This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft File: PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft (raw, json) Hash identifier: Ndk9G/QF01nIDCJWq0mugUvpkhudZ2V9A9g703FsvaI= Subject key identifier: D4:2A:30:E2:30:3E:3B:04:11:3F:C9:E9:9A:0A:97:37:66:D4:5C:D9 Authority key identifier: 3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2 Certificate issuer: /CN=A9173FAC/serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft Manifest number: 85 Signing time: Sun 21 Dec 2025 05:42:46 +0000 Manifest this update: Sun 21 Dec 2025 05:42:46 +0000 Manifest next update: Sun 28 Dec 2025 05:42:46 +0000 Files and hashes: 1: PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl (hash: 0EeJOKodjdibxGnOcZn9LvSeylwZlMfm6Ae5xy3l/v0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173FAC, serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2 Validity Not Before: Dec 21 05:42:46 2025 GMT Not After : Dec 28 05:42:46 2025 GMT Subject: CN=694788d6-744d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:86:08:55:57:b1:19:61:f3:0a:9c:e5:91:70: c8:8e:96:f9:4a:55:82:ba:ee:f2:52:db:b0:03:a9: e0:d0:ad:92:ac:89:c1:d2:3c:cb:e7:6d:48:b4:59: 2a:6c:25:a5:0b:eb:b3:78:97:34:0b:69:f5:2d:2d: 04:7c:d8:97:d0:e7:f6:9a:b9:d9:9a:89:1e:ea:76: eb:3b:44:49:77:8a:ef:4c:af:1b:7a:e7:bc:b1:3c: b3:6c:fb:41:86:06:ac:f3:69:3b:39:d1:22:25:f9: 78:24:52:ce:ed:b2:e5:5d:69:28:ac:23:d4:7a:d0: e4:17:35:6f:37:84:11:6c:66:d2:8a:cb:0e:22:9a: b2:4e:89:04:50:6e:76:81:6c:cc:d9:e5:f0:21:65: 1f:eb:63:96:1e:67:f4:16:59:fd:9e:29:66:73:f8: ae:f9:c8:cd:e4:6d:0b:2e:9a:bc:c5:58:68:e6:bb: 7d:9f:3b:07:00:40:f0:1c:42:ae:0b:ab:3b:27:33: 33:6b:54:fb:58:ad:f3:be:1c:30:b8:53:01:a1:ea: bf:6f:f3:e0:18:a1:12:0a:84:03:bb:a6:ce:6a:e7: 0c:eb:38:76:90:37:12:1f:e0:cf:3d:7d:a3:50:76: 78:5a:a2:6a:2d:f8:57:54:80:d5:a2:34:44:b3:d5: cd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2A:30:E2:30:3E:3B:04:11:3F:C9:E9:9A:0A:97:37:66:D4:5C:D9 X509v3 Authority Key Identifier: keyid:3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:80:ee:b9:2b:b5:de:56:88:ac:60:2c:cd:e4:a3:a6:f5:a5: d3:f5:eb:1c:71:92:61:70:14:7f:3c:0f:6c:2d:cc:34:12:f6: b5:4f:7a:77:59:d5:96:97:88:5c:16:0c:ae:b0:98:15:59:f7: fd:19:53:b7:59:53:4d:5e:4f:bd:e3:58:d1:96:b5:ca:f9:8e: fd:2b:1b:76:06:cf:00:d4:5d:ea:c9:bf:49:1c:12:a7:53:97: ba:6e:e3:b7:9e:9a:5e:e0:2b:48:c8:cb:07:10:4f:92:00:0d: 54:70:eb:4e:1e:8b:38:11:fd:d0:6a:fd:9a:7f:b3:84:6f:a0: 53:37:f5:f9:e0:5e:88:d5:70:4e:b3:a9:73:c7:bd:ea:fa:1e: 25:38:be:89:c2:28:15:a1:37:0f:c9:ea:41:f3:3f:7c:8d:a5: 66:d8:e2:27:cf:0d:1f:65:a7:ac:64:4b:b9:15:9b:a1:ee:53: af:a2:46:3a:90:fb:92:98:58:30:d6:fc:79:77:00:45:a2:6f: 60:48:cb:06:e3:3c:ce:96:42:fc:b4:ff:a6:1d:df:87:dd:00: 71:e2:ca:05:53:6b:18:35:9f:ad:d8:8f:f2:d4:4f:15:5a:0b: 57:50:56:86:ee:82:26:2e:39:c3:1a:7b:4b:43:61:65:fd:e1: 21:a8:ca:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNGQUMxMTAvBgNVBAUTKDNGMUE4RUEzRDJBREM2RUNCMjM2MEUwQzM3NkNFNTU5 QjlGRjcxRjIwHhcNMjUxMjIxMDU0MjQ2WhcNMjUxMjI4MDU0MjQ2WjAYMRYwFAYD VQQDDA02OTQ3ODhkNi03NDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4YIVVexGWHzCpzlkXDIjpb5SlWCuu7yUtuwA6ng0K2SrInB0jzL521ItFkq bCWlC+uzeJc0C2n1LS0EfNiX0Of2mrnZmoke6nbrO0RJd4rvTK8beue8sTyzbPtB hgas82k7OdEiJfl4JFLO7bLlXWkorCPUetDkFzVvN4QRbGbSissOIpqyTokEUG52 gWzM2eXwIWUf62OWHmf0Fln9nilmc/iu+cjN5G0LLpq8xVho5rt9nzsHAEDwHEKu C6s7JzMza1T7WK3zvhwwuFMBoeq/b/PgGKESCoQDu6bOaucM6zh2kDcSH+DPPX2j UHZ4WqJqLfhXVIDVojREs9XNCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQqMOIw PjsEET/J6ZoKlzdm1FzZMB8GA1UdIwQYMBaAFD8ajqPSrcbssjYODDds5Vm5/3Hy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0ZBQy9COEY1Qzc2QTEw MTgxMUYwODBCQ0MzNDhDNEY5QUUwMi9QeHFPbzlLdHh1eXlOZzRNTjJ6bFdibl9j ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B4cU9vOUt0eHV5eU5nNE1OMnpsV2JuX2NmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0ZBQy9COEY1Qzc2QTEwMTgxMUYwODBCQ0MzNDhDNEY5QUUwMi9QeHFPbzlLdHh1 eXlOZzRNTjJ6bFdibl9jZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDbgO65K7XeVoisYCzN5KOm9aXT9esccZJhcBR/PA9sLcw0Eva1T3p3 WdWWl4hcFgyusJgVWff9GVO3WVNNXk+941jRlrXK+Y79Kxt2Bs8A1F3qyb9JHBKn U5e6buO3nppe4CtIyMsHEE+SAA1UcOtOHos4Ef3Qav2af7OEb6BTN/X54F6I1XBO s6lzx73q+h4lOL6JwigVoTcPyepB8z98jaVm2OInzw0fZaesZEu5FZuh7lOvokY6 kPuSmFgw1vx5dwBFom9gSMsG4zzOlkL8tP+mHd+H3QBx4soFU2sYNZ+t2I/y1E8V WgtXUFaG7oImLjnDGntLQ2Fl/eEhqMqh -----END CERTIFICATE-----Generated at Tue Dec 23 03:33:49 2025 by rpki-client