This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft File: pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft (raw, json) Hash identifier: 1HkGYzUzbYLsiYo2iy2MrSLioOJs1tIeMSDFvkMZHSA= Subject key identifier: 6A:C5:DD:4C:7A:44:94:F6:93:38:52:6F:0F:E7:1F:28:90:07:8F:27 Authority key identifier: A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B Certificate issuer: /CN=A915C365/serialNumber=A628034401C65CF46975DE8C9B4672F85E00FE9B Certificate serial: 0250 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft Manifest number: 0246 Signing time: Fri 19 Dec 2025 01:00:07 +0000 Manifest this update: Fri 19 Dec 2025 01:00:07 +0000 Manifest next update: Fri 26 Dec 2025 01:00:07 +0000 Files and hashes: 1: pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl (hash: tngZ0DpPPMAWKLrmQCL+dISG3cTB7UkZpvgDpdUpD4g=) 2: 843712B65E4711EDA05F092CC4F9AE02.roa (hash: 8vjp0ZIqdpkdJPpnvWXQ7Xzz/5ezWmLiXvSZkT2yI54=) 3: 83B6F66C5E4711EDA05F092CC4F9AE02.roa (hash: zueR7y6doRSR+ARSdcRZoyLuNrwU11AjdtpUc/YoDZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 592 (0x250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C365, serialNumber=A628034401C65CF46975DE8C9B4672F85E00FE9B Validity Not Before: Dec 19 01:00:07 2025 GMT Not After : Dec 26 01:00:07 2025 GMT Subject: CN=6944a397-3665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c6:eb:f1:01:a5:67:c8:60:4f:da:bd:11:e1: 49:50:fa:17:77:fc:f4:26:61:a2:4a:18:ff:b6:53: 25:1b:54:7b:27:eb:56:d9:ca:6a:91:58:d6:09:ae: ff:79:61:f9:92:05:5f:68:2d:d2:bf:75:d5:da:54: 4f:57:be:75:36:8a:63:5e:3d:c4:aa:ec:2d:56:09: 11:73:02:e2:30:a9:8b:0e:7f:d9:7b:01:31:4e:d0: 1e:0c:c2:9e:96:a6:db:4a:32:74:6c:9c:0c:6a:ac: eb:bf:6a:c7:d7:4c:81:90:fa:b4:d0:68:fd:60:eb: a4:5e:27:c5:57:8a:2e:91:bc:82:b4:2f:8d:45:6c: 36:29:46:31:e6:e6:01:f6:ad:88:ef:b7:d4:9d:9b: d8:08:a3:97:6c:f5:95:c2:aa:90:aa:f7:34:ee:0d: 81:b1:6e:7e:db:11:88:4c:56:d6:5c:70:8a:0e:95: 70:88:bf:df:d9:62:ac:1b:70:23:c3:ae:39:ce:7a: 4d:3e:63:b8:0c:67:43:0e:8a:b4:90:12:1d:09:3d: 19:53:e7:ae:fb:f3:8a:a4:20:71:ff:05:21:0d:3d: dc:77:96:cf:7a:d2:d6:42:d8:4c:de:57:37:1b:f2: b6:e5:16:5d:6f:2b:30:13:37:97:59:43:25:61:12: e2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C5:DD:4C:7A:44:94:F6:93:38:52:6F:0F:E7:1F:28:90:07:8F:27 X509v3 Authority Key Identifier: keyid:A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:89:2c:ea:f5:37:74:3e:a9:f1:f7:9a:d1:fa:ca:ec:d0:c6: 73:94:e2:e3:ab:c5:69:30:84:de:16:71:c7:bf:02:b3:ca:6d: d2:92:eb:e3:09:4a:3c:0c:dd:04:0e:c2:0b:c7:42:4f:74:89: e8:84:76:1e:dc:0c:1b:d9:1c:4f:2d:8b:85:45:6c:fa:d1:72: 55:3b:31:48:7e:0d:f3:78:2a:34:7a:6f:85:6d:9b:82:04:e6: d7:a5:5e:c6:29:5d:7e:0c:40:18:e6:2d:c7:e5:a6:a2:5d:53: 41:98:6b:eb:4d:30:7a:6a:3c:07:4f:9e:df:92:dc:89:2a:ad: c5:aa:b5:a1:9b:ad:e0:cf:b8:39:16:6a:02:d8:63:48:b5:d7: aa:c6:f4:b6:82:6a:6d:5d:15:4b:7d:8b:5f:64:78:49:6f:d0: 48:1f:c4:7d:0d:f4:32:5d:a0:57:87:b6:ab:ef:8d:c0:4c:31: 89:0b:60:df:e2:2f:b6:8e:34:fd:be:33:1a:d7:b5:43:3d:24: 63:0f:fa:ff:c4:ce:f7:05:b3:97:3b:62:01:27:7e:8c:f0:76: 1a:30:dc:ad:c5:12:97:28:59:cc:5f:05:bb:fa:0d:01:c3:99: 8d:06:20:bd:72:d8:48:45:e0:04:e2:8e:3e:52:f2:c6:01:e2: b0:2b:93:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMzNjUxMTAvBgNVBAUTKEE2MjgwMzQ0MDFDNjVDRjQ2OTc1REU4QzlCNDY3MkY4 NUUwMEZFOUIwHhcNMjUxMjE5MDEwMDA3WhcNMjUxMjI2MDEwMDA3WjAYMRYwFAYD VQQDDA02OTQ0YTM5Ny0zNjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlsbr8QGlZ8hgT9q9EeFJUPoXd/z0JmGiShj/tlMlG1R7J+tW2cpqkVjWCa7/ eWH5kgVfaC3Sv3XV2lRPV751NopjXj3EquwtVgkRcwLiMKmLDn/ZewExTtAeDMKe lqbbSjJ0bJwMaqzrv2rH10yBkPq00Gj9YOukXifFV4oukbyCtC+NRWw2KUYx5uYB 9q2I77fUnZvYCKOXbPWVwqqQqvc07g2BsW5+2xGITFbWXHCKDpVwiL/f2WKsG3Aj w645znpNPmO4DGdDDoq0kBIdCT0ZU+eu+/OKpCBx/wUhDT3cd5bPetLWQthM3lc3 G/K25RZdbyswEzeXWUMlYRLiDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrF3Ux6 RJT2kzhSbw/nHyiQB48nMB8GA1UdIwQYMBaAFKYoA0QBxlz0aXXejJtGcvheAP6b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzM2NS8wOUZCNTE4QTVF NDUxMUVEQjUxN0QyMkFDNEY5QUUwMi9waWdEUkFIR1hQUnBkZDZNbTBaeS1GNEFf cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BpZ0RSQUhHWFBScGRkNk1tMFp5LUY0QV9wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzM2NS8wOUZCNTE4QTVFNDUxMUVEQjUxN0QyMkFDNEY5QUUwMi9waWdEUkFIR1hQ UnBkZDZNbTBaeS1GNEFfcHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbiSzq9Td0Pqnx95rR+srs0MZzlOLjq8VpMITeFnHHvwKzym3Skuvj CUo8DN0EDsILx0JPdInohHYe3Awb2RxPLYuFRWz60XJVOzFIfg3zeCo0em+FbZuC BObXpV7GKV1+DEAY5i3H5aaiXVNBmGvrTTB6ajwHT57fktyJKq3FqrWhm63gz7g5 FmoC2GNItdeqxvS2gmptXRVLfYtfZHhJb9BIH8R9DfQyXaBXh7ar743ATDGJC2Df 4i+2jjT9vjMa17VDPSRjD/r/xM73BbOXO2IBJ36M8HYaMNytxRKXKFnMXwW7+g0B w5mNBiC9cthIReAE4o4+UvLGAeKwK5Pz -----END CERTIFICATE-----Generated at Sat Dec 20 13:05:41 2025 by rpki-client