This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft File: PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft (raw, json) Hash identifier: BSK0xGjqY5QcThgHBAV+bfjruwHnDDfyPnrW4irOVus= Subject key identifier: 01:A4:57:94:8D:78:81:11:F8:38:C5:62:CD:A6:66:40:A6:E3:71:0D Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 082C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft Manifest number: 080B Signing time: Sat 06 Dec 2025 20:09:04 +0000 Manifest this update: Sat 06 Dec 2025 20:09:03 +0000 Manifest next update: Sat 13 Dec 2025 20:09:03 +0000 Files and hashes: 1: PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl (hash: YAx7ZjvGMNHSgnQuXk04RUq5MWT9FqMUQ1OTxoRb24c=) 2: BADD8D386C4411EFA8952B76C4F9AE02.roa (hash: dvnOEo+3N790+AtnbaRMi3nEBY3/eARCboXR6RYFGJE=) 3: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (hash: 5NqgNIsXa19amtn4HMMc6db3EBMX1bO+m+WZsJmO+bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2092 (0x82c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Dec 6 20:09:03 2025 GMT Not After : Dec 13 20:09:03 2025 GMT Subject: CN=69348d60-34ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:76:fb:06:b7:2d:c4:f4:d5:21:6c:20:11:cd: 6b:f4:b4:ac:11:51:12:cb:b1:eb:80:ee:60:85:69: ef:3b:74:79:68:28:83:c3:99:8c:63:b1:87:6f:56: 23:8a:35:d5:2e:cb:3e:6b:fe:eb:30:f0:15:44:65: 1c:d3:7d:32:f3:a6:77:67:89:d4:da:8a:d5:fc:51: b3:e2:c6:99:6e:eb:d6:c6:75:da:89:fd:c4:14:50: 3e:ec:93:ea:13:57:6f:7c:2f:75:02:19:02:f1:7c: 2e:38:55:8e:fd:45:4b:6e:f2:e3:9b:ec:7f:7b:50: 5d:9f:c8:4d:79:5e:97:4c:14:de:63:e7:a0:28:dd: a9:a6:a5:5d:88:e3:3d:a5:32:da:c1:78:fa:7e:0b: 39:b7:e4:74:37:a1:aa:1f:5f:6b:8f:18:66:5d:91: 2f:1b:8a:bc:d5:6a:33:22:e2:19:ae:ec:c2:a9:a5: b7:03:2a:96:ae:53:72:40:4c:35:4b:96:ab:ff:40: 64:5d:ea:f8:b8:42:d9:e7:35:08:16:a8:27:76:0c: 7a:b6:4c:c1:89:d5:35:a8:ec:10:1b:71:11:cb:a9: 3c:b5:7f:4a:2a:51:b5:dc:16:2f:0d:40:a2:fe:06: 1a:d7:75:9d:70:c8:7a:cf:38:24:86:90:fe:52:87: b9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A4:57:94:8D:78:81:11:F8:38:C5:62:CD:A6:66:40:A6:E3:71:0D X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:9f:5d:da:9b:c9:f0:3d:58:03:e2:e2:ce:04:d4:d2:84:7d: 78:d3:0f:d8:0d:9e:7e:6f:00:23:84:24:dc:27:e9:36:4c:ab: af:52:36:41:f2:ef:43:60:46:98:ff:d6:50:f8:c5:c1:cf:3c: 0e:16:50:88:7d:42:4e:4f:e0:ae:90:a9:0a:0e:3e:01:42:13: 3d:d5:b5:a6:d5:d6:b9:dd:3a:be:75:3f:63:f3:13:f2:fa:23: 36:2b:83:a7:60:0e:91:5d:74:d5:47:28:85:76:ee:36:ba:6d: 60:cb:f8:b7:c3:38:9e:c7:a6:69:10:de:5c:e9:87:7b:37:c9: 06:11:48:77:3a:be:b2:22:bc:a4:96:a1:7c:06:b7:bb:4c:43: 8d:5f:b4:03:f5:e1:c2:a9:00:92:91:bb:02:ea:e1:31:68:4e: 6d:4a:c1:d7:10:4f:69:1a:89:b8:65:f3:f7:61:12:b6:9c:2d: 43:e7:f9:c4:aa:fb:6f:1b:a2:3f:af:21:ed:04:3c:46:31:75: b0:2e:4e:35:ff:77:37:a9:6b:ba:59:a3:96:e0:56:2a:5a:cc: 9c:2f:d1:de:6a:79:6b:43:0d:cd:06:e5:43:47:8f:b0:d5:15: 55:4c:e0:b2:a4:6e:3c:b8:ff:fd:43:61:64:00:27:98:7c:35: 57:fe:05:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjUxMjA2MjAwOTAzWhcNMjUxMjEzMjAwOTAzWjAYMRYwFAYD VQQDEw02OTM0OGQ2MC0zNGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHb7BrctxPTVIWwgEc1r9LSsEVESy7HrgO5ghWnvO3R5aCiDw5mMY7GHb1Yj ijXVLss+a/7rMPAVRGUc030y86Z3Z4nU2orV/FGz4saZbuvWxnXaif3EFFA+7JPq E1dvfC91AhkC8XwuOFWO/UVLbvLjm+x/e1Bdn8hNeV6XTBTeY+egKN2ppqVdiOM9 pTLawXj6fgs5t+R0N6GqH19rjxhmXZEvG4q81WozIuIZruzCqaW3AyqWrlNyQEw1 S5ar/0BkXer4uELZ5zUIFqgndgx6tkzBidU1qOwQG3ERy6k8tX9KKlG13BYvDUCi /gYa13WdcMh6zzgkhpD+Uoe5dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGkV5SN eIER+DjFYs2mZkCm43ENMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUYxOC9BMzg0MjkxQzBBQTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhp MHY3TlJkQmktemFaOERReUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgn13am8nwPVgD4uLOBNTShH140w/YDZ5+bwAjhCTcJ+k2TKuvUjZB 8u9DYEaY/9ZQ+MXBzzwOFlCIfUJOT+CukKkKDj4BQhM91bWm1da53Tq+dT9j8xPy +iM2K4OnYA6RXXTVRyiFdu42um1gy/i3wziex6ZpEN5c6Yd7N8kGEUh3Or6yIryk lqF8Bre7TEONX7QD9eHCqQCSkbsC6uExaE5tSsHXEE9pGom4ZfP3YRK2nC1D5/nE qvtvG6I/ryHtBDxGMXWwLk41/3c3qWu6WaOW4FYqWsycL9HeanlrQw3NBuVDR4+w 1RVVTOCypG48uP/9Q2FkACeYfDVX/gWz -----END CERTIFICATE-----Generated at Mon Dec 8 05:58:50 2025 by rpki-client