This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft File: PWRH1yl0gylOzsuFOl5QCTXRuNc.mft (raw, json) Hash identifier: s7SSPywhVEYn61glsq6GZGFKLA4wGT/hSw4MMczCfbY= Subject key identifier: 56:11:D2:00:D9:EE:DC:BF:14:65:74:B0:43:12:52:D6:1B:AC:43:F2 Authority key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 Certificate issuer: /CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Certificate serial: 04DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft Manifest number: 04B8 Signing time: Mon 22 Dec 2025 23:02:18 +0000 Manifest this update: Mon 22 Dec 2025 23:02:18 +0000 Manifest next update: Mon 29 Dec 2025 23:02:18 +0000 Files and hashes: 1: PWRH1yl0gylOzsuFOl5QCTXRuNc.crl (hash: fb8iCKUAJyi+7jPHrC0ets/hXkk+7XLFpCYGjiX4FA8=) 2: 793803867DEA11EC9FC67D66C4F9AE02.roa (hash: vRD5gvetOl4M72g0Ox/17wn2gRRkZ+MKIO7MmLjvLgg=) 3: 18611004B42A11EC9BD3DE42C4F9AE02.roa (hash: MrOehOXflQUhc9W+FdP7kViEOIm0zhC3RKvz9jpM7pY=) 4: 2CE5BE065BDA11ECAA855355C4F9AE02.roa (hash: K/T3wX+b6EJFTbJdX5T/49+xTnSJoc5fKtBw2NmgoBw=) 5: 5997A6A624E011EDAEC0E529C4F9AE02.roa (hash: 264WZ0f5FSYRLcE55bzQKj/lfReOWZZQL9W6/+XrL50=) 6: 27992F96832811EFA1BAAC4FC4F9AE02.roa (hash: 9hr8e6Q+evY4tAAVgrktH6R5E0K57yFV9RXeFdQNtLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1246 (0x4de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170E11, serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Validity Not Before: Dec 22 23:02:18 2025 GMT Not After : Dec 29 23:02:18 2025 GMT Subject: CN=6949cdfa-52ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:15:c7:ba:82:dd:d9:cb:56:e4:fb:ed:3a:28: 4d:2d:33:e0:18:e5:82:df:75:56:5c:66:3d:44:ae: 48:66:83:43:42:b6:c3:15:61:ca:53:4e:8f:66:5e: 54:42:dc:20:4e:69:37:5f:01:d2:2e:a7:db:9b:34: 3d:f5:3f:31:a2:05:50:dc:67:ec:0b:86:7d:28:7f: 38:65:b4:2a:99:e5:d7:67:c3:1b:c4:d3:c1:19:9e: b0:7a:1e:70:da:05:c7:61:ab:49:81:97:42:e7:38: ec:e9:09:0a:39:9e:22:ed:4f:14:ab:d2:be:a8:48: bf:67:5b:b7:8d:29:e2:76:9a:2f:c8:c0:37:ce:21: ba:86:e8:41:7e:d8:22:f9:84:ad:80:c9:ac:9a:84: 3a:b3:a9:18:6e:7c:69:0d:4d:24:1d:ed:66:dd:aa: f8:ee:fc:17:16:ba:08:4d:06:48:4a:6b:22:eb:06: 9a:b6:7e:27:ee:c1:78:dd:03:ac:59:40:c0:38:51: 1c:30:ff:5e:1b:ac:45:a3:21:ea:75:20:2d:25:62: 1e:6a:df:bf:42:4b:2b:ce:b4:b3:15:f2:3e:52:6b: e3:4d:8e:37:b1:e9:41:a0:99:fa:42:83:cc:65:fc: 6d:e3:c2:75:ca:e5:d8:9a:2a:f7:28:cc:8a:cd:30: a6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:11:D2:00:D9:EE:DC:BF:14:65:74:B0:43:12:52:D6:1B:AC:43:F2 X509v3 Authority Key Identifier: keyid:3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:12:9d:2f:b9:14:bf:fb:90:53:08:4e:ce:ae:ce:88:69:6c: 33:95:cb:ab:c8:a7:9b:b6:57:78:5a:36:27:53:dc:46:52:15: 55:31:61:48:0c:48:55:17:67:14:f7:84:b8:ed:f4:19:e5:7d: 5c:00:ca:2f:77:36:7f:81:ab:0f:19:de:54:07:58:4f:a3:8e: 03:67:55:ee:6a:7d:b5:40:7e:3b:23:38:5e:02:8a:61:5c:02: e5:06:52:60:fd:92:c2:b3:43:b1:3c:01:21:45:35:67:19:32: 93:65:e6:28:54:93:14:b3:f4:63:a0:b8:58:19:e6:cf:e0:46: d1:db:f7:99:36:eb:51:53:52:c9:90:72:23:c1:a4:f2:30:6a: 4a:b1:c7:e3:96:5d:db:7b:c6:0c:28:66:53:65:34:da:a4:76: 67:23:0e:6b:10:65:0c:19:7f:9f:a0:90:06:a3:eb:36:18:6b: c2:5c:af:ba:bd:d8:c8:91:b0:05:ff:ab:fc:d8:e6:64:94:6b: 8f:dd:eb:c4:30:50:23:0e:24:de:10:d2:94:62:a0:a8:6c:4b: 66:80:23:80:a1:2a:4c:81:5f:3f:19:5e:11:a6:af:21:c8:62: 4d:81:b7:5d:66:63:0c:07:3b:69:16:0c:b6:38:be:ff:31:ed: b8:d0:cb:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBFMTExMTAvBgNVBAUTKDNENjQ0N0Q3Mjk3NDgzMjk0RUNFQ0I4NTNBNUU1MDA5 MzVEMUI4RDcwHhcNMjUxMjIyMjMwMjE4WhcNMjUxMjI5MjMwMjE4WjAYMRYwFAYD VQQDDA02OTQ5Y2RmYS01MmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRXHuoLd2ctW5PvtOihNLTPgGOWC33VWXGY9RK5IZoNDQrbDFWHKU06PZl5U QtwgTmk3XwHSLqfbmzQ99T8xogVQ3GfsC4Z9KH84ZbQqmeXXZ8MbxNPBGZ6weh5w 2gXHYatJgZdC5zjs6QkKOZ4i7U8Uq9K+qEi/Z1u3jSnidpovyMA3ziG6huhBftgi +YStgMmsmoQ6s6kYbnxpDU0kHe1m3ar47vwXFroITQZISmsi6waatn4n7sF43QOs WUDAOFEcMP9eG6xFoyHqdSAtJWIeat+/QksrzrSzFfI+UmvjTY43selBoJn6QoPM Zfxt48J1yuXYmir3KMyKzTCmswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYR0gDZ 7ty/FGV0sEMSUtYbrEPyMB8GA1UdIwQYMBaAFD1kR9cpdIMpTs7LhTpeUAk10bjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEUxMS9EMDYwQzlCMjVC RDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5bE96c3VGT2w1UUNUWFJ1 TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BXUkgxeWwwZ3lsT3pzdUZPbDVRQ1RYUnVOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEUxMS9EMDYwQzlCMjVCRDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5 bE96c3VGT2w1UUNUWFJ1TmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxEp0vuRS/+5BTCE7Ors6IaWwzlcuryKebtld4WjYnU9xGUhVVMWFI DEhVF2cU94S47fQZ5X1cAMovdzZ/gasPGd5UB1hPo44DZ1Xuan21QH47IzheAoph XALlBlJg/ZLCs0OxPAEhRTVnGTKTZeYoVJMUs/RjoLhYGebP4EbR2/eZNutRU1LJ kHIjwaTyMGpKscfjll3be8YMKGZTZTTapHZnIw5rEGUMGX+foJAGo+s2GGvCXK+6 vdjIkbAF/6v82OZklGuP3evEMFAjDiTeENKUYqCobEtmgCOAoSpMgV8/GV4Rpq8h yGJNgbddZmMMBztpFgy2OL7/Me240Mug -----END CERTIFICATE-----Generated at Tue Dec 23 16:28:53 2025 by rpki-client