This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft File: PNcVUq-qATj5pk4BYO7wYJYGUyM.mft (raw, json) Hash identifier: YsPRMn3x3WTm96vxVNaG+kiFWPfIgo6vrrg8ZbtYPnM= Subject key identifier: C9:A6:23:59:D3:38:63:FE:BB:5C:9D:05:BD:F1:C7:FC:A1:C7:3E:E1 Authority key identifier: 3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23 Certificate issuer: /CN=A9196CE1/serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323 Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft Manifest number: 0183 Signing time: Fri 05 Dec 2025 01:51:07 +0000 Manifest this update: Fri 05 Dec 2025 01:51:07 +0000 Manifest next update: Fri 12 Dec 2025 01:51:07 +0000 Files and hashes: 1: PNcVUq-qATj5pk4BYO7wYJYGUyM.crl (hash: aF2jhQJYrweswFz+dL5jQ7jK4Cx8FbXFg78SzKRtKOo=) 2: 4F7CFB9A82B711EE997EB92AC4F9AE02.roa (hash: hgljKjisBGNnslvOx+Ue9/AjKn+RJmc2MY4DHEOzs28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:51:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196CE1, serialNumber=3CD71552AFAA0138F9A64E0160EEF06096065323 Validity Not Before: Dec 5 01:51:07 2025 GMT Not After : Dec 12 01:51:07 2025 GMT Subject: CN=69323a8b-2bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9a:34:44:13:b8:79:b3:1c:3e:ad:df:04:06: f2:6a:cc:96:e3:05:be:6e:fb:78:aa:7b:70:03:a3: fc:3c:3b:96:80:1d:52:1e:92:5d:35:61:35:5b:43: 00:f0:3f:76:74:fd:91:11:c4:40:fa:32:00:02:94: e7:a0:cf:ce:5d:17:67:09:33:5b:02:7f:0e:74:8c: 1d:ef:53:e6:da:03:8a:bb:a0:fc:8a:a9:6c:41:3e: 43:d7:0a:ca:a1:46:0d:83:34:3e:52:b6:96:9a:c0: 4c:d9:f3:77:01:b4:ca:45:31:86:6b:f4:92:20:b7: 27:e1:aa:20:2a:e2:f5:9a:f3:4d:8d:1a:7a:17:92: a1:a2:24:5f:bc:10:ee:99:fa:61:04:cd:38:1b:b6: aa:27:2d:4b:73:a2:2f:a4:92:c9:c1:34:03:bb:46: 76:96:62:2f:10:48:75:8a:76:19:03:70:ad:3a:ce: 29:c4:62:27:c7:6f:59:c8:be:f4:23:d1:ac:c9:b1: ab:b4:9c:b7:b9:17:58:40:36:21:96:8c:cf:77:af: 42:13:b2:c8:bb:6a:dc:3f:a7:cc:b6:2a:f2:3f:72: 1e:ce:85:7a:fc:01:9f:1e:6c:a6:79:56:01:5b:10: 66:95:d9:c1:8d:c5:40:a8:4a:64:fe:86:1d:70:23: 77:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A6:23:59:D3:38:63:FE:BB:5C:9D:05:BD:F1:C7:FC:A1:C7:3E:E1 X509v3 Authority Key Identifier: keyid:3C:D7:15:52:AF:AA:01:38:F9:A6:4E:01:60:EE:F0:60:96:06:53:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNcVUq-qATj5pk4BYO7wYJYGUyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196CE1/E881E8EC82B611EE9BFC061DC4F9AE02/PNcVUq-qATj5pk4BYO7wYJYGUyM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:88:41:96:e1:3b:db:79:8d:17:fc:bb:f1:1e:50:03:7f:e7: 05:e0:29:0c:9a:f3:ba:9d:2d:19:19:3b:a6:00:11:49:fb:6c: 76:e7:f6:3f:68:c9:78:f4:8f:12:16:84:17:e7:f7:a3:cd:6a: b9:03:12:47:27:95:1c:cf:f4:9b:c0:11:fe:93:ec:d2:f4:79: 67:a8:d3:d4:45:d4:ad:a5:90:b9:a3:f7:ed:0a:13:ce:1e:02: ec:6a:06:74:48:dc:55:da:cd:72:c4:ad:55:25:78:13:53:a2: e9:fc:36:48:c3:a2:ec:93:cc:b2:ce:f6:a7:3d:39:f1:0e:f9: ce:a8:af:fa:ce:22:18:6b:8a:54:61:d2:50:d4:79:5d:fd:f6: 71:d3:26:bf:c4:8a:a0:0d:f1:a5:d6:b9:89:56:f2:ae:03:f6: 9c:45:91:98:c4:e2:eb:3a:50:b1:3e:df:97:25:f3:b8:7d:fa: 49:3f:a6:43:f1:91:a8:aa:26:ae:b4:b7:6a:95:b2:5b:ca:1c: e1:30:78:2c:0b:85:76:61:6b:b5:dd:14:9a:80:b1:c2:09:38: 82:ce:00:57:03:8b:56:30:99:c2:6d:fa:c1:d0:9f:49:75:2a: 77:4e:65:3b:d0:08:7b:ec:a2:9c:8f:05:df:2d:ae:2e:9c:18: f2:a1:2a:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZDRTExMTAvBgNVBAUTKDNDRDcxNTUyQUZBQTAxMzhGOUE2NEUwMTYwRUVGMDYw OTYwNjUzMjMwHhcNMjUxMjA1MDE1MTA3WhcNMjUxMjEyMDE1MTA3WjAYMRYwFAYD VQQDEw02OTMyM2E4Yi0yYmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5o0RBO4ebMcPq3fBAbyasyW4wW+bvt4qntwA6P8PDuWgB1SHpJdNWE1W0MA 8D92dP2REcRA+jIAApTnoM/OXRdnCTNbAn8OdIwd71Pm2gOKu6D8iqlsQT5D1wrK oUYNgzQ+UraWmsBM2fN3AbTKRTGGa/SSILcn4aogKuL1mvNNjRp6F5KhoiRfvBDu mfphBM04G7aqJy1Lc6IvpJLJwTQDu0Z2lmIvEEh1inYZA3CtOs4pxGInx29ZyL70 I9GsybGrtJy3uRdYQDYhlozPd69CE7LIu2rcP6fMtiryP3IezoV6/AGfHmymeVYB WxBmldnBjcVAqEpk/oYdcCN3+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmmI1nT OGP+u1ydBb3xx/yhxz7hMB8GA1UdIwQYMBaAFDzXFVKvqgE4+aZOAWDu8GCWBlMj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkNFMS9FODgxRThFQzgy QjYxMUVFOUJGQzA2MURDNEY5QUUwMi9QTmNWVXEtcUFUajVwazRCWU83d1lKWUdV eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BOY1ZVcS1xQVRqNXBrNEJZTzd3WUpZR1V5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkNFMS9FODgxRThFQzgyQjYxMUVFOUJGQzA2MURDNEY5QUUwMi9QTmNWVXEtcUFU ajVwazRCWU83d1lKWUdVeU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDiEGW4TvbeY0X/LvxHlADf+cF4CkMmvO6nS0ZGTumABFJ+2x25/Y/ aMl49I8SFoQX5/ejzWq5AxJHJ5Ucz/SbwBH+k+zS9HlnqNPURdStpZC5o/ftChPO HgLsagZ0SNxV2s1yxK1VJXgTU6Lp/DZIw6Lsk8yyzvanPTnxDvnOqK/6ziIYa4pU YdJQ1Hld/fZx0ya/xIqgDfGl1rmJVvKuA/acRZGYxOLrOlCxPt+XJfO4ffpJP6ZD 8ZGoqiautLdqlbJbyhzhMHgsC4V2YWu13RSagLHCCTiCzgBXA4tWMJnCbfrB0J9J dSp3TmU70Ah77KKcjwXfLa4unBjyoSqp -----END CERTIFICATE-----Generated at Sat Dec 6 19:38:24 2025 by rpki-client