This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft File: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft (raw, json) Hash identifier: fe8ovNruhNN5+L/XLSBh/zpN6/5kwCZt3D3iKzwc/Es= Subject key identifier: 3D:66:26:90:8C:4F:9B:34:34:7A:30:A0:52:8C:14:BE:34:3D:5E:0A Authority key identifier: 3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C Certificate issuer: /CN=A917535F/serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft Manifest number: 7B Signing time: Tue 23 Dec 2025 05:41:48 +0000 Manifest this update: Tue 23 Dec 2025 05:41:47 +0000 Manifest next update: Tue 30 Dec 2025 05:41:47 +0000 Files and hashes: 1: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl (hash: m1JVqT0VQ1WlgxZcztPF9GzQ10lxlDyUoB88Y0vm51k=) 2: A7E91DCE275A11F09892587AC4F9AE02.roa (hash: XAjhA6rZnmUy5R0B6dDTLLxVDTe9uTg164pqzzQZriU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917535F, serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C Validity Not Before: Dec 23 05:41:47 2025 GMT Not After : Dec 30 05:41:47 2025 GMT Subject: CN=694a2b9c-f27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6b:d4:38:c3:a1:ed:f8:12:c6:4d:57:ed:bd: 3d:b1:6e:79:4f:aa:06:64:a8:66:41:fe:f6:7a:c8: 5c:3c:ca:cc:d9:d9:54:d1:e8:0d:8a:1d:3a:f3:ca: 69:87:8f:1a:45:c8:37:d1:8b:35:52:36:82:b7:ad: 49:ce:6e:25:db:dd:39:36:92:a6:85:fc:04:76:0e: dd:f3:f9:b7:f7:4e:28:4b:95:43:41:bc:cd:fc:6b: f9:f1:34:3a:99:77:11:08:13:5d:7f:3a:91:b4:a2: 27:83:28:98:4c:ec:54:4b:35:f3:20:db:cc:70:d4: e0:e1:1d:9e:a5:43:dd:9c:13:4b:6c:5d:98:05:4a: fe:8d:79:fa:35:4b:11:6a:01:83:4b:27:21:f9:67: b7:79:6e:68:40:e3:c3:fe:5e:60:96:e1:e3:19:8a: 28:8a:a1:fc:b4:0c:0a:7b:99:a7:a8:53:65:51:45: e0:83:d6:b6:c8:57:70:0e:b2:40:44:b4:43:ef:d1: 71:57:c7:6d:fe:d5:5a:f6:ea:21:84:2f:8a:e2:be: 79:b8:da:e6:c5:df:15:74:88:e9:f4:cc:03:d3:40: 08:19:a6:44:4c:c5:fd:16:af:13:95:c4:66:33:c9: 90:ea:80:a7:59:c5:b0:8a:a5:36:75:b7:9d:57:93: 12:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:66:26:90:8C:4F:9B:34:34:7A:30:A0:52:8C:14:BE:34:3D:5E:0A X509v3 Authority Key Identifier: keyid:3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:f0:68:c9:1e:fa:79:4a:8f:e4:aa:3b:2f:fe:c4:8c:92:9a: 03:a9:a1:76:4e:a3:79:03:c8:df:61:e5:72:5c:a1:73:90:ae: 88:09:75:23:0e:37:81:17:67:ac:e9:a0:50:eb:2d:e6:30:69: e6:c7:0a:60:f2:0c:c0:59:c6:22:3c:65:32:09:01:b0:e7:83: 3d:68:72:4c:6d:46:ff:03:42:6c:fd:79:52:df:3f:37:04:90: 5a:b6:22:bf:f8:51:88:ba:09:86:e8:5b:bf:07:44:ad:54:27: 5f:2f:47:24:e3:e4:a1:6a:45:19:09:d0:9a:6c:17:87:06:3b: 53:11:f0:0c:91:c7:72:a6:48:18:6e:69:e0:f8:be:77:16:4a: 29:a0:1f:98:86:2a:4d:b6:d7:c4:6d:50:9b:ae:07:17:33:f7: 04:51:da:d8:c8:0d:38:6d:66:75:49:c9:6b:c1:d5:b4:3c:2a: cf:58:18:94:38:4a:8f:c0:8e:ca:cf:8b:e4:c9:80:48:77:48: bb:28:5d:db:f3:68:98:66:d1:2f:99:13:df:59:13:c7:88:3e: 9d:c8:e7:5d:a9:9b:c8:5f:69:3b:f1:4c:ca:bd:78:97:bf:1a: 2d:0c:60:79:ea:a3:e6:e2:88:cc:d9:88:26:e9:02:68:d6:d3: 95:92:b3:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTM1RjExMC8GA1UEBRMoM0QxNTM2M0ZCMEE2RjRBOEQxQThBNUM5OUZBM0I0RTU5 MzFGOEI3QzAeFw0yNTEyMjMwNTQxNDdaFw0yNTEyMzAwNTQxNDdaMBgxFjAUBgNV BAMMDTY5NGEyYjljLWYyN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoa9Q4w6Ht+BLGTVftvT2xbnlPqgZkqGZB/vZ6yFw8yszZ2VTR6A2KHTrzymmH jxpFyDfRizVSNoK3rUnObiXb3Tk2kqaF/AR2Dt3z+bf3TihLlUNBvM38a/nxNDqZ dxEIE11/OpG0oieDKJhM7FRLNfMg28xw1ODhHZ6lQ92cE0tsXZgFSv6Nefo1SxFq AYNLJyH5Z7d5bmhA48P+XmCW4eMZiiiKofy0DAp7maeoU2VRReCD1rbIV3AOskBE tEPv0XFXx23+1Vr26iGEL4rivnm42ubF3xV0iOn0zAPTQAgZpkRMxf0WrxOVxGYz yZDqgKdZxbCKpTZ1t51XkxLRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPWYmkIxP mzQ0ejCgUowUvjQ9XgowHwYDVR0jBBgwFoAUPRU2P7Cm9KjRqKXJn6O05ZMfi3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1MzVGLzJFMjhDODVFMjc1 QTExRjA4RUZGNkI3NkM0RjlBRTAyL1BSVTJQN0NtOUtqUnFLWEpuNk8wNVpNZmkz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFJVMlA3Q205S2pScUtYSm42TzA1Wk1maTN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 MzVGLzJFMjhDODVFMjc1QTExRjA4RUZGNkI3NkM0RjlBRTAyL1BSVTJQN0NtOUtq UnFLWEpuNk8wNVpNZmkzdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK/waMke+nlKj+SqOy/+xIySmgOpoXZOo3kDyN9h5XJcoXOQrogJdSMO N4EXZ6zpoFDrLeYwaebHCmDyDMBZxiI8ZTIJAbDngz1ockxtRv8DQmz9eVLfPzcE kFq2Ir/4UYi6CYboW78HRK1UJ18vRyTj5KFqRRkJ0JpsF4cGO1MR8AyRx3KmSBhu aeD4vncWSimgH5iGKk2218RtUJuuBxcz9wRR2tjIDThtZnVJyWvB1bQ8Ks9YGJQ4 So/AjsrPi+TJgEh3SLsoXdvzaJhm0S+ZE99ZE8eIPp3I512pm8hfaTvxTMq9eJe/ Gi0MYHnqo+biiMzZiCbpAmjW05WSs4U= -----END CERTIFICATE-----Generated at Wed Dec 24 19:29:45 2025 by rpki-client