRjExRjA5RDlFMjUzQ0M0RjlBRTAyL1BJLTE0TXozNFFY ZnpMdE1qNE5aNzFwaFh4OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIW4JO8DMEeEN7bgqef91VWiFGPZpicJgN5Ap7in5vhyNX1/Ryn3LSYO +L72Z9JvvcYf32JTAIpl3/k/KJM+PWWQhM5DSqLWUZHeXbFpP7SZvvzkdBCy2JQy h2seONwG6ODhXjdY5XBzzvEIVmQYt+GPts3/DxidrrFmVa63+yEj3sCVnUrrO7K8 dnwh0/uetz1kSEMYeP+/ijg/Sp0ajClBgMGQXjDJlrKzX3rD5TvWya4Azm28b7WM WkLao700qNPz7xhVL55QVqDfno+3qQKlFCRmmsfRZoHJaGdifV4KiK5N/JJVLKr8 dWuW1TRoB/q7YUjY8FOmdjmQ10KPH9w= -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:45 2025 by rpki-client