This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft File: PPkWCCJoGcPp2oTRGVtTJvkkn70.mft (raw, json) Hash identifier: mbdhn7sPhD7MIffw9Ip6N+uAnRRdVsFVhojCHRcM39s= Subject key identifier: FD:1A:0E:23:C6:3D:ED:37:24:5B:2A:C3:4B:0A:B1:24:DE:FC:A7:3A Authority key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD Certificate issuer: /CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD Certificate serial: 0324 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft Manifest number: 030A Signing time: Fri 19 Dec 2025 00:28:06 +0000 Manifest this update: Fri 19 Dec 2025 00:28:06 +0000 Manifest next update: Fri 26 Dec 2025 00:28:06 +0000 Files and hashes: 1: PPkWCCJoGcPp2oTRGVtTJvkkn70.crl (hash: +P2Hi6UUeBCfc14I/s9Uh38cF1t0WHE7Nuucbx0IhTo=) 2: 873C98E0DE5911ED826BDB39C4F9AE02.roa (hash: 499SL3b2qo6tqtvUtTvrd1ycmIPTXzG0Kk7YhvDP3Mk=) 3: 76494F6E146111ED83A8FB50C4F9AE02.roa (hash: qyVadK6PowhxT5dTxZ86nSTovFJ2RAqG5nfVtu7+2Bg=) 4: E8343A14280A11ED80EB7F2FC4F9AE02.roa (hash: HdD/+ld1Uf50ShMo2E2ANBSVseJYDOqUpaCHNPJZLUs=) 5: 807EEE68281011ED9C81C50DC4F9AE02.roa (hash: jD7jiIEoA0zrb6YHgdu7nodN7r96+edv/r/epjKwp04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 804 (0x324) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155AE4, serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD Validity Not Before: Dec 19 00:28:06 2025 GMT Not After : Dec 26 00:28:06 2025 GMT Subject: CN=69449c16-2d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6e:af:61:98:bb:ad:b7:74:b3:50:fd:fd:ca: a2:68:04:ee:b6:8c:74:7a:1d:8e:34:a7:ae:d3:ba: 08:66:24:18:5d:c9:7a:22:49:f3:db:a9:9f:8f:6a: 8d:45:be:57:05:9c:72:ea:21:16:6d:78:8f:0e:b4: c9:4f:94:ff:c6:0e:27:45:4c:b0:ad:05:3e:0e:55: d6:fc:c9:d4:44:53:56:f5:7a:d4:cc:23:f2:4b:8a: 8c:37:39:e8:1f:9b:43:aa:0a:a9:91:2d:5e:80:7a: 47:cf:9c:38:c1:d8:87:7e:6f:c2:17:ef:be:4b:d2: e7:fc:11:63:d0:ab:c0:cf:37:85:f1:1f:e1:a7:14: 50:5a:73:1b:f9:e7:bb:5d:41:d5:40:04:5a:19:73: 04:f1:de:37:f5:e2:fd:83:0e:34:cf:cd:86:10:5a: 00:f0:51:36:89:14:2c:0d:62:8a:f2:a6:de:c6:e6: c7:a8:7c:a5:65:7d:e4:e2:2c:02:f7:56:7c:d3:48: 0b:46:4d:84:20:1a:99:d3:77:77:b7:40:a2:84:12: 57:eb:c7:9a:77:62:b2:ef:10:6f:36:63:ce:2d:3c: 9f:9a:9c:2c:ae:9d:57:ed:d0:6a:49:9c:7b:23:b3: 99:49:58:3d:43:3e:35:bc:f6:3a:72:42:77:cd:b1: 66:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:1A:0E:23:C6:3D:ED:37:24:5B:2A:C3:4B:0A:B1:24:DE:FC:A7:3A X509v3 Authority Key Identifier: keyid:3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:e8:99:65:22:83:6c:46:7c:4b:94:35:93:3e:4b:ed:b7:71: f3:89:16:14:84:15:e0:60:b2:4d:7c:95:0b:e4:40:74:21:40: 8f:54:4a:8d:2f:5b:ee:e6:79:88:44:8b:6b:2c:4f:83:8e:2d: b4:33:9b:b7:1e:ec:fc:0f:05:a9:28:e3:ee:9c:61:52:ff:f0: d3:73:b9:fd:42:6d:c3:67:90:e9:05:91:88:75:08:88:fb:2b: 40:72:a0:27:85:e2:ee:50:7f:ab:c7:a3:28:59:27:19:ef:20: 2f:a1:4e:3f:f1:ab:d6:f9:1f:88:49:cf:45:23:6e:14:13:0a: 93:f1:b9:f4:2b:76:bb:1f:5e:c2:e5:4a:a4:3d:a8:2d:2e:8d: 83:56:48:8d:de:9e:60:a0:df:5f:2c:6e:17:ca:7a:98:e7:fc: ac:f5:13:17:24:4d:ee:14:a1:68:56:8d:48:ba:46:dd:e6:eb: fc:5c:5e:60:ee:5a:23:90:65:14:95:d8:1a:c4:d4:a9:78:f3: 2a:6a:15:1d:fb:1c:8a:e9:0a:41:ae:52:0f:5d:55:70:b0:2c: 74:5e:b2:0e:7a:06:4f:f5:9a:16:97:10:2e:78:d0:2c:6a:82: 45:fb:ea:20:2a:ff:71:c4:1c:62:af:1c:aa:8b:df:6a:27:c9: 06:10:99:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBRTQxMTAvBgNVBAUTKDNDRjkxNjA4MjI2ODE5QzNFOURBODREMTE5NUI1MzI2 RjkyNDlGQkQwHhcNMjUxMjE5MDAyODA2WhcNMjUxMjI2MDAyODA2WjAYMRYwFAYD VQQDDA02OTQ0OWMxNi0yZDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxW6vYZi7rbd0s1D9/cqiaATutox0eh2ONKeu07oIZiQYXcl6Iknz26mfj2qN Rb5XBZxy6iEWbXiPDrTJT5T/xg4nRUywrQU+DlXW/MnURFNW9XrUzCPyS4qMNzno H5tDqgqpkS1egHpHz5w4wdiHfm/CF+++S9Ln/BFj0KvAzzeF8R/hpxRQWnMb+ee7 XUHVQARaGXME8d439eL9gw40z82GEFoA8FE2iRQsDWKK8qbexubHqHylZX3k4iwC 91Z800gLRk2EIBqZ03d3t0CihBJX68ead2Ky7xBvNmPOLTyfmpwsrp1X7dBqSZx7 I7OZSVg9Qz41vPY6ckJ3zbFmuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0aDiPG Pe03JFsqw0sKsSTe/Kc6MB8GA1UdIwQYMBaAFDz5FggiaBnD6dqE0RlbUyb5JJ+9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUFFNC9FNUQ2RDBBQzA2 NTMxMUVEODI3QkVGNTRDNEY5QUUwMi9QUGtXQ0NKb0djUHAyb1RSR1Z0VEp2a2tu NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BQa1dDQ0pvR2NQcDJvVFJHVnRUSnZra243MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUFFNC9FNUQ2RDBBQzA2NTMxMUVEODI3QkVGNTRDNEY5QUUwMi9QUGtXQ0NKb0dj UHAyb1RSR1Z0VEp2a2tuNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF6JllIoNsRnxLlDWTPkvtt3HziRYUhBXgYLJNfJUL5EB0IUCPVEqN L1vu5nmIRItrLE+Dji20M5u3Huz8DwWpKOPunGFS//DTc7n9Qm3DZ5DpBZGIdQiI +ytAcqAnheLuUH+rx6MoWScZ7yAvoU4/8avW+R+ISc9FI24UEwqT8bn0K3a7H17C 5UqkPagtLo2DVkiN3p5goN9fLG4XynqY5/ys9RMXJE3uFKFoVo1Iukbd5uv8XF5g 7lojkGUUldgaxNSpePMqahUd+xyK6QpBrlIPXVVwsCx0XrIOegZP9ZoWlxAueNAs aoJF++ogKv9xxBxirxyqi99qJ8kGEJk0 -----END CERTIFICATE-----Generated at Sat Dec 20 10:50:47 2025 by rpki-client