This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft File: pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft (raw, json) Hash identifier: Y8FSmnl+0zOb7vMPtYYfoHQ1KkauFes1e03AvlJNFMY= Subject key identifier: BB:25:55:6E:45:50:BD:55:71:31:07:8D:B1:77:87:C3:D4:BB:34:25 Authority key identifier: A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B Certificate issuer: /CN=A915C365/serialNumber=A628034401C65CF46975DE8C9B4672F85E00FE9B Certificate serial: 0249 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft Manifest number: 023F Signing time: Fri 05 Dec 2025 00:09:38 +0000 Manifest this update: Fri 05 Dec 2025 00:09:38 +0000 Manifest next update: Fri 12 Dec 2025 00:09:38 +0000 Files and hashes: 1: pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl (hash: U8DRdN01S4g5ZMxP5QPqc1zVQ4vjbchY3LmkpYv7B/0=) 2: 83B6F66C5E4711EDA05F092CC4F9AE02.roa (hash: zueR7y6doRSR+ARSdcRZoyLuNrwU11AjdtpUc/YoDZ0=) 3: 843712B65E4711EDA05F092CC4F9AE02.roa (hash: 8vjp0ZIqdpkdJPpnvWXQ7Xzz/5ezWmLiXvSZkT2yI54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C365, serialNumber=A628034401C65CF46975DE8C9B4672F85E00FE9B Validity Not Before: Dec 5 00:09:38 2025 GMT Not After : Dec 12 00:09:38 2025 GMT Subject: CN=693222c2-bc29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9c:a8:6c:3f:86:3f:1a:fc:04:a7:8e:82:6f: 6c:24:ab:f8:1b:ec:cc:bb:68:b3:7e:0c:78:36:fe: a9:a3:a4:9a:bc:28:25:b3:a5:2a:ee:76:04:c8:34: 91:f9:2b:c5:c1:ee:69:5c:f4:64:4f:57:76:d9:8e: 29:01:95:9f:9b:2c:b5:fb:b3:f0:bd:7c:1d:88:b9: 55:88:9c:7a:48:f5:da:07:db:c7:3e:a7:7a:cd:8d: 0d:fb:8c:38:e4:a1:af:31:65:23:54:86:d1:2d:d2: 9e:c1:b6:af:c2:b6:96:11:7a:75:8e:be:a0:3c:98: 10:b7:44:bf:82:f9:07:d4:62:28:8f:14:e2:d3:3f: 80:c5:c6:1c:fd:33:15:83:fe:f6:61:5c:35:b8:55: 8e:62:0e:83:9f:17:55:9a:4e:bd:6f:f6:75:85:55: ed:b4:c7:4b:4c:bf:15:e4:74:34:98:bf:a7:2e:c0: 54:c7:9a:09:7b:46:0f:f5:84:5f:ee:22:53:cb:02: f2:4d:13:5f:c8:c0:c0:d2:b6:8c:fa:06:28:3d:af: fc:55:00:0d:52:0c:1c:a0:be:0b:5c:69:fd:a8:66: 10:a0:5e:50:b1:3f:a1:52:e6:7b:45:92:86:e1:89: 08:1d:42:7a:60:b5:64:31:6d:15:ed:b1:05:78:a6: 13:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:25:55:6E:45:50:BD:55:71:31:07:8D:B1:77:87:C3:D4:BB:34:25 X509v3 Authority Key Identifier: keyid:A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:4e:f7:d1:09:21:f2:67:d6:81:07:b8:b0:d6:26:53:fd:44: 88:38:57:ed:d6:0c:ea:3b:af:b2:99:f4:33:60:70:fb:2c:dc: c8:0f:f9:f8:eb:5e:b7:24:5c:bb:b1:3f:72:fe:ad:5f:43:92: 8b:e6:74:91:bf:9e:4e:0b:fd:0f:28:06:d3:25:97:6f:ae:96: 4f:cb:5a:60:94:05:d4:da:1f:b6:1c:8e:0f:3c:94:b1:41:f0: 0c:26:8a:35:92:7d:5c:78:7c:a8:11:14:30:1c:55:01:1f:b2: d4:c3:93:81:9a:7c:4d:2b:26:f9:73:cb:2e:0e:ae:c5:99:f7: b5:66:04:c4:b6:3e:c3:30:1d:73:90:fd:ec:27:ee:44:67:29: 89:35:b2:ef:6d:b5:85:fb:e4:86:52:b0:ef:12:53:79:0b:0f: 00:0e:41:77:f9:03:aa:7c:f6:26:b9:4a:69:4b:da:8f:fd:c3: a0:11:66:86:71:b6:47:ab:ac:73:13:f7:7b:0f:37:67:ed:b9: a7:3f:50:97:cf:03:33:04:b9:a7:0d:2f:eb:d1:87:14:7d:a7: bf:e6:3a:c1:1f:28:b1:90:68:53:73:59:d9:e9:42:4b:90:e6: ac:ab:06:80:90:2a:d3:e8:91:f6:42:eb:8c:e2:99:ec:0a:2e: ab:7a:d5:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMzNjUxMTAvBgNVBAUTKEE2MjgwMzQ0MDFDNjVDRjQ2OTc1REU4QzlCNDY3MkY4 NUUwMEZFOUIwHhcNMjUxMjA1MDAwOTM4WhcNMjUxMjEyMDAwOTM4WjAYMRYwFAYD VQQDEw02OTMyMjJjMi1iYzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpyobD+GPxr8BKeOgm9sJKv4G+zMu2izfgx4Nv6po6SavCgls6Uq7nYEyDSR +SvFwe5pXPRkT1d22Y4pAZWfmyy1+7PwvXwdiLlViJx6SPXaB9vHPqd6zY0N+4w4 5KGvMWUjVIbRLdKewbavwraWEXp1jr6gPJgQt0S/gvkH1GIojxTi0z+AxcYc/TMV g/72YVw1uFWOYg6DnxdVmk69b/Z1hVXttMdLTL8V5HQ0mL+nLsBUx5oJe0YP9YRf 7iJTywLyTRNfyMDA0raM+gYoPa/8VQANUgwcoL4LXGn9qGYQoF5QsT+hUuZ7RZKG 4YkIHUJ6YLVkMW0V7bEFeKYTlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLslVW5F UL1VcTEHjbF3h8PUuzQlMB8GA1UdIwQYMBaAFKYoA0QBxlz0aXXejJtGcvheAP6b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzM2NS8wOUZCNTE4QTVF NDUxMUVEQjUxN0QyMkFDNEY5QUUwMi9waWdEUkFIR1hQUnBkZDZNbTBaeS1GNEFf cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BpZ0RSQUhHWFBScGRkNk1tMFp5LUY0QV9wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzM2NS8wOUZCNTE4QTVFNDUxMUVEQjUxN0QyMkFDNEY5QUUwMi9waWdEUkFIR1hQ UnBkZDZNbTBaeS1GNEFfcHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpTvfRCSHyZ9aBB7iw1iZT/USIOFft1gzqO6+ymfQzYHD7LNzID/n4 6163JFy7sT9y/q1fQ5KL5nSRv55OC/0PKAbTJZdvrpZPy1pglAXU2h+2HI4PPJSx QfAMJoo1kn1ceHyoERQwHFUBH7LUw5OBmnxNKyb5c8suDq7Fmfe1ZgTEtj7DMB1z kP3sJ+5EZymJNbLvbbWF++SGUrDvElN5Cw8ADkF3+QOqfPYmuUppS9qP/cOgEWaG cbZHq6xzE/d7Dzdn7bmnP1CXzwMzBLmnDS/r0YcUfae/5jrBHyixkGhTc1nZ6UJL kOasqwaAkCrT6JH2QuuM4pnsCi6retWA -----END CERTIFICATE-----Generated at Sat Dec 6 18:04:26 2025 by rpki-client