This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft File: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft (raw, json) Hash identifier: c8WrgS53qBJIoX2u9YmcWPJFNn0WzJ6TR0jKJM8Xlnw= Subject key identifier: 87:1D:3E:33:D6:D5:F9:32:EB:50:30:B4:E1:42:E8:06:4B:B1:93:6B Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 Certificate issuer: /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Certificate serial: 0371 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft Manifest number: 0353 Signing time: Sat 06 Dec 2025 23:37:04 +0000 Manifest this update: Sat 06 Dec 2025 23:37:04 +0000 Manifest next update: Sat 13 Dec 2025 23:37:04 +0000 Files and hashes: 1: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl (hash: Ob7p799tygJyZasJ6dXqRaRMfps0ZaX6eRADhW+ipWc=) 2: 50068D0EAB2511F0BE8B7031C4F9AE02.roa (hash: fn0Xj2rDf9EwZ75bgFt4LeWqJwoly1MWkYYDiWMaw0U=) 3: 7AD7FD049DE911F0A23C8031C4F9AE02.roa (hash: CUjzOk4Yzo5HfsbOc1jf19caQKnMTxc8EO2EcR/1U8c=) 4: AB6989BCEADF11ECADC46036C4F9AE02.roa (hash: yhsDMBW1yOy0Jq2CHVI1ejI5EG1pZPsxlabs6cbZ8HE=) 5: FDCAB8A4948011F09DD92B2BC4F9AE02.roa (hash: kCEBaHwfIqs+1MsTxHmP6olnCtMZseut6OSfDQus2HE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 23:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 881 (0x371) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Validity Not Before: Dec 6 23:37:04 2025 GMT Not After : Dec 13 23:37:04 2025 GMT Subject: CN=6934be20-7a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:df:80:94:3a:dd:e1:10:56:79:69:7c:65:c6: 9f:92:73:89:83:be:ae:26:44:47:f8:3b:cb:e6:d9: c3:0f:19:f4:41:4a:bb:04:71:e2:56:ad:4c:08:f7: ed:e1:5a:3d:69:18:ff:ca:7e:90:b8:c6:6a:7a:f2: b0:ca:26:d3:c2:33:9b:86:5c:9f:9d:93:33:2e:d3: 5e:c8:f7:2a:40:5d:85:81:0f:54:98:e4:9d:95:39: e8:79:74:4d:46:1a:aa:a3:2b:fd:96:4c:50:6e:0e: a2:4b:43:a0:33:ac:3e:a2:a2:93:df:ca:e5:1f:cc: 55:fd:8f:e2:2c:c4:fc:e6:a8:22:27:c5:d5:68:62: a2:5e:a9:cb:26:0b:97:19:d6:60:e8:c1:42:e0:70: 7c:52:53:db:f9:fe:7e:8d:d8:80:99:6f:f7:3f:e8: c2:7c:c7:e4:2a:9d:6c:5a:52:e9:c1:42:0a:ff:75: 26:cb:58:9e:5e:df:04:0f:37:c3:6e:ce:72:a2:89: ee:f9:3e:ca:a7:b3:0d:d2:20:57:9f:9a:1f:54:37: f3:5d:76:e4:0d:ba:61:a4:7b:83:2d:5e:45:96:20: ef:3b:a5:9f:fc:08:22:09:6d:3c:d1:29:a0:5d:aa: 57:55:a2:eb:1c:44:92:81:01:84:b4:fa:69:4e:6e: 9d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1D:3E:33:D6:D5:F9:32:EB:50:30:B4:E1:42:E8:06:4B:B1:93:6B X509v3 Authority Key Identifier: keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:36:79:b5:61:0f:97:9f:95:f2:03:bf:3c:77:46:f2:70:10: d8:da:65:70:13:a9:1c:29:4e:9b:93:51:41:f7:39:c4:b2:1f: 7e:75:b9:20:01:27:7c:a3:2c:62:96:02:ef:7f:3f:50:42:b9: f3:5d:b0:2d:4b:c9:9c:66:8b:9d:78:33:23:ca:88:6f:4c:ed: 2d:22:db:be:f9:9b:bd:4a:ed:d5:04:e4:b7:60:32:41:b8:ba: e2:dc:b8:40:6a:5a:67:8e:5a:4b:4d:e3:9e:e2:3a:4f:a1:cf: c0:49:3d:8f:29:74:5b:67:05:ec:25:7d:fb:e3:b4:80:b2:eb: 22:5d:1a:f8:f0:47:ce:77:04:ab:04:ce:f8:dd:85:df:e5:d2: 78:21:78:d6:5f:04:9b:73:e1:9b:8b:1c:3b:1b:bf:db:e8:01: c2:69:2f:db:6d:69:61:e5:8a:e1:17:5b:95:98:02:75:c9:af: a8:65:e6:9a:3e:76:b8:e4:0a:43:50:b0:d1:68:e7:ca:34:83: 80:66:12:83:8c:eb:2b:54:46:58:c1:3d:94:b8:fc:95:21:89: c9:7a:a3:68:09:20:81:2a:f8:ee:38:0c:1d:a5:fc:aa:7e:ee: b1:7a:77:22:bf:ec:a4:e2:4a:f1:1f:5e:c9:fb:da:7f:01:9b: 80:70:2e:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0RTcxMTAvBgNVBAUTKEE1QzRBMEFCMEU1RUUxM0IxNDg0NTQzOUIxQUU0RkIz NDQ2OEM3QjkwHhcNMjUxMjA2MjMzNzA0WhcNMjUxMjEzMjMzNzA0WjAYMRYwFAYD VQQDEw02OTM0YmUyMC03YTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtN+AlDrd4RBWeWl8ZcafknOJg76uJkRH+DvL5tnDDxn0QUq7BHHiVq1MCPft 4Vo9aRj/yn6QuMZqevKwyibTwjObhlyfnZMzLtNeyPcqQF2FgQ9UmOSdlTnoeXRN Rhqqoyv9lkxQbg6iS0OgM6w+oqKT38rlH8xV/Y/iLMT85qgiJ8XVaGKiXqnLJguX GdZg6MFC4HB8UlPb+f5+jdiAmW/3P+jCfMfkKp1sWlLpwUIK/3Umy1ieXt8EDzfD bs5yoonu+T7Kp7MN0iBXn5ofVDfzXXbkDbphpHuDLV5FliDvO6Wf/AgiCW080Smg XapXVaLrHESSgQGEtPppTm6dZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIcdPjPW 1fky61AwtOFC6AZLsZNrMB8GA1UdIwQYMBaAFKXEoKsOXuE7FIRUObGuT7NEaMe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzRFNy85ODFDMDU1OEVB RDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRUc1VoRlE1c2E1UHMwUm94 N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BjU2dxdzVlNFRzVWhGUTVzYTVQczBSb3g3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzRFNy85ODFDMDU1OEVBRDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRU c1VoRlE1c2E1UHMwUm94N2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9Nnm1YQ+Xn5XyA788d0bycBDY2mVwE6kcKU6bk1FB9znEsh9+dbkg ASd8oyxilgLvfz9QQrnzXbAtS8mcZoudeDMjyohvTO0tItu++Zu9Su3VBOS3YDJB uLri3LhAalpnjlpLTeOe4jpPoc/AST2PKXRbZwXsJX3747SAsusiXRr48EfOdwSr BM743YXf5dJ4IXjWXwSbc+Gbixw7G7/b6AHCaS/bbWlh5YrhF1uVmAJ1ya+oZeaa Pna45ApDULDRaOfKNIOAZhKDjOsrVEZYwT2UuPyVIYnJeqNoCSCBKvjuOAwdpfyq fu6xenciv+yk4krxH17J+9p/AZuAcC6K -----END CERTIFICATE-----Generated at Sun Dec 7 06:35:35 2025 by rpki-client