This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft File: PS2TrIsQhlgX2adMyBoDDX010HQ.mft (raw, json) Hash identifier: mFEbIlyw9AUJVM+PhWXuR/v6hezxQnTLn6U7wWOV8Ek= Subject key identifier: 3E:A6:71:5F:B6:A4:A8:8F:C1:FB:C2:EE:10:49:D5:10:A9:7E:36:54 Authority key identifier: 3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74 Certificate issuer: /CN=A9196D9E/serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074 Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft Manifest number: 018B Signing time: Fri 19 Dec 2025 02:43:24 +0000 Manifest this update: Fri 19 Dec 2025 02:43:24 +0000 Manifest next update: Fri 26 Dec 2025 02:43:24 +0000 Files and hashes: 1: PS2TrIsQhlgX2adMyBoDDX010HQ.crl (hash: pSxeWYQsuBo7QIgQxPKoxe51VJDFPlgUZ/cVMrVdiI8=) 2: C8BDA37CF68A11EFB7F91E24C4F9AE02.roa (hash: mArtjyT247pE1lA//+boJTcqB+yh5REahIcbkP9BBs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.crl rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:43:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196D9E, serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074 Validity Not Before: Dec 19 02:43:24 2025 GMT Not After : Dec 26 02:43:24 2025 GMT Subject: CN=6944bbcc-a136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f3:80:3e:b5:2a:e8:25:a6:2d:d4:58:eb:7b: fa:c4:5c:c8:6d:d0:9f:a2:d1:90:d7:11:d8:6e:0a: 01:fd:e1:b3:4c:de:b0:77:54:65:a0:53:67:4d:3c: e0:6d:0b:01:da:78:fa:78:19:33:4e:f8:cc:76:8f: c4:9a:ef:95:dc:78:93:d4:4b:3a:7a:f8:e7:b6:c8: ec:77:ab:f0:18:71:a6:22:30:06:9b:b0:4d:03:0f: ff:47:ca:b8:2c:66:23:fd:fa:e5:a1:e7:6e:8a:8a: 30:9f:cd:fe:72:39:c7:f0:2d:84:2e:ca:73:f2:c4: 9d:9e:15:9c:75:6d:ea:06:65:51:dc:94:55:4c:4e: 89:d7:69:bf:b3:b5:2d:15:78:e8:8c:c6:92:90:97: 9c:24:12:05:a6:e0:00:c8:b8:5a:42:b1:85:89:52: 97:d9:09:0d:d1:3e:66:25:3a:4e:6a:5a:1a:fc:2c: 51:90:b3:0a:fe:b3:71:81:47:fe:10:d9:73:1d:2c: a5:40:04:33:9e:41:07:54:ed:4b:27:61:3b:bf:ca: a5:92:5f:81:11:b4:7a:bb:64:3e:35:a4:da:6f:5f: da:17:bf:1a:c4:1c:4a:95:a1:c2:d0:c1:a7:a6:3e: 01:d8:0e:c1:80:bb:c2:ad:a6:2f:b2:f7:9e:08:c0: 97:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A6:71:5F:B6:A4:A8:8F:C1:FB:C2:EE:10:49:D5:10:A9:7E:36:54 X509v3 Authority Key Identifier: keyid:3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:3b:16:54:4c:19:b2:55:7e:2b:58:a7:0c:00:39:8d:08:ad: a8:ea:4e:ea:80:b6:1d:c7:0e:8c:76:58:5f:ce:79:38:e1:a7: dc:2e:36:ee:8f:db:24:8d:cc:5f:d8:c8:fe:21:c1:88:7b:62: 28:50:fe:86:bb:ee:1d:67:cd:5e:01:14:06:ad:8e:db:90:71: 7c:98:41:ba:e1:1b:ed:e3:70:1c:34:e1:c5:a8:64:6c:5a:fb: 8b:99:40:26:a0:1a:e3:8e:83:87:6d:00:77:07:b0:63:4d:45: d0:58:bb:f0:87:3c:11:25:74:8f:e8:77:23:fb:05:42:ef:fe: 87:19:38:b4:08:b0:e0:34:61:e1:ac:77:26:23:d8:e9:63:16: 55:ee:be:3d:ea:56:58:c9:6f:cf:ac:18:8f:2e:dc:c7:33:ad: 93:13:62:0a:03:e0:e9:d1:31:c5:5b:fe:21:b2:3a:42:b0:a0: 43:f0:58:27:0f:bf:b3:af:9f:1f:51:9b:90:10:b8:64:4e:fa: 65:44:52:e9:78:ce:5f:54:83:8b:f2:d2:8e:eb:ed:a0:e3:c6: fa:2b:92:06:60:7e:dc:fd:57:90:3c:9a:05:6d:4a:02:a3:84: eb:e4:da:c4:77:ea:a5:95:e0:08:ac:41:9d:42:8f:ef:5d:03: 66:f4:ff:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZEOUUxMTAvBgNVBAUTKDNEMkQ5M0FDOEIxMDg2NTgxN0Q5QTc0Q0M4MUEwMzBE N0QzNUQwNzQwHhcNMjUxMjE5MDI0MzI0WhcNMjUxMjI2MDI0MzI0WjAYMRYwFAYD VQQDDA02OTQ0YmJjYy1hMTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1POAPrUq6CWmLdRY63v6xFzIbdCfotGQ1xHYbgoB/eGzTN6wd1RloFNnTTzg bQsB2nj6eBkzTvjMdo/Emu+V3HiT1Es6evjntsjsd6vwGHGmIjAGm7BNAw//R8q4 LGYj/frloeduioown83+cjnH8C2ELspz8sSdnhWcdW3qBmVR3JRVTE6J12m/s7Ut FXjojMaSkJecJBIFpuAAyLhaQrGFiVKX2QkN0T5mJTpOaloa/CxRkLMK/rNxgUf+ ENlzHSylQAQznkEHVO1LJ2E7v8qlkl+BEbR6u2Q+NaTab1/aF78axBxKlaHC0MGn pj4B2A7BgLvCraYvsveeCMCXBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6mcV+2 pKiPwfvC7hBJ1RCpfjZUMB8GA1UdIwQYMBaAFD0tk6yLEIZYF9mnTMgaAw19NdB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkQ5RS83N0JCOTg0QzdE NjExMUVFQjQ2M0M4NUFDNEY5QUUwMi9QUzJUcklzUWhsZ1gyYWRNeUJvRERYMDEw SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTMlRySXNRaGxnWDJhZE15Qm9ERFgwMTBIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkQ5RS83N0JCOTg0QzdENjExMUVFQjQ2M0M4NUFDNEY5QUUwMi9QUzJUcklzUWhs Z1gyYWRNeUJvRERYMDEwSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHOxZUTBmyVX4rWKcMADmNCK2o6k7qgLYdxw6Mdlhfznk44afcLjbu j9skjcxf2Mj+IcGIe2IoUP6Gu+4dZ81eARQGrY7bkHF8mEG64Rvt43AcNOHFqGRs WvuLmUAmoBrjjoOHbQB3B7BjTUXQWLvwhzwRJXSP6Hcj+wVC7/6HGTi0CLDgNGHh rHcmI9jpYxZV7r496lZYyW/PrBiPLtzHM62TE2IKA+Dp0THFW/4hsjpCsKBD8Fgn D7+zr58fUZuQELhkTvplRFLpeM5fVIOL8tKO6+2g48b6K5IGYH7c/VeQPJoFbUoC o4Tr5NrEd+qlleAIrEGdQo/vXQNm9P+o -----END CERTIFICATE-----Generated at Fri Dec 19 21:27:56 2025 by rpki-client