This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft File: pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft (raw, json) Hash identifier: HlYH9n1sT6c9uo2VUVykvMvQYgv96vphJUmAp3REY5U= Subject key identifier: 55:90:5B:E7:0A:2A:EE:6B:98:BD:D7:EF:29:BF:76:F7:D8:38:21:B2 Authority key identifier: A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B Certificate issuer: /CN=A915C365/serialNumber=A628034401C65CF46975DE8C9B4672F85E00FE9B Certificate serial: 0252 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft Manifest number: 0248 Signing time: Tue 23 Dec 2025 00:46:57 +0000 Manifest this update: Tue 23 Dec 2025 00:46:57 +0000 Manifest next update: Tue 30 Dec 2025 00:46:57 +0000 Files and hashes: 1: pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl (hash: n5D3IDGNApsQmwVT5egKZbBZNU2li8ux3PogbY9ZSAE=) 2: 83B6F66C5E4711EDA05F092CC4F9AE02.roa (hash: zueR7y6doRSR+ARSdcRZoyLuNrwU11AjdtpUc/YoDZ0=) 3: 843712B65E4711EDA05F092CC4F9AE02.roa (hash: 8vjp0ZIqdpkdJPpnvWXQ7Xzz/5ezWmLiXvSZkT2yI54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 594 (0x252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C365, serialNumber=A628034401C65CF46975DE8C9B4672F85E00FE9B Validity Not Before: Dec 23 00:46:57 2025 GMT Not After : Dec 30 00:46:57 2025 GMT Subject: CN=6949e681-0152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:53:a3:61:a6:9b:86:64:db:f6:36:51:9b:02: 0a:17:e9:0f:c4:45:14:37:e3:76:e6:41:3a:a7:71: ab:c4:c8:de:a4:3b:ea:d6:66:46:c0:e5:2a:bc:e3: 6b:e3:7e:2a:36:ec:cc:ac:63:fa:cf:46:f9:90:97: 31:55:31:a1:c3:37:20:54:86:ba:c3:7c:09:93:7c: cd:07:81:c9:e9:af:0a:5f:61:7c:81:27:7b:13:14: a8:86:93:72:e9:fe:0e:60:27:be:f2:25:c2:5c:43: 35:2a:7c:8a:65:4a:94:fa:87:ee:78:7c:66:ce:22: 03:35:8b:2d:5e:1c:8c:6b:8d:3b:26:e1:81:32:cd: f3:77:6d:45:23:ba:69:1f:c5:82:f6:01:83:e7:0b: be:4d:79:cc:fa:6e:15:16:b1:2d:dc:31:80:fa:30: 95:1b:4d:66:29:01:8f:ad:e3:ca:75:a1:95:a1:24: ac:50:c3:b9:fd:bb:d5:15:96:9b:87:f1:5c:d5:e8: 1a:88:cd:cc:65:35:7b:84:65:2a:b5:54:6f:cc:44: 70:05:89:46:84:c8:cb:38:e4:57:04:e5:43:c0:d3: c5:95:15:06:61:83:f0:c6:04:1a:82:b3:ea:73:f1: ce:fd:cf:9c:11:e7:38:14:55:76:d8:3e:87:4e:c6: b7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:90:5B:E7:0A:2A:EE:6B:98:BD:D7:EF:29:BF:76:F7:D8:38:21:B2 X509v3 Authority Key Identifier: keyid:A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:76:ba:3c:d2:6c:ca:98:90:69:54:3a:bd:23:9e:fd:c8:1a: af:26:af:17:0a:7f:76:23:31:36:76:00:33:f4:fd:df:bb:0a: f9:30:71:00:fa:15:28:9e:05:1f:f2:67:35:c8:3e:50:9c:dc: 94:36:d2:6a:82:23:fe:a7:07:39:7c:80:ed:b5:83:4c:9b:ff: 04:ec:5c:7a:1e:7c:43:b4:b3:47:e9:4f:1f:8a:97:f5:a4:bb: 40:66:ee:c0:93:c7:b1:e3:da:99:a5:cf:83:7f:a6:85:e5:19: de:a4:ba:0e:57:a0:3e:45:68:47:71:4a:81:50:2a:a3:32:0f: 84:55:5c:44:50:e5:4f:fa:6d:3a:be:59:56:03:ba:b2:88:52: fb:bd:aa:d0:c7:bb:05:88:30:e2:c9:bd:ee:fa:6d:a0:96:fe: 3c:f2:c4:82:84:ef:4c:4d:64:8d:f2:14:ee:e1:d4:5f:e2:6c: bb:f3:c5:16:19:1e:68:93:59:e2:08:97:78:8c:92:99:a7:90: 65:85:0d:42:c7:18:a8:02:20:59:d9:bb:35:be:01:70:b6:8c: ed:3c:55:9c:e6:42:49:12:a3:a2:1f:6a:34:a1:6e:75:0e:4d: cd:56:8b:66:e7:e9:62:b5:3e:54:d2:61:57:13:ab:eb:e7:64: 3d:af:83:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMzNjUxMTAvBgNVBAUTKEE2MjgwMzQ0MDFDNjVDRjQ2OTc1REU4QzlCNDY3MkY4 NUUwMEZFOUIwHhcNMjUxMjIzMDA0NjU3WhcNMjUxMjMwMDA0NjU3WjAYMRYwFAYD VQQDDA02OTQ5ZTY4MS0wMTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAolOjYaabhmTb9jZRmwIKF+kPxEUUN+N25kE6p3GrxMjepDvq1mZGwOUqvONr 434qNuzMrGP6z0b5kJcxVTGhwzcgVIa6w3wJk3zNB4HJ6a8KX2F8gSd7ExSohpNy 6f4OYCe+8iXCXEM1KnyKZUqU+ofueHxmziIDNYstXhyMa407JuGBMs3zd21FI7pp H8WC9gGD5wu+TXnM+m4VFrEt3DGA+jCVG01mKQGPrePKdaGVoSSsUMO5/bvVFZab h/Fc1egaiM3MZTV7hGUqtVRvzERwBYlGhMjLOORXBOVDwNPFlRUGYYPwxgQagrPq c/HO/c+cEec4FFV22D6HTsa39QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWQW+cK Ku5rmL3X7ym/dvfYOCGyMB8GA1UdIwQYMBaAFKYoA0QBxlz0aXXejJtGcvheAP6b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzM2NS8wOUZCNTE4QTVF NDUxMUVEQjUxN0QyMkFDNEY5QUUwMi9waWdEUkFIR1hQUnBkZDZNbTBaeS1GNEFf cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BpZ0RSQUhHWFBScGRkNk1tMFp5LUY0QV9wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzM2NS8wOUZCNTE4QTVFNDUxMUVEQjUxN0QyMkFDNEY5QUUwMi9waWdEUkFIR1hQ UnBkZDZNbTBaeS1GNEFfcHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwdro80mzKmJBpVDq9I579yBqvJq8XCn92IzE2dgAz9P3fuwr5MHEA +hUongUf8mc1yD5QnNyUNtJqgiP+pwc5fIDttYNMm/8E7Fx6HnxDtLNH6U8fipf1 pLtAZu7Ak8ex49qZpc+Df6aF5RnepLoOV6A+RWhHcUqBUCqjMg+EVVxEUOVP+m06 vllWA7qyiFL7varQx7sFiDDiyb3u+m2glv488sSChO9MTWSN8hTu4dRf4my788UW GR5ok1niCJd4jJKZp5BlhQ1CxxioAiBZ2bs1vgFwtoztPFWc5kJJEqOiH2o0oW51 Dk3NVotm5+litT5U0mFXE6vr52Q9r4MO -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:11 2025 by rpki-client