This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft File: PI-14Mz34QXfzLtMj4NZ71phXx8.mft (raw, json) Hash identifier: dAls8a8EK89/WcuCN05+caaXJNlp/4b4dO6dzCAZ+24= Subject key identifier: 93:F1:9B:21:35:94:14:DD:7C:8A:7C:B2:97:95:8E:A6:08:2A:5A:E6 Authority key identifier: 3C:8F:B5:E0:CC:F7:E1:05:DF:CC:BB:4C:8F:83:59:EF:5A:61:5F:1F Certificate issuer: /CN=A9134C75/serialNumber=3C8FB5E0CCF7E105DFCCBB4C8F8359EF5A615F1F Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft Manifest number: 14 Signing time: Fri 05 Dec 2025 05:45:09 +0000 Manifest this update: Fri 05 Dec 2025 05:45:09 +0000 Manifest next update: Fri 12 Dec 2025 05:45:09 +0000 Files and hashes: 1: PI-14Mz34QXfzLtMj4NZ71phXx8.crl (hash: oYBe/8sman71TY/CR3D++7QsZlGdatHZzHAQXhROhE0=) 2: 5672783CBA2111F08A546E86C4F9AE02.roa (hash: hKmNb8cXZBZYEP/LnSxHf1U104+IEZAgDxNJ3uKpFbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.crl rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134C75, serialNumber=3C8FB5E0CCF7E105DFCCBB4C8F8359EF5A615F1F Validity Not Before: Dec 5 05:45:09 2025 GMT Not After : Dec 12 05:45:09 2025 GMT Subject: CN=69327165-f5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4f:c2:91:19:fa:77:f4:19:37:ee:06:26:7d: 89:7d:4d:0d:d8:00:5b:45:fb:e9:04:ae:2c:03:e1: a8:95:e8:53:c6:d6:b4:0a:e6:43:84:75:f0:ac:75: d1:5c:3b:d6:f1:31:9c:60:73:3a:ae:ae:a1:0c:54: 8d:48:16:85:0f:ea:91:6f:a0:74:3a:ab:78:59:50: b5:fa:90:50:6c:d2:a1:27:5e:04:6c:f6:a1:0c:3b: ac:b7:a2:cd:f6:3a:fb:c8:ce:81:8a:53:17:51:9c: ad:74:28:46:cc:35:fc:23:a2:f8:09:e4:c8:50:2b: d6:df:af:7a:30:b6:99:84:85:91:df:f0:3c:0f:27: 4b:2a:ad:06:2d:ee:ba:5e:d9:16:10:e5:cd:60:22: e7:b1:16:27:8e:22:6c:0c:35:5d:fc:3a:63:d7:53: 52:e7:0d:50:9f:e5:28:3a:41:c3:79:e5:7c:46:15: 24:32:7e:c3:1b:4f:31:83:73:7f:8c:a2:80:0d:f0: 6c:6c:47:f0:f9:6e:34:36:01:2b:c1:a9:ee:35:88: d4:2a:ea:48:56:19:5e:0d:9b:3d:f7:49:ad:76:bd: 46:a3:c7:36:8a:a7:94:59:66:b5:8d:69:75:c3:4c: 49:3a:7a:97:24:9f:de:83:84:06:d0:82:53:3e:83: 12:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F1:9B:21:35:94:14:DD:7C:8A:7C:B2:97:95:8E:A6:08:2A:5A:E6 X509v3 Authority Key Identifier: keyid:3C:8F:B5:E0:CC:F7:E1:05:DF:CC:BB:4C:8F:83:59:EF:5A:61:5F:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PI-14Mz34QXfzLtMj4NZ71phXx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134C75/0F82F584BA1F11F09D9E253CC4F9AE02/PI-14Mz34QXfzLtMj4NZ71phXx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:86:d1:28:d1:ad:8c:a1:9c:7d:8d:84:b3:c9:3b:09:4d:95: 03:5f:66:b2:03:1a:b0:d1:e3:aa:19:37:68:4a:b0:ec:9b:92: 32:bc:5d:c2:3b:77:80:fc:b4:d9:d7:79:f5:0b:4f:22:96:38: db:e2:7b:9b:b9:be:a7:18:b4:9d:f8:e5:a0:b9:b3:00:47:53: a1:f3:b9:c0:02:4c:01:d4:6a:a4:c3:2a:4e:e4:0c:35:e8:8f: 76:4a:40:d8:c4:4b:b4:21:87:cc:20:35:76:31:e3:a1:51:90: 30:30:f2:94:3e:23:f6:48:ed:a7:e2:7b:4a:43:05:39:60:2e: b0:60:5c:9e:cb:9d:90:1d:73:53:cf:76:b0:3e:63:37:4f:99: 4a:3d:ac:26:6c:ba:a4:43:e7:9b:c2:c7:cd:dd:b2:f0:72:0c: d5:03:c3:93:dd:05:90:2f:fc:e1:52:62:22:c9:da:8e:7c:1b: d4:0e:1d:46:1e:f0:74:9b:64:95:dc:84:6c:dd:67:9d:b1:f2: 63:21:a6:f8:d0:a1:25:4d:e4:14:91:db:ef:95:5d:47:89:91: 58:91:eb:44:e4:1e:c4:b7:34:78:bf:c2:26:5d:6a:6c:65:87: b4:17:e2:31:97:36:fd:69:41:12:8c:b9:32:9e:f1:d8:9b:69: 46:2c:09:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NEM3NTExMC8GA1UEBRMoM0M4RkI1RTBDQ0Y3RTEwNURGQ0NCQjRDOEY4MzU5RUY1 QTYxNUYxRjAeFw0yNTEyMDUwNTQ1MDlaFw0yNTEyMTIwNTQ1MDlaMBgxFjAUBgNV BAMTDTY5MzI3MTY1LWY1ZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVT8KRGfp39Bk37gYmfYl9TQ3YAFtF++kEriwD4aiV6FPG1rQK5kOEdfCsddFc O9bxMZxgczqurqEMVI1IFoUP6pFvoHQ6q3hZULX6kFBs0qEnXgRs9qEMO6y3os32 OvvIzoGKUxdRnK10KEbMNfwjovgJ5MhQK9bfr3owtpmEhZHf8DwPJ0sqrQYt7rpe 2RYQ5c1gIuexFieOImwMNV38OmPXU1LnDVCf5Sg6QcN55XxGFSQyfsMbTzGDc3+M ooAN8GxsR/D5bjQ2ASvBqe41iNQq6khWGV4Nmz33Sa12vUajxzaKp5RZZrWNaXXD TEk6epckn96DhAbQglM+gxLbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUk/GbITWU FN18inyyl5WOpggqWuYwHwYDVR0jBBgwFoAUPI+14Mz34QXfzLtMj4NZ71phXx8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0Qzc1LzBGODJGNTg0QkEx RjExRjA5RDlFMjUzQ0M0RjlBRTAyL1BJLTE0TXozNFFYZnpMdE1qNE5aNzFwaFh4 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEktMTRNejM0UVhmekx0TWo0Tlo3MXBoWHg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 Qzc1LzBGODJGNTg0QkExRjExRjA5RDlFMjUzQ0M0RjlBRTAyL1BJLTE0TXozNFFY ZnpMdE1qNE5aNzFwaFh4OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALOG0SjRrYyhnH2NhLPJOwlNlQNfZrIDGrDR46oZN2hKsOybkjK8XcI7 d4D8tNnXefULTyKWONvie5u5vqcYtJ345aC5swBHU6HzucACTAHUaqTDKk7kDDXo j3ZKQNjES7Qhh8wgNXYx46FRkDAw8pQ+I/ZI7afie0pDBTlgLrBgXJ7LnZAdc1PP drA+YzdPmUo9rCZsuqRD55vCx83dsvByDNUDw5PdBZAv/OFSYiLJ2o58G9QOHUYe 8HSbZJXchGzdZ52x8mMhpvjQoSVN5BSR2++VXUeJkViR60TkHsS3NHi/wiZdamxl h7QX4jGXNv1pQRKMuTKe8dibaUYsCRo= -----END CERTIFICATE-----Generated at Sat Dec 6 20:14:03 2025 by rpki-client