This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
File: pgmpTmohAbr5XIwvVc7EF5Jb788.mft (raw, json)
Hash identifier: k1RcZ29Ra+RvS40o/eBQmjNYTI/GsabkJxRpS9uNUSA=
Subject key identifier: 9D:97:9B:64:AA:89:EB:21:BA:16:DC:0C:61:F9:1F:E5:57:13:01:D3
Authority key identifier: A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF
Certificate issuer: /CN=A9122010/serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
Certificate serial: 0158
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
Manifest number: 0154
Signing time: Thu 25 Dec 2025 03:15:39 +0000
Manifest this update: Thu 25 Dec 2025 03:15:39 +0000
Manifest next update: Thu 01 Jan 2026 03:15:39 +0000
Files and hashes: 1: pgmpTmohAbr5XIwvVc7EF5Jb788.crl (hash: 3cfKzDJFZwZ3tMFaUdQeFlHGoBOSdnY2ucuk2AXCtpw=)
2: EF260118D54211EEA18A7234C4F9AE02.roa (hash: xjhn9qUtE7xRbdf4fFZHDUa2ZArgvxrc59opJoY9If0=)
3: 2FA91770D61A11EE9BDDD627C4F9AE02.roa (hash: Y2k2zpzO5L2UX1/syfcTHwfwkADI2HQTu1qn6JdDuuE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl
rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Jan 2026 03:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 344 (0x158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122010, serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
Validity
Not Before: Dec 25 03:15:39 2025 GMT
Not After : Jan 1 03:15:39 2026 GMT
Subject: CN=694cac5b-3d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:48:1b:c0:fd:8e:7e:c7:13:2a:e7:e0:45:
b3:24:fc:a6:ec:dc:d6:fe:a5:4a:e5:9b:f8:18:a9:
f6:d3:83:80:09:cb:a5:3a:0c:73:68:58:06:e2:08:
80:5a:65:72:98:2d:80:6a:ca:59:bd:7d:ca:87:f9:
b7:56:ac:9a:1b:a0:ce:ed:47:c1:1b:d2:d6:84:ee:
64:00:bd:b3:82:60:bd:12:1b:9f:f2:2a:27:4f:6b:
d2:76:b5:ad:bb:fa:11:f1:8e:b3:a2:37:7e:0b:dd:
18:f2:5d:40:1c:ef:1b:c1:f3:11:d8:5b:ab:4c:3a:
3e:5c:56:d1:b0:4b:6d:76:9a:22:a4:1b:13:0a:57:
ab:57:0e:97:c4:4c:fd:9d:1c:f8:9a:ce:bc:ef:15:
73:8c:58:0c:9d:48:25:47:ce:eb:ba:97:b2:46:e4:
e9:7e:fb:a1:4c:e5:ff:6a:9f:bf:ea:af:f1:21:a7:
9f:ff:a6:1d:78:3c:bf:00:5f:bf:0e:be:9c:a4:7e:
b2:45:ee:c9:be:72:c3:57:b1:d3:1b:85:ed:21:11:
3a:e3:8d:0b:b4:5c:7e:f0:63:12:e3:a2:89:b1:50:
c2:33:6d:50:1f:d7:21:58:81:3c:f5:25:94:5b:15:
02:ba:da:ee:f4:1a:97:24:a3:17:64:ed:25:8e:ce:
fc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:97:9B:64:AA:89:EB:21:BA:16:DC:0C:61:F9:1F:E5:57:13:01:D3
X509v3 Authority Key Identifier:
keyid:A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:6f:20:3f:7e:bd:f5:2d:06:88:92:c1:c9:e9:f9:5b:43:8d:
90:2e:db:65:80:e1:de:03:99:ab:4a:e2:ed:94:61:3c:b4:ff:
11:ee:db:36:d7:26:38:ab:12:8b:8d:72:bd:4b:d4:16:29:57:
b9:8f:99:c7:f9:96:9f:e7:52:8a:d9:b6:f2:72:68:b5:f8:60:
75:b6:16:44:6e:26:14:25:90:d3:84:dd:42:f1:5b:22:82:60:
8c:0d:8b:36:3c:7f:22:7a:b1:32:81:ff:4a:83:f3:5a:1a:a6:
e5:a0:ea:55:30:8c:d5:65:cb:23:f3:f1:69:e5:0e:fd:dd:d0:
46:25:e2:01:e4:6c:d2:18:cb:ce:ad:ab:87:01:31:5b:66:06:
51:0d:b0:c3:3b:2e:cb:8b:0f:32:1d:05:ff:b5:c1:a8:1a:9d:
54:5c:31:20:66:c5:bd:a1:d7:9c:55:54:8a:72:4e:4b:7d:62:
4c:3b:c5:d3:34:7d:26:46:f5:dd:19:60:69:ae:32:8b:77:ad:
21:36:dd:95:cf:5c:96:67:73:d3:fe:c1:0e:24:e6:68:d0:5d:
f1:1f:99:34:86:06:c1:7f:e2:60:8f:c5:ed:92:fc:a9:c1:64:
37:43:5d:0d:a5:7b:c8:48:76:e7:97:72:d5:9f:b6:9b:55:e6:
36:a0:c1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 09:35:54 2025 by rpki-client