This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft File: PWRH1yl0gylOzsuFOl5QCTXRuNc.mft (raw, json) Hash identifier: 6keseCy6LNIljn2AkyjWIIswT+HBtM4d+e5an22IveY= Subject key identifier: 09:03:BB:83:5D:16:E5:C5:B7:61:27:8A:87:E7:12:6C:F6:04:14:EE Authority key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 Certificate issuer: /CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Certificate serial: 04D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft Manifest number: 04AF Signing time: Thu 04 Dec 2025 22:30:41 +0000 Manifest this update: Thu 04 Dec 2025 22:30:40 +0000 Manifest next update: Thu 11 Dec 2025 22:30:40 +0000 Files and hashes: 1: PWRH1yl0gylOzsuFOl5QCTXRuNc.crl (hash: Ip894esMEWRa79AbAcaGZ7XXmwMGN6vyIg1IVqFDdKI=) 2: 5997A6A624E011EDAEC0E529C4F9AE02.roa (hash: 264WZ0f5FSYRLcE55bzQKj/lfReOWZZQL9W6/+XrL50=) 3: 793803867DEA11EC9FC67D66C4F9AE02.roa (hash: vRD5gvetOl4M72g0Ox/17wn2gRRkZ+MKIO7MmLjvLgg=) 4: 2CE5BE065BDA11ECAA855355C4F9AE02.roa (hash: K/T3wX+b6EJFTbJdX5T/49+xTnSJoc5fKtBw2NmgoBw=) 5: 18611004B42A11EC9BD3DE42C4F9AE02.roa (hash: MrOehOXflQUhc9W+FdP7kViEOIm0zhC3RKvz9jpM7pY=) 6: 27992F96832811EFA1BAAC4FC4F9AE02.roa (hash: 9hr8e6Q+evY4tAAVgrktH6R5E0K57yFV9RXeFdQNtLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1237 (0x4d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170E11, serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7 Validity Not Before: Dec 4 22:30:40 2025 GMT Not After : Dec 11 22:30:40 2025 GMT Subject: CN=69320b91-845d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:66:aa:d1:87:e4:de:2d:17:c1:4c:22:97:3a: 78:0a:ae:da:89:fa:4b:91:85:d6:f2:82:96:fb:9d: c9:f8:02:89:80:e2:44:71:94:03:9d:b1:a5:a0:9f: 49:18:13:3c:12:74:06:94:0f:ab:e9:0a:9c:a5:4a: f3:f6:03:43:8e:ba:86:da:7d:01:29:d9:39:c1:e8: e6:68:ca:a6:c6:92:44:e9:5e:9a:6b:ce:70:6b:ea: fa:c7:a2:a2:04:14:52:0e:b6:2c:0f:ac:2b:c8:9d: 2a:d3:d9:82:49:0b:1c:b6:93:7d:e9:99:bf:2d:a7: 1a:f6:cc:09:f9:89:57:03:50:88:72:0c:76:0e:c7: 4a:8b:8c:cb:d4:15:03:c3:77:01:f6:2a:ce:40:a7: 13:66:8e:d4:12:69:cf:4e:68:15:92:83:b9:a4:d5: 99:94:03:53:ad:b4:fb:9c:2d:80:2c:23:1e:21:19: 88:9d:ff:1c:06:d4:a2:e7:5e:71:e1:3d:bb:8d:36: fa:47:39:9e:93:3d:e2:16:11:52:95:11:54:e9:b1: 42:a8:4f:00:73:1b:40:e5:63:43:cf:18:88:47:fb: 16:31:03:c6:d1:c5:44:9e:eb:13:57:4b:d5:a3:3e: d0:5c:2a:47:b0:4d:4e:46:4c:72:f6:92:8c:6f:53: fd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:03:BB:83:5D:16:E5:C5:B7:61:27:8A:87:E7:12:6C:F6:04:14:EE X509v3 Authority Key Identifier: keyid:3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:74:72:ec:e0:df:23:1a:54:a7:c4:41:49:cc:ed:cf:d9:f2: 4f:e8:f1:2d:9d:40:8f:02:4c:b8:9c:16:67:1a:78:a4:82:72: 17:64:f5:e6:62:90:da:ca:3a:ee:b7:5c:51:7c:b9:b0:fe:81: eb:43:06:cb:24:c0:a5:4d:22:ed:a3:e6:9b:14:2b:73:33:bc: 5d:4a:be:c9:01:75:a1:62:5c:a5:1d:a3:be:b5:ff:d3:d5:04: 88:27:a5:82:7c:42:08:f7:b1:cb:bd:8a:d9:4f:ac:b6:10:85: 49:db:88:a4:77:b9:dc:1c:5d:eb:9c:e8:3c:23:1f:63:76:ac: 9e:5c:42:8a:05:a4:1b:6c:0c:bb:57:01:0a:6d:6d:b8:10:e1: e8:e3:f6:7c:22:58:6b:b8:4f:6b:30:03:52:cd:2c:59:f1:e1: 0c:5d:22:84:95:06:4b:68:50:0c:f9:6b:a5:c1:21:f6:fd:30: d8:f7:c9:1d:71:98:2e:e6:94:78:81:02:60:be:90:45:dd:5f: a6:2d:10:33:75:56:e8:1b:72:55:78:d9:f1:6e:d8:4c:27:d5: cc:09:76:9b:93:79:0f:7e:85:d2:73:85:82:fb:7d:2c:d9:02: 20:c3:e8:c5:13:2f:5b:9e:4a:c7:fe:96:91:30:f1:ed:8e:19: 51:45:34:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBFMTExMTAvBgNVBAUTKDNENjQ0N0Q3Mjk3NDgzMjk0RUNFQ0I4NTNBNUU1MDA5 MzVEMUI4RDcwHhcNMjUxMjA0MjIzMDQwWhcNMjUxMjExMjIzMDQwWjAYMRYwFAYD VQQDEw02OTMyMGI5MS04NDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlWaq0Yfk3i0XwUwilzp4Cq7aifpLkYXW8oKW+53J+AKJgOJEcZQDnbGloJ9J GBM8EnQGlA+r6QqcpUrz9gNDjrqG2n0BKdk5wejmaMqmxpJE6V6aa85wa+r6x6Ki BBRSDrYsD6wryJ0q09mCSQsctpN96Zm/Laca9swJ+YlXA1CIcgx2DsdKi4zL1BUD w3cB9irOQKcTZo7UEmnPTmgVkoO5pNWZlANTrbT7nC2ALCMeIRmInf8cBtSi515x 4T27jTb6Rzmekz3iFhFSlRFU6bFCqE8AcxtA5WNDzxiIR/sWMQPG0cVEnusTV0vV oz7QXCpHsE1ORkxy9pKMb1P9JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkDu4Nd FuXFt2EniofnEmz2BBTuMB8GA1UdIwQYMBaAFD1kR9cpdIMpTs7LhTpeUAk10bjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEUxMS9EMDYwQzlCMjVC RDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5bE96c3VGT2w1UUNUWFJ1 TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BXUkgxeWwwZ3lsT3pzdUZPbDVRQ1RYUnVOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEUxMS9EMDYwQzlCMjVCRDYxMUVDQUQ4MzM2NTFDNEY5QUUwMi9QV1JIMXlsMGd5 bE96c3VGT2w1UUNUWFJ1TmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXdHLs4N8jGlSnxEFJzO3P2fJP6PEtnUCPAky4nBZnGnikgnIXZPXm YpDayjrut1xRfLmw/oHrQwbLJMClTSLto+abFCtzM7xdSr7JAXWhYlylHaO+tf/T 1QSIJ6WCfEII97HLvYrZT6y2EIVJ24ikd7ncHF3rnOg8Ix9jdqyeXEKKBaQbbAy7 VwEKbW24EOHo4/Z8IlhruE9rMANSzSxZ8eEMXSKElQZLaFAM+WulwSH2/TDY98kd cZgu5pR4gQJgvpBF3V+mLRAzdVboG3JVeNnxbthMJ9XMCXabk3kPfoXSc4WC+30s 2QIgw+jFEy9bnkrH/paRMPHtjhlRRTSM -----END CERTIFICATE-----Generated at Fri Dec 5 19:20:59 2025 by rpki-client