This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft File: pUy3dCqrz05Y5dTB87nRLa2RtAY.mft (raw, json) Hash identifier: P3WLwV/SOWHINkWqv2XpBVdc6XXto3ENVYZYg5Y9wEw= Subject key identifier: AE:72:09:AF:B8:3E:F8:4F:9D:09:DE:0D:0A:2D:AE:C8:38:56:81:B7 Authority key identifier: A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06 Certificate issuer: /CN=A9190D72/serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft Manifest number: 0156 Signing time: Tue 23 Dec 2025 03:10:32 +0000 Manifest this update: Tue 23 Dec 2025 03:10:32 +0000 Manifest next update: Tue 30 Dec 2025 03:10:32 +0000 Files and hashes: 1: pUy3dCqrz05Y5dTB87nRLa2RtAY.crl (hash: HgP6DiYd/DSb122i/LNsdzBTR471drnHlwZJckVSdmE=) 2: 35D2294C4AB511EF87AB161BC4F9AE02.roa (hash: ojSPB0ISIGRw3cOfBtrECwI7sYrCbgl9SiZcYTomn1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D72, serialNumber=A54CB7742AABCF4E58E5D4C1F3B9D12DAD91B406 Validity Not Before: Dec 23 03:10:32 2025 GMT Not After : Dec 30 03:10:32 2025 GMT Subject: CN=694a0828-52ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e2:86:1e:60:32:a9:40:da:68:6a:03:af:d2: 61:f0:d6:53:6f:92:f2:f2:87:df:1c:63:d9:a9:9e: 6e:db:7f:17:6b:5c:31:89:29:d1:23:51:15:59:6e: 71:5f:f4:1c:b1:0a:ef:02:4d:bf:5c:28:86:85:ef: 80:41:09:dc:7d:41:c1:1a:7b:c5:de:df:3d:d4:48: 96:a7:85:a9:7d:ec:40:52:4a:ea:14:24:0b:63:06: 14:83:1d:15:f0:79:ec:27:d6:ce:72:6c:4e:65:f5: 27:d4:79:25:3e:65:9f:3e:5d:0a:3b:10:e4:95:7b: 10:50:ed:b5:72:50:9d:cf:56:8f:ee:ea:71:0a:db: 82:82:9b:5f:54:14:a2:9b:3e:f5:59:f0:72:bd:9d: c9:86:dc:a7:f8:ae:c9:44:d8:1a:9d:54:97:f4:22: f3:cf:5d:89:26:ee:86:db:34:2f:be:7a:01:99:91: 20:a3:95:24:95:75:1e:47:51:d4:27:1d:4d:9f:c6: 02:32:c4:2d:47:3f:b7:21:23:95:30:69:2a:be:bc: 6b:b7:0e:d4:e5:aa:d1:10:c3:ed:14:02:23:1a:ae: fa:87:c0:5c:17:ca:e5:5f:db:12:64:2a:63:c7:d0: 7d:33:3b:69:69:ab:43:1b:bd:ac:4a:53:60:98:b8: b7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:72:09:AF:B8:3E:F8:4F:9D:09:DE:0D:0A:2D:AE:C8:38:56:81:B7 X509v3 Authority Key Identifier: keyid:A5:4C:B7:74:2A:AB:CF:4E:58:E5:D4:C1:F3:B9:D1:2D:AD:91:B4:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pUy3dCqrz05Y5dTB87nRLa2RtAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/6AC989F0D48211EE87D5D724C4F9AE02/pUy3dCqrz05Y5dTB87nRLa2RtAY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:68:bb:14:ee:8c:97:37:05:1e:57:87:86:d7:d2:99:ad:e9: 52:0b:1f:53:2e:19:76:f0:1d:22:6b:97:9e:14:23:5b:45:d1: 27:c9:d0:9b:86:48:8a:4e:3b:5f:19:be:95:8a:9a:82:71:89: 34:de:fb:25:b6:8d:d3:a1:0b:98:c7:4e:1b:4a:56:38:65:fb: 18:d1:47:ee:3c:c8:3d:db:aa:89:9a:bf:c4:f5:04:57:c6:d1: 04:08:6a:0e:3b:ae:93:ad:f5:ae:18:85:76:d0:bf:aa:22:c4: 2f:ed:51:0c:15:a9:87:bc:95:56:6e:85:5c:ae:4e:20:75:f0: c6:af:34:ea:68:cc:a8:27:76:27:5e:96:80:c9:3d:cc:6e:48: b0:ac:23:a9:c6:48:41:85:43:46:e0:1f:ba:82:f5:88:5a:40: c1:ea:00:97:96:eb:1c:2b:af:8f:ca:01:12:11:55:5c:0c:e5: 2f:b5:53:1c:a1:43:5b:d4:47:ff:5f:4b:a6:92:f0:bc:22:f4: 7d:a2:73:16:fc:cc:9d:43:b7:4f:be:93:dd:93:d9:e0:76:e8: ab:5f:7d:2b:b5:76:19:3c:0a:b1:43:96:d0:04:24:a1:77:40: 47:2a:e9:70:de:a3:2a:b1:8f:f9:22:10:f2:06:bf:24:01:10: 39:5f:e1:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBENzIxMTAvBgNVBAUTKEE1NENCNzc0MkFBQkNGNEU1OEU1RDRDMUYzQjlEMTJE QUQ5MUI0MDYwHhcNMjUxMjIzMDMxMDMyWhcNMjUxMjMwMDMxMDMyWjAYMRYwFAYD VQQDDA02OTRhMDgyOC01MmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4uKGHmAyqUDaaGoDr9Jh8NZTb5Ly8offHGPZqZ5u238Xa1wxiSnRI1EVWW5x X/QcsQrvAk2/XCiGhe+AQQncfUHBGnvF3t891EiWp4WpfexAUkrqFCQLYwYUgx0V 8HnsJ9bOcmxOZfUn1HklPmWfPl0KOxDklXsQUO21clCdz1aP7upxCtuCgptfVBSi mz71WfByvZ3Jhtyn+K7JRNganVSX9CLzz12JJu6G2zQvvnoBmZEgo5UklXUeR1HU Jx1Nn8YCMsQtRz+3ISOVMGkqvrxrtw7U5arREMPtFAIjGq76h8BcF8rlX9sSZCpj x9B9MztpaatDG72sSlNgmLi3hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5yCa+4 PvhPnQneDQotrsg4VoG3MB8GA1UdIwQYMBaAFKVMt3Qqq89OWOXUwfO50S2tkbQG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQ3Mi82QUM5ODlGMEQ0 ODIxMUVFODdENUQ3MjRDNEY5QUUwMi9wVXkzZENxcnowNVk1ZFRCODduUkxhMlJ0 QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BVeTNkQ3FyejA1WTVkVEI4N25STGEyUnRBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQ3Mi82QUM5ODlGMEQ0ODIxMUVFODdENUQ3MjRDNEY5QUUwMi9wVXkzZENxcnow NVk1ZFRCODduUkxhMlJ0QVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFaLsU7oyXNwUeV4eG19KZrelSCx9TLhl28B0ia5eeFCNbRdEnydCb hkiKTjtfGb6VipqCcYk03vslto3ToQuYx04bSlY4ZfsY0UfuPMg926qJmr/E9QRX xtEECGoOO66TrfWuGIV20L+qIsQv7VEMFamHvJVWboVcrk4gdfDGrzTqaMyoJ3Yn XpaAyT3MbkiwrCOpxkhBhUNG4B+6gvWIWkDB6gCXluscK6+PygESEVVcDOUvtVMc oUNb1Ef/X0umkvC8IvR9onMW/MydQ7dPvpPdk9ngduirX30rtXYZPAqxQ5bQBCSh d0BHKulw3qMqsY/5IhDyBr8kARA5X+Fd -----END CERTIFICATE-----Generated at Tue Dec 23 06:55:53 2025 by rpki-client