This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft File: pWEUadKee9PIXTGAtycy6qt6-5Y.mft (raw, json) Hash identifier: Qj86BiljFWjYgc7LBx1ZJzU4gV1LTzdcXLYQitQWzq0= Subject key identifier: 7F:6C:81:0A:91:74:66:BE:FA:F5:FA:8D:25:39:12:CF:9E:F2:CF:ED Authority key identifier: A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96 Certificate issuer: /CN=A9146BA1/serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96 Certificate serial: 0426 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft Manifest number: 0420 Signing time: Sat 20 Dec 2025 23:37:04 +0000 Manifest this update: Sat 20 Dec 2025 23:37:04 +0000 Manifest next update: Sat 27 Dec 2025 23:37:04 +0000 Files and hashes: 1: pWEUadKee9PIXTGAtycy6qt6-5Y.crl (hash: IDDw0M3Z0RM8oLCl9QSNFdAd7Sp6FGdRkF0VcMbMWQU=) 2: F67BB6E890AB11ECAB81252FC4F9AE02.roa (hash: 2seh0qxAc2BF9PqaOJpWiLsBwQeqToRGwKWIaD/PtHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1062 (0x426) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146BA1, serialNumber=A5611469D29E7BD3C85D3180B72732EAAB7AFB96 Validity Not Before: Dec 20 23:37:04 2025 GMT Not After : Dec 27 23:37:04 2025 GMT Subject: CN=69473320-14a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a9:c9:c4:5c:dc:82:02:8f:51:b8:70:1b:c8: f4:df:91:29:03:ac:71:9b:a3:b6:63:2a:fe:cc:1d: b2:7b:d8:83:9c:a4:2c:07:9a:f8:48:57:5c:97:05: da:d2:32:0f:c7:e0:cf:04:d5:0f:fa:a5:a1:c3:a7: 29:fc:e0:ea:8d:5c:5b:dd:ca:c9:8e:ce:2f:3e:66: 83:d5:87:5b:02:db:ca:25:cc:2e:b2:64:c4:a4:9f: 6f:c8:23:4b:01:67:50:d9:a5:74:78:6d:62:7c:59: 19:37:60:f5:a7:a7:32:94:bc:09:c7:ca:66:7c:bd: ae:9c:3c:40:c5:1d:51:d6:97:66:7c:0d:43:8f:28: 2d:6f:b7:93:95:c1:01:30:fa:26:d8:82:a7:75:5a: bc:0d:dd:d5:51:a0:1b:6e:e5:aa:8c:09:4a:4e:4b: ef:70:60:3d:ec:f6:f9:af:e8:9b:b5:fe:10:d7:f8: d0:83:e5:30:58:eb:e8:4b:d8:69:0f:d4:c1:a1:ca: bf:8b:25:55:53:12:ba:dd:82:4e:9d:42:ef:5b:cd: ea:f1:e6:63:d7:33:33:62:96:bd:75:91:79:38:5f: a4:d6:86:8a:c4:ce:7f:5c:0b:f4:85:99:51:1d:b9: a8:98:7b:0b:a4:9d:74:09:68:c3:95:86:0c:be:07: 8a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6C:81:0A:91:74:66:BE:FA:F5:FA:8D:25:39:12:CF:9E:F2:CF:ED X509v3 Authority Key Identifier: keyid:A5:61:14:69:D2:9E:7B:D3:C8:5D:31:80:B7:27:32:EA:AB:7A:FB:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWEUadKee9PIXTGAtycy6qt6-5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146BA1/63B4EA9890A911EC9765B22DC4F9AE02/pWEUadKee9PIXTGAtycy6qt6-5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:f4:ec:c7:14:01:7f:9a:2e:24:fe:41:11:d3:96:34:f8:86: c3:f4:a8:23:46:0f:76:7e:f8:3e:b2:8c:5e:21:d6:4b:fc:a7: 45:bf:86:7f:78:29:2e:40:f0:4d:da:c6:51:c5:dd:50:f1:e8: 6d:45:00:c8:ad:6c:41:31:c3:5d:a7:e7:ed:53:01:79:9b:3a: 8d:6e:7e:8f:8c:ba:d0:f6:69:ba:c1:92:f8:f3:10:80:a8:94: 1e:fa:f9:23:f9:29:2b:53:36:d2:0f:b2:f2:62:4f:dc:5f:d6: 1b:4f:68:e4:9e:96:63:32:50:c1:b8:d3:67:1e:97:f2:af:05: 98:29:d5:56:1d:8a:37:c7:59:63:bd:a8:5a:2d:84:f4:e6:de: eb:d6:46:20:76:c7:b0:b1:31:24:e4:58:f1:c3:f9:c7:d8:89: 0e:da:ce:60:74:a6:06:a2:da:7a:2a:93:a5:48:0e:ec:ef:59: cf:3f:cf:7d:cb:3c:5b:3a:6a:8e:2c:1f:5f:a6:d8:1e:2b:60: ec:e0:8c:b0:90:97:38:7f:f8:df:21:ac:5f:38:f6:54:76:8f: c9:0e:e1:4f:99:d0:f7:4c:38:12:94:52:d7:cc:3a:42:0b:f1: 83:7e:7c:ac:03:6e:51:fc:76:3f:82:b8:d6:10:4d:b5:78:57: 01:67:3c:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZCQTExMTAvBgNVBAUTKEE1NjExNDY5RDI5RTdCRDNDODVEMzE4MEI3MjczMkVB QUI3QUZCOTYwHhcNMjUxMjIwMjMzNzA0WhcNMjUxMjI3MjMzNzA0WjAYMRYwFAYD VQQDDA02OTQ3MzMyMC0xNGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmanJxFzcggKPUbhwG8j035EpA6xxm6O2Yyr+zB2ye9iDnKQsB5r4SFdclwXa 0jIPx+DPBNUP+qWhw6cp/ODqjVxb3crJjs4vPmaD1YdbAtvKJcwusmTEpJ9vyCNL AWdQ2aV0eG1ifFkZN2D1p6cylLwJx8pmfL2unDxAxR1R1pdmfA1Djygtb7eTlcEB MPom2IKndVq8Dd3VUaAbbuWqjAlKTkvvcGA97Pb5r+ibtf4Q1/jQg+UwWOvoS9hp D9TBocq/iyVVUxK63YJOnULvW83q8eZj1zMzYpa9dZF5OF+k1oaKxM5/XAv0hZlR HbmomHsLpJ10CWjDlYYMvgeKhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9sgQqR dGa++vX6jSU5Es+e8s/tMB8GA1UdIwQYMBaAFKVhFGnSnnvTyF0xgLcnMuqrevuW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkJBMS82M0I0RUE5ODkw QTkxMUVDOTc2NUIyMkRDNEY5QUUwMi9wV0VVYWRLZWU5UElYVEdBdHljeTZxdDYt NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXRVVhZEtlZTlQSVhUR0F0eWN5NnF0Ni01WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkJBMS82M0I0RUE5ODkwQTkxMUVDOTc2NUIyMkRDNEY5QUUwMi9wV0VVYWRLZWU5 UElYVEdBdHljeTZxdDYtNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy9OzHFAF/mi4k/kER05Y0+IbD9KgjRg92fvg+soxeIdZL/KdFv4Z/ eCkuQPBN2sZRxd1Q8ehtRQDIrWxBMcNdp+ftUwF5mzqNbn6PjLrQ9mm6wZL48xCA qJQe+vkj+SkrUzbSD7LyYk/cX9YbT2jknpZjMlDBuNNnHpfyrwWYKdVWHYo3x1lj vahaLYT05t7r1kYgdsewsTEk5Fjxw/nH2IkO2s5gdKYGotp6KpOlSA7s71nPP899 yzxbOmqOLB9fptgeK2Ds4IywkJc4f/jfIaxfOPZUdo/JDuFPmdD3TDgSlFLXzDpC C/GDfnysA25R/HY/grjWEE21eFcBZzzH -----END CERTIFICATE-----Generated at Sun Dec 21 14:40:48 2025 by rpki-client