This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft File: PefvwEame5klu7vcYTKxKXXbSm0.mft (raw, json) Hash identifier: XjpgAF3nukxys3Yyo5V5p+O0YtcmLMS/z3P09UIUsM8= Subject key identifier: DF:27:94:15:C8:FD:AE:C7:6C:65:63:5C:68:0C:3A:0B:DA:3D:A8:B3 Authority key identifier: 3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D Certificate issuer: /CN=A9176190/serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D Certificate serial: 09A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft Manifest number: 0976 Signing time: Mon 22 Dec 2025 19:33:22 +0000 Manifest this update: Mon 22 Dec 2025 19:33:21 +0000 Manifest next update: Mon 29 Dec 2025 19:33:21 +0000 Files and hashes: 1: PefvwEame5klu7vcYTKxKXXbSm0.crl (hash: QHzd4gqqZVu+VjvTd6ywnZPeVIWMaMue9M4faDLzoQ4=) 2: 2DFEDC68A39711ED936DC309C4F9AE02.roa (hash: dHGUh2TZsDHqiOEaZNl0HaiTJBOhXu4wr+Jn6ErPPq8=) 3: 9BB410F021B011EFA6C95F83C4F9AE02.roa (hash: ham/XAS0gNUsA7VUjnWwNOW385MWOqUwYnVoCHtaJMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2465 (0x9a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176190, serialNumber=3DE7EFC046A67B9925BBBBDC6132B12975DB4A6D Validity Not Before: Dec 22 19:33:21 2025 GMT Not After : Dec 29 19:33:21 2025 GMT Subject: CN=69499d02-ada0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b9:83:f2:da:2a:65:e7:ec:99:a9:5e:4e:2d: 0b:8c:3c:b5:c7:ba:3c:e9:25:09:ad:fe:23:8e:96: fd:4b:63:af:eb:15:c7:66:e1:d6:3e:1b:33:ce:1a: 2e:9f:d9:8b:d0:32:22:95:f2:35:04:ee:7d:3d:09: 16:b2:02:b2:5e:91:80:dd:5c:02:f5:cf:cd:dd:cc: 0e:e4:7f:54:68:e3:df:79:a4:22:c4:3b:bb:c7:a8: 47:7d:43:7b:5e:66:a0:39:86:ad:b8:5c:54:42:f6: 23:2b:c8:a0:4f:24:98:d0:69:11:cf:4c:81:71:a9: 4b:5f:7e:d7:06:da:39:a5:22:04:78:a5:b2:40:49: bb:b8:cf:99:bd:30:41:5c:40:5f:68:d9:07:3f:2b: df:1b:2a:81:9e:0f:c4:9e:f0:ae:85:0e:2c:d7:b3: ba:77:72:09:7c:f6:97:43:b9:fc:d7:aa:8c:21:35: 80:c9:0c:3e:83:31:fd:33:b4:51:ca:91:59:36:a1: ff:bf:7a:3a:dc:f7:cb:16:33:c8:30:a8:2a:b5:f5: aa:00:be:fd:4c:08:a0:08:75:37:03:f9:2c:0c:30: 51:dd:9c:bd:be:f7:d0:52:a6:24:83:2c:a1:4b:2a: ee:31:cb:f0:7e:35:10:e5:2f:ce:ed:6f:2b:74:15: f0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:27:94:15:C8:FD:AE:C7:6C:65:63:5C:68:0C:3A:0B:DA:3D:A8:B3 X509v3 Authority Key Identifier: keyid:3D:E7:EF:C0:46:A6:7B:99:25:BB:BB:DC:61:32:B1:29:75:DB:4A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PefvwEame5klu7vcYTKxKXXbSm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176190/C37300E8AE1811EAA5090072C4F9AE02/PefvwEame5klu7vcYTKxKXXbSm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:6d:c9:2d:2c:31:d8:2d:30:bf:f8:f6:5e:74:7e:cb:75:7d: b6:31:2e:1e:8f:29:98:53:68:96:c7:22:8f:91:f9:36:ae:11: 34:0f:30:b4:64:b4:48:81:d9:2d:85:96:53:5f:9f:13:80:51: 0c:72:76:ff:eb:4a:82:22:92:18:7d:ad:b9:c9:42:31:0a:76: 75:7e:af:15:ee:d8:6f:d9:ae:f6:42:0d:58:eb:20:d8:00:aa: b8:14:e8:2e:92:78:c6:bb:0b:5b:35:c8:cd:e5:bb:32:b8:07: c0:54:b6:6a:8b:54:fb:7a:ce:58:1d:87:a0:40:b8:07:35:62: 8c:26:ed:05:e5:1b:14:c0:da:46:e2:47:66:e0:8d:10:2b:93: 4b:02:e3:13:b5:99:83:d6:bb:55:74:4d:94:80:e8:84:d1:f6: bb:ed:1d:28:fc:dc:b8:32:54:6e:eb:0c:51:50:3c:27:0f:3f: ae:61:61:46:76:b7:85:7c:42:71:b8:44:03:48:8d:10:92:cd: df:06:d3:73:2f:c8:2e:07:f9:3d:2a:5c:0c:2b:f1:8d:54:e7: ad:d7:27:7c:f9:7d:70:4d:9f:5b:a9:84:92:7e:fa:26:e2:b1: d1:6a:14:84:9c:ac:8d:0b:e7:11:34:03:6d:dd:c8:ff:98:f2: 6b:c5:45:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYxOTAxMTAvBgNVBAUTKDNERTdFRkMwNDZBNjdCOTkyNUJCQkJEQzYxMzJCMTI5 NzVEQjRBNkQwHhcNMjUxMjIyMTkzMzIxWhcNMjUxMjI5MTkzMzIxWjAYMRYwFAYD VQQDDA02OTQ5OWQwMi1hZGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurmD8toqZefsmaleTi0LjDy1x7o86SUJrf4jjpb9S2Ov6xXHZuHWPhszzhou n9mL0DIilfI1BO59PQkWsgKyXpGA3VwC9c/N3cwO5H9UaOPfeaQixDu7x6hHfUN7 XmagOYatuFxUQvYjK8igTySY0GkRz0yBcalLX37XBto5pSIEeKWyQEm7uM+ZvTBB XEBfaNkHPyvfGyqBng/EnvCuhQ4s17O6d3IJfPaXQ7n816qMITWAyQw+gzH9M7RR ypFZNqH/v3o63PfLFjPIMKgqtfWqAL79TAigCHU3A/ksDDBR3Zy9vvfQUqYkgyyh SyruMcvwfjUQ5S/O7W8rdBXwpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8nlBXI /a7HbGVjXGgMOgvaPaizMB8GA1UdIwQYMBaAFD3n78BGpnuZJbu73GEysSl120pt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjE5MC9DMzczMDBFOEFF MTgxMUVBQTUwOTAwNzJDNEY5QUUwMi9QZWZ2d0VhbWU1a2x1N3ZjWVRLeEtYWGJT bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BlZnZ3RWFtZTVrbHU3dmNZVEt4S1hYYlNtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjE5MC9DMzczMDBFOEFFMTgxMUVBQTUwOTAwNzJDNEY5QUUwMi9QZWZ2d0VhbWU1 a2x1N3ZjWVRLeEtYWGJTbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgbcktLDHYLTC/+PZedH7LdX22MS4ejymYU2iWxyKPkfk2rhE0DzC0 ZLRIgdkthZZTX58TgFEMcnb/60qCIpIYfa25yUIxCnZ1fq8V7thv2a72Qg1Y6yDY AKq4FOguknjGuwtbNcjN5bsyuAfAVLZqi1T7es5YHYegQLgHNWKMJu0F5RsUwNpG 4kdm4I0QK5NLAuMTtZmD1rtVdE2UgOiE0fa77R0o/Ny4MlRu6wxRUDwnDz+uYWFG dreFfEJxuEQDSI0Qks3fBtNzL8guB/k9KlwMK/GNVOet1yd8+X1wTZ9bqYSSfvom 4rHRahSEnKyNC+cRNANt3cj/mPJrxUWm -----END CERTIFICATE-----Generated at Wed Dec 24 00:15:35 2025 by rpki-client