This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft File: PMd5DiA3Zl70liuB2tL9B-1G-LI.mft (raw, json) Hash identifier: kYypHeUNn8kPaQhbZbRiKiReCUc84GcU7tA+JygCszM= Subject key identifier: ED:97:3E:6C:0E:E4:BA:36:99:23:71:6F:5D:AE:08:BE:C7:73:6B:42 Authority key identifier: 3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2 Certificate issuer: /CN=A9163EB9/serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2 Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft Manifest number: 0104 Signing time: Tue 23 Dec 2025 04:02:31 +0000 Manifest this update: Tue 23 Dec 2025 04:02:31 +0000 Manifest next update: Tue 30 Dec 2025 04:02:31 +0000 Files and hashes: 1: PMd5DiA3Zl70liuB2tL9B-1G-LI.crl (hash: bA4xwRRccCGeBuFzhabCzlutSmbRmrGHYTonLungHmY=) 2: A6449CBA54A011EFB35AED26C4F9AE02.roa (hash: Hdt3DT88wjtxw1TUKGFWHT6pNsnIEUfha62M8xw528A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163EB9, serialNumber=3CC7790E2037665EF4962B81DAD2FD07ED46F8B2 Validity Not Before: Dec 23 04:02:31 2025 GMT Not After : Dec 30 04:02:31 2025 GMT Subject: CN=694a1457-0b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9e:41:b1:5d:e1:6e:a4:08:38:8e:42:34:ec: b5:db:5e:30:f8:1b:90:52:27:ef:93:91:8a:d0:ce: 4a:14:4f:38:0e:c8:9d:66:86:e9:2b:e4:c4:7a:1d: bd:43:24:ee:5e:5b:a2:ce:2a:fd:50:da:4e:e4:b0: 2b:e2:3c:c2:c6:c6:9c:ea:e3:d2:a6:84:f1:47:45: 2f:af:b2:71:a5:91:c6:d1:30:fe:16:71:0a:65:0e: d9:7b:8c:a3:83:3f:d1:fe:fc:36:36:54:54:29:8b: 9c:51:e1:2e:18:66:16:0b:b9:7f:de:74:4a:21:a1: 0c:1e:3c:05:bd:25:ce:ed:b4:e0:98:76:48:07:2f: e4:66:52:e1:6c:7d:ab:e2:04:5a:9d:21:92:b6:b4: 60:1e:eb:a2:7a:58:bc:a8:4a:c9:7c:93:f4:16:3d: 3b:be:d7:33:0b:65:fc:1c:07:b7:c7:bc:7a:78:9e: f3:d7:f9:59:48:02:41:e2:27:4f:4f:9d:1e:10:dc: 58:66:68:30:c9:a5:9b:d0:a8:3c:2a:ae:2d:b1:05: be:2c:ef:cb:75:1c:6d:91:99:aa:ff:e6:33:a0:ee: 6a:f5:28:44:9c:83:23:74:7f:b0:87:db:26:b7:5c: 2f:58:46:50:6f:9f:f5:00:f7:ef:8f:91:90:8f:73: d4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:97:3E:6C:0E:E4:BA:36:99:23:71:6F:5D:AE:08:BE:C7:73:6B:42 X509v3 Authority Key Identifier: keyid:3C:C7:79:0E:20:37:66:5E:F4:96:2B:81:DA:D2:FD:07:ED:46:F8:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PMd5DiA3Zl70liuB2tL9B-1G-LI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/051C9E6454A011EF86AE5922C4F9AE02/PMd5DiA3Zl70liuB2tL9B-1G-LI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:01:ef:fd:05:95:5c:82:df:53:55:32:30:e0:84:62:b9:6b: cc:ad:90:52:80:af:d4:2f:54:dd:9b:1a:ce:5c:40:e5:4c:af: 5e:3d:be:fb:da:74:6a:7c:fc:5a:55:85:82:9f:42:73:b6:99: 04:5e:1f:d9:76:15:41:0f:d4:21:ab:b7:b5:17:0e:db:83:99: db:c3:91:a9:ea:ef:dd:ff:4d:6d:da:39:bc:62:9b:91:38:09: 20:06:d0:22:b9:2b:87:e6:8d:18:08:e2:11:7d:c5:b5:d4:73: b7:02:46:88:ba:af:1f:8c:74:ad:4c:ab:3f:78:a2:7c:90:f4: 81:76:60:d2:35:37:88:34:54:0a:ce:91:91:7e:64:ff:ee:6c: a3:da:bc:f3:bb:c5:12:fa:9f:21:af:2f:14:dd:f2:73:a7:62: ad:f7:92:93:88:c8:f3:0a:9e:70:c4:f0:63:fd:0b:f6:34:88: 3d:2c:1f:8d:6d:6b:02:48:ca:53:0d:c5:41:57:96:79:00:66: b9:a4:58:c8:0e:55:b5:eb:31:de:5b:23:08:73:46:79:48:b4: 21:7f:1a:16:7b:c4:0c:6e:f6:d9:a6:fd:b2:6a:62:50:6b:8e: 3f:ae:ec:86:13:ba:53:34:3f:cb:29:43:ca:fb:d6:13:1a:40: aa:99:3d:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNFQjkxMTAvBgNVBAUTKDNDQzc3OTBFMjAzNzY2NUVGNDk2MkI4MURBRDJGRDA3 RUQ0NkY4QjIwHhcNMjUxMjIzMDQwMjMxWhcNMjUxMjMwMDQwMjMxWjAYMRYwFAYD VQQDDA02OTRhMTQ1Ny0wYjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZ5BsV3hbqQIOI5CNOy1214w+BuQUifvk5GK0M5KFE84DsidZobpK+TEeh29 QyTuXluizir9UNpO5LAr4jzCxsac6uPSpoTxR0Uvr7JxpZHG0TD+FnEKZQ7Ze4yj gz/R/vw2NlRUKYucUeEuGGYWC7l/3nRKIaEMHjwFvSXO7bTgmHZIBy/kZlLhbH2r 4gRanSGStrRgHuuieli8qErJfJP0Fj07vtczC2X8HAe3x7x6eJ7z1/lZSAJB4idP T50eENxYZmgwyaWb0Kg8Kq4tsQW+LO/LdRxtkZmq/+YzoO5q9ShEnIMjdH+wh9sm t1wvWEZQb5/1APfvj5GQj3PUlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2XPmwO 5Lo2mSNxb12uCL7Hc2tCMB8GA1UdIwQYMBaAFDzHeQ4gN2Ze9JYrgdrS/QftRviy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VCOS8wNTFDOUU2NDU0 QTAxMUVGODZBRTU5MjJDNEY5QUUwMi9QTWQ1RGlBM1psNzBsaXVCMnRMOUItMUct TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BNZDVEaUEzWmw3MGxpdUIydEw5Qi0xRy1MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0VCOS8wNTFDOUU2NDU0QTAxMUVGODZBRTU5MjJDNEY5QUUwMi9QTWQ1RGlBM1ps NzBsaXVCMnRMOUItMUctTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcAe/9BZVcgt9TVTIw4IRiuWvMrZBSgK/UL1TdmxrOXEDlTK9ePb77 2nRqfPxaVYWCn0JztpkEXh/ZdhVBD9Qhq7e1Fw7bg5nbw5Gp6u/d/01t2jm8YpuR OAkgBtAiuSuH5o0YCOIRfcW11HO3AkaIuq8fjHStTKs/eKJ8kPSBdmDSNTeINFQK zpGRfmT/7myj2rzzu8US+p8hry8U3fJzp2Kt95KTiMjzCp5wxPBj/Qv2NIg9LB+N bWsCSMpTDcVBV5Z5AGa5pFjIDlW16zHeWyMIc0Z5SLQhfxoWe8QMbvbZpv2yamJQ a44/ruyGE7pTND/LKUPK+9YTGkCqmT25 -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:39 2025 by rpki-client