This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft File: PxScskgQcfFD-NFWCCear8cdEVw.mft (raw, json) Hash identifier: ZfA/09GvFF579b7z2MhQrkEe441bDAz4w6vawggaS1U= Subject key identifier: D3:80:4D:02:E0:01:AD:26:F4:55:8B:40:C7:ED:94:EC:B9:E5:4B:A6 Authority key identifier: 3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C Certificate issuer: /CN=A911C18F/serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Certificate serial: 1F4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft Manifest number: 1F43 Signing time: Sat 06 Dec 2025 15:43:24 +0000 Manifest this update: Sat 06 Dec 2025 15:43:24 +0000 Manifest next update: Sat 13 Dec 2025 15:43:24 +0000 Files and hashes: 1: PxScskgQcfFD-NFWCCear8cdEVw.crl (hash: yIpFcsxtbQb/m7WVmim2BVQSs7AsfSuLFpwjPjkb1yI=) 2: A9FAE7FA5E1911E6B8CE9C5BC4F9AE02.roa (hash: xZ7a43he46yBIpdPfo3VUuRojtSoHm3dh9Gg3MtbJcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8014 (0x1f4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C18F, serialNumber=3F149CB2481071F143F8D15608279AAFC71D115C Validity Not Before: Dec 6 15:43:24 2025 GMT Not After : Dec 13 15:43:24 2025 GMT Subject: CN=69344f1c-5fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:db:64:5d:da:48:e9:18:63:3a:a2:53:37:55: f9:c6:d1:e6:63:a3:a7:4e:46:4c:04:9c:61:b5:d2: 32:25:03:08:cc:a1:19:8a:0c:54:5c:47:88:c9:d0: 78:ba:d4:13:05:67:aa:1a:b9:dc:5e:4d:91:c6:bc: 12:69:4e:e4:5c:bb:38:0e:43:f2:8a:a9:1c:32:5b: 64:a8:2f:94:80:66:c1:95:4b:d7:ec:a9:c6:b5:b5: 67:0b:4d:62:57:c4:e0:4d:29:53:b7:6a:00:f2:e9: 24:2d:49:4c:a9:cf:cd:e6:1e:ee:2a:e6:4f:f4:95: b4:60:05:9a:fc:7d:0e:a0:d5:40:c4:4e:51:c5:8f: ff:3e:fd:9a:74:c6:4c:4e:88:7e:1c:76:1d:0f:f3: 2d:86:c3:9a:6a:22:0d:41:ef:c5:f1:04:83:34:7d: eb:9e:27:4f:db:86:20:b9:16:41:7e:55:a4:ad:95: 66:13:1e:e4:8f:5d:0c:10:1c:f6:51:ad:4e:1f:08: 12:a1:32:e1:e0:12:bf:2b:ad:d0:8c:82:38:28:5d: 3d:b0:48:4f:87:6b:bc:53:77:27:70:a8:fb:95:73: b2:02:1c:a4:b0:de:6a:f7:7e:f2:24:3b:fb:53:9a: 80:c8:d4:b9:49:c7:58:76:3a:44:16:9e:f5:8a:99: 61:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:80:4D:02:E0:01:AD:26:F4:55:8B:40:C7:ED:94:EC:B9:E5:4B:A6 X509v3 Authority Key Identifier: keyid:3F:14:9C:B2:48:10:71:F1:43:F8:D1:56:08:27:9A:AF:C7:1D:11:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxScskgQcfFD-NFWCCear8cdEVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C18F/8E7A9BAC5E1811E6AC66C559C4F9AE02/PxScskgQcfFD-NFWCCear8cdEVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:af:4a:8f:6c:5c:84:4b:70:6e:23:b4:a1:79:0a:21:9a:46: 15:ca:21:92:42:b1:ae:64:eb:f1:3b:13:ea:c1:cd:c1:da:56: 0d:ca:8b:ab:cd:0d:ed:ad:93:6d:2b:80:de:7c:d9:76:11:40: b8:af:24:f2:fc:7f:60:f2:5b:be:2f:b3:52:49:8b:94:70:fe: 63:a4:dd:5c:4f:38:6d:a9:28:e3:ad:4a:ba:1a:47:97:2d:a0: d5:57:11:91:99:91:31:b8:72:b5:3d:e0:23:24:4d:e3:05:49: d2:dc:9d:65:39:ba:e8:6d:40:97:4c:f9:10:18:fd:83:c2:2e: b9:25:53:0f:ad:ef:31:10:c2:a2:68:7f:10:73:4a:f0:0b:9c: f4:38:00:9d:29:d1:8a:3f:c2:d8:6d:5c:28:42:b7:7f:3e:e1: 11:b4:f6:0d:d9:42:8d:64:be:b9:04:fc:74:4f:c7:20:ac:7d: 23:b5:6c:c2:68:ec:67:08:ca:4f:38:b3:0c:d1:50:c9:60:1f: 32:95:55:c0:4a:d5:d9:e7:b3:f4:98:0e:8e:72:13:dd:eb:ef: ac:66:8b:98:95:31:2d:65:be:50:d0:7b:7f:96:9a:28:b1:bb: fd:a5:22:6e:88:54:67:00:9b:64:96:3c:5a:26:2a:d4:9c:ad: 76:8c:73:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMxOEYxMTAvBgNVBAUTKDNGMTQ5Q0IyNDgxMDcxRjE0M0Y4RDE1NjA4Mjc5QUFG QzcxRDExNUMwHhcNMjUxMjA2MTU0MzI0WhcNMjUxMjEzMTU0MzI0WjAYMRYwFAYD VQQDEw02OTM0NGYxYy01ZmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ttkXdpI6RhjOqJTN1X5xtHmY6OnTkZMBJxhtdIyJQMIzKEZigxUXEeIydB4 utQTBWeqGrncXk2RxrwSaU7kXLs4DkPyiqkcMltkqC+UgGbBlUvX7KnGtbVnC01i V8TgTSlTt2oA8ukkLUlMqc/N5h7uKuZP9JW0YAWa/H0OoNVAxE5RxY//Pv2adMZM Toh+HHYdD/MthsOaaiINQe/F8QSDNH3rnidP24YguRZBflWkrZVmEx7kj10MEBz2 Ua1OHwgSoTLh4BK/K63QjII4KF09sEhPh2u8U3cncKj7lXOyAhyksN5q937yJDv7 U5qAyNS5ScdYdjpEFp71iplh5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNOATQLg Aa0m9FWLQMftlOy55UumMB8GA1UdIwQYMBaAFD8UnLJIEHHxQ/jRVggnmq/HHRFc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzE4Ri84RTdBOUJBQzVF MTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNmRkQtTkZXQ0NlYXI4Y2RF VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B4U2Nza2dRY2ZGRC1ORldDQ2VhcjhjZEVWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzE4Ri84RTdBOUJBQzVFMTgxMUU2QUM2NkM1NTlDNEY5QUUwMi9QeFNjc2tnUWNm RkQtTkZXQ0NlYXI4Y2RFVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXr0qPbFyES3BuI7SheQohmkYVyiGSQrGuZOvxOxPqwc3B2lYNyour zQ3trZNtK4DefNl2EUC4ryTy/H9g8lu+L7NSSYuUcP5jpN1cTzhtqSjjrUq6GkeX LaDVVxGRmZExuHK1PeAjJE3jBUnS3J1lObrobUCXTPkQGP2Dwi65JVMPre8xEMKi aH8Qc0rwC5z0OACdKdGKP8LYbVwoQrd/PuERtPYN2UKNZL65BPx0T8cgrH0jtWzC aOxnCMpPOLMM0VDJYB8ylVXAStXZ57P0mA6OchPd6++sZouYlTEtZb5Q0Ht/lpoo sbv9pSJuiFRnAJtkljxaJirUnK12jHMz -----END CERTIFICATE-----Generated at Sat Dec 6 22:23:37 2025 by rpki-client