This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft File: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft (raw, json) Hash identifier: MJRI6Kv2RIUsmd/ItV7T3WNp69Sn9w8SZe66QAR8eIQ= Subject key identifier: 6F:A2:F3:99:FE:A0:2B:69:C9:01:39:41:ED:ED:A1:79:BA:76:B4:FE Authority key identifier: 3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C Certificate issuer: /CN=A917535F/serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft Manifest number: 72 Signing time: Fri 05 Dec 2025 04:48:00 +0000 Manifest this update: Fri 05 Dec 2025 04:48:00 +0000 Manifest next update: Fri 12 Dec 2025 04:48:00 +0000 Files and hashes: 1: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl (hash: 0UQk1dDTv6hpT//NIUS2JwiGb9ul+e+rPN6OUdQxfbY=) 2: A7E91DCE275A11F09892587AC4F9AE02.roa (hash: XAjhA6rZnmUy5R0B6dDTLLxVDTe9uTg164pqzzQZriU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:47:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917535F, serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C Validity Not Before: Dec 5 04:48:00 2025 GMT Not After : Dec 12 04:48:00 2025 GMT Subject: CN=69326400-8b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:90:0d:2c:a3:64:2a:44:93:25:17:4b:f8:31: b3:d3:d6:9c:2d:09:53:7c:97:8e:6d:b7:71:0d:5c: d9:c4:1a:c8:77:a2:2c:66:fd:54:b1:db:ad:e5:b8: c8:52:1a:d0:c7:bf:08:30:63:9d:d2:76:83:90:36: 39:79:30:7e:23:24:e3:9f:3c:b9:a7:7b:3a:12:79: af:7f:61:e5:8f:34:8e:35:a7:22:12:bc:ae:8f:22: 1c:98:9c:16:b5:22:9b:03:ab:98:d4:ad:40:6b:a8: 44:c4:89:09:f4:8b:60:1a:be:9c:b3:e7:95:19:85: ce:ba:8f:1f:18:e3:18:11:a9:9b:f6:ca:ae:b7:c5: c3:5b:ca:54:c6:e7:da:30:a0:95:71:62:04:4e:50: bb:f2:7f:99:93:95:3d:0d:1c:a7:30:4b:9d:a2:8f: 7d:1a:20:30:81:37:26:2b:00:24:4e:2d:39:e1:c6: 79:79:7c:a1:2a:e8:36:13:00:4e:71:54:a4:fc:bc: 55:ca:e1:59:6b:b4:7d:86:ca:89:dd:45:7d:7d:ff: 2d:1e:eb:61:f2:e2:78:f6:21:47:d7:dc:b2:8d:1f: 27:5a:d4:f4:70:50:c3:d8:94:81:e6:ec:65:e4:41: 30:8c:35:dd:51:ee:87:02:0d:90:cf:7f:b0:5f:9f: 21:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A2:F3:99:FE:A0:2B:69:C9:01:39:41:ED:ED:A1:79:BA:76:B4:FE X509v3 Authority Key Identifier: keyid:3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:38:5d:79:ef:a7:0f:23:1b:33:b4:08:74:1e:62:f7:4d:d5: 81:e8:25:24:03:64:5c:12:78:a0:1c:58:29:93:6d:99:1f:ae: 19:ed:ab:36:ae:c3:ca:85:e1:37:f5:d6:62:22:83:e5:12:de: cb:34:de:d6:d0:3b:7a:db:c7:b4:2c:7b:61:22:a5:eb:9f:5a: 22:e3:aa:6c:7a:b6:01:d6:5e:a2:12:b5:74:23:1c:f9:73:bb: 81:0b:cb:f2:4e:59:08:3b:fc:f1:d7:fa:71:bd:89:77:d4:19: 2a:12:bc:5a:df:e1:47:20:1d:28:a5:17:56:37:62:1a:db:4d: 96:74:45:09:a9:f5:12:44:e2:18:14:3c:3f:a1:af:75:3b:53: ee:c1:e2:8c:8d:c9:9e:6d:8c:e3:39:1c:49:6b:ac:22:7a:3c: 68:28:57:73:a2:6f:cd:59:18:8d:a8:c4:e0:da:c2:98:96:14: 43:6d:e0:ac:9c:c1:e2:9e:79:28:96:af:27:68:7d:2e:ca:68: 27:dc:10:f7:81:9e:a3:99:9f:99:29:b7:54:c3:a9:58:2f:a6: 5d:de:c0:04:c6:69:8e:be:a7:4f:06:73:e1:66:ad:37:2d:7c: 14:8c:8d:ab:46:5d:3b:1a:af:37:8a:59:52:73:49:05:cb:2d: c9:fd:36:58 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NTM1RjExMC8GA1UEBRMoM0QxNTM2M0ZCMEE2RjRBOEQxQThBNUM5OUZBM0I0RTU5 MzFGOEI3QzAeFw0yNTEyMDUwNDQ4MDBaFw0yNTEyMTIwNDQ4MDBaMBgxFjAUBgNV BAMTDTY5MzI2NDAwLThiMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnkA0so2QqRJMlF0v4MbPT1pwtCVN8l45tt3ENXNnEGsh3oixm/VSx263luMhS GtDHvwgwY53SdoOQNjl5MH4jJOOfPLmnezoSea9/YeWPNI41pyISvK6PIhyYnBa1 IpsDq5jUrUBrqETEiQn0i2Aavpyz55UZhc66jx8Y4xgRqZv2yq63xcNbylTG59ow oJVxYgROULvyf5mTlT0NHKcwS52ij30aIDCBNyYrACROLTnhxnl5fKEq6DYTAE5x VKT8vFXK4VlrtH2GyondRX19/y0e62Hy4nj2IUfX3LKNHyda1PRwUMPYlIHm7GXk QTCMNd1R7ocCDZDPf7BfnyEDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUb6Lzmf6g K2nJATlB7e2hebp2tP4wHwYDVR0jBBgwFoAUPRU2P7Cm9KjRqKXJn6O05ZMfi3ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1MzVGLzJFMjhDODVFMjc1 QTExRjA4RUZGNkI3NkM0RjlBRTAyL1BSVTJQN0NtOUtqUnFLWEpuNk8wNVpNZmkz dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFJVMlA3Q205S2pScUtYSm42TzA1Wk1maTN3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc1 MzVGLzJFMjhDODVFMjc1QTExRjA4RUZGNkI3NkM0RjlBRTAyL1BSVTJQN0NtOUtq UnFLWEpuNk8wNVpNZmkzdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGw4XXnvpw8jGzO0CHQeYvdN1YHoJSQDZFwSeKAcWCmTbZkfrhntqzau w8qF4Tf11mIig+US3ss03tbQO3rbx7Qse2EipeufWiLjqmx6tgHWXqIStXQjHPlz u4ELy/JOWQg7/PHX+nG9iXfUGSoSvFrf4UcgHSilF1Y3YhrbTZZ0RQmp9RJE4hgU PD+hr3U7U+7B4oyNyZ5tjOM5HElrrCJ6PGgoV3Oib81ZGI2oxODawpiWFENt4Kyc weKeeSiWrydofS7KaCfcEPeBnqOZn5kpt1TDqVgvpl3ewATGaY6+p08Gc+FmrTct fBSMjatGXTsarzeKWVJzSQXLLcn9Nlg= -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:36 2025 by rpki-client