This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
File: Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft (raw, json)
Hash identifier: KfuIab3D+MYksSsvNNryej4IDdyLEYgRE6Df3k9Q8ho=
Subject key identifier: CA:7D:75:A2:3A:1C:44:11:5F:08:A6:0E:DF:71:9E:EE:57:F0:3D:D4
Authority key identifier: 3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
Certificate issuer: /CN=A918AA54/serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
Certificate serial: 036A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
Manifest number: 0364
Signing time: Mon 29 Dec 2025 00:00:38 +0000
Manifest this update: Mon 29 Dec 2025 00:00:37 +0000
Manifest next update: Mon 05 Jan 2026 00:00:37 +0000
Files and hashes: 1: Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl (hash: a0cvTXWQzx5mPznCiiDfqpe4snTxlXM4EBzHA3Va4Jg=)
2: F7ACA074DC3F11EC8323B460C4F9AE02.roa (hash: +p5cj7LwT5hXMy0c3PlvgwDnOhrwUIuzknInRNhRtuo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl
rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Jan 2026 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 874 (0x36a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA54, serialNumber=3E67DBF782202893F1FB5AF7D6FC09D0018FDF06
Validity
Not Before: Dec 29 00:00:37 2025 GMT
Not After : Jan 5 00:00:37 2026 GMT
Subject: CN=6951c4a6-09a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2b:24:8f:e8:da:65:7c:b2:67:2e:52:16:7d:
a1:f4:58:45:63:c5:bf:2c:d1:ad:84:f0:e1:cd:aa:
2e:f2:06:1e:8d:4b:59:51:c7:7a:e1:99:76:0f:17:
c7:4a:37:b5:d7:a6:a8:dc:cc:ef:1b:81:33:56:7a:
58:7b:e4:f6:f8:00:2e:f4:14:3c:ed:a0:ae:aa:b1:
d0:6c:d1:88:f7:a6:a5:e1:be:74:a8:2a:bd:cf:03:
09:02:11:e7:5e:dd:73:e6:eb:52:de:16:d2:49:6e:
90:f3:f7:97:8f:ea:de:03:a3:6f:c3:b4:99:27:61:
c1:68:9d:db:38:17:ab:55:6c:c2:57:01:64:7f:be:
09:11:4b:39:08:71:04:68:45:09:20:98:ec:92:d7:
bd:15:d2:a9:b3:bf:22:91:6d:f2:da:e9:cf:bb:84:
a3:77:fb:27:5b:ed:3d:ee:00:62:d6:c5:03:3a:01:
d8:2e:90:c9:1a:80:68:2e:d9:63:4c:86:40:73:45:
72:ab:9d:f7:b7:6e:61:41:69:46:f9:c1:82:a0:0e:
54:cb:b5:f9:86:58:44:e5:06:60:d9:2b:14:5b:d8:
b8:a7:8e:14:35:79:60:61:56:46:5a:d8:df:72:89:
f5:30:8a:ee:d3:3f:06:71:df:e7:11:cd:3a:56:26:
fa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7D:75:A2:3A:1C:44:11:5F:08:A6:0E:DF:71:9E:EE:57:F0:3D:D4
X509v3 Authority Key Identifier:
keyid:3E:67:DB:F7:82:20:28:93:F1:FB:5A:F7:D6:FC:09:D0:01:8F:DF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pmfb94IgKJPx-1r31vwJ0AGP3wY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA54/D88CD9D6DC3811EC93910B68C4F9AE02/Pmfb94IgKJPx-1r31vwJ0AGP3wY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:3c:a5:41:87:6b:63:aa:56:12:2c:95:9f:39:1e:fa:75:05:
a8:07:52:33:15:45:72:35:97:9d:fd:e4:c5:22:cd:29:9d:9c:
c7:9c:d4:93:78:31:f6:47:70:91:ef:ff:95:cf:cd:f5:1a:9c:
c9:f8:10:8e:df:bb:14:f0:ba:26:c2:a2:9a:61:84:05:a6:ab:
3a:44:99:38:b0:7a:d0:41:6e:79:e9:88:9b:17:09:7a:67:75:
83:ab:61:a5:01:c9:b9:9d:aa:f4:95:6f:dc:72:60:bd:4f:28:
11:fb:86:c5:e5:6b:ab:60:4a:1b:20:1a:da:5a:d9:fb:a3:51:
32:1e:0e:e5:1b:b8:d1:26:65:32:05:2a:4a:11:5b:36:3a:57:
1e:0c:34:5f:f7:cb:58:7e:bd:46:d2:dd:d2:2f:cb:35:6b:18:
c1:30:83:b4:c8:78:1a:38:18:99:c6:02:48:74:4a:d0:d8:5b:
a6:3c:6a:31:c8:40:a2:97:f2:a2:57:15:21:bd:1a:9a:8d:4c:
7f:7e:0a:b4:fe:d2:05:88:74:f5:f3:a1:fe:0e:8e:05:77:86:
60:b3:0a:5d:35:8f:67:b4:b0:0e:f3:b3:ea:18:61:25:58:aa:
1c:20:3e:a2:a6:16:f2:ba:3f:1c:a0:83:02:ac:01:93:6e:df:
86:a1:e0:63
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEFBNTQxMTAvBgNVBAUTKDNFNjdEQkY3ODIyMDI4OTNGMUZCNUFGN0Q2RkMwOUQw
MDE4RkRGMDYwHhcNMjUxMjI5MDAwMDM3WhcNMjYwMTA1MDAwMDM3WjAYMRYwFAYD
VQQDDA02OTUxYzRhNi0wOWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjiskj+jaZXyyZy5SFn2h9FhFY8W/LNGthPDhzaou8gYejUtZUcd64Zl2DxfH
Sje116ao3MzvG4EzVnpYe+T2+AAu9BQ87aCuqrHQbNGI96al4b50qCq9zwMJAhHn
Xt1z5utS3hbSSW6Q8/eXj+reA6Nvw7SZJ2HBaJ3bOBerVWzCVwFkf74JEUs5CHEE
aEUJIJjskte9FdKps78ikW3y2unPu4Sjd/snW+097gBi1sUDOgHYLpDJGoBoLtlj
TIZAc0Vyq533t25hQWlG+cGCoA5Uy7X5hlhE5QZg2SsUW9i4p44UNXlgYVZGWtjf
con1MIru0z8Gcd/nEc06Vib63wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMp9daI6
HEQRXwimDt9xnu5X8D3UMB8GA1UdIwQYMBaAFD5n2/eCICiT8fta99b8CdABj98G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE1NC9EODhDRDlENkRD
MzgxMUVDOTM5MTBCNjhDNEY5QUUwMi9QbWZiOTRJZ0tKUHgtMXIzMXZ3SjBBR1Az
d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BtZmI5NElnS0pQeC0xcjMxdndKMEFHUDN3WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QUE1NC9EODhDRDlENkRDMzgxMUVDOTM5MTBCNjhDNEY5QUUwMi9QbWZiOTRJZ0tK
UHgtMXIzMXZ3SjBBR1Azd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC9PKVBh2tjqlYSLJWfOR76dQWoB1IzFUVyNZed/eTFIs0pnZzHnNST
eDH2R3CR7/+Vz831GpzJ+BCO37sU8LomwqKaYYQFpqs6RJk4sHrQQW556YibFwl6
Z3WDq2GlAcm5nar0lW/ccmC9TygR+4bF5WurYEobIBraWtn7o1EyHg7lG7jRJmUy
BSpKEVs2OlceDDRf98tYfr1G0t3SL8s1axjBMIO0yHgaOBiZxgJIdErQ2FumPGox
yECil/KiVxUhvRqajUx/fgq0/tIFiHT186H+Do4Fd4ZgswpdNY9ntLAO87PqGGEl
WKocID6iphbyuj8coIMCrAGTbt+GoeBj
-----END CERTIFICATE-----
Generated at Mon Dec 29 14:39:51 2025 by rpki-client