This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft File: Pgw5tVhKz65BgIE4j08KlNbajgY.mft (raw, json) Hash identifier: u8YONSdRPhHrM6Qy+qUggDu9ESOn9iUNgEz92kH26no= Subject key identifier: 54:67:D3:19:DA:17:90:DF:C0:71:14:53:10:4C:9C:61:92:66:1F:A7 Authority key identifier: 3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06 Certificate issuer: /CN=A91BD7A3/serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft Manifest number: 10 Signing time: Fri 19 Dec 2025 06:50:52 +0000 Manifest this update: Fri 19 Dec 2025 06:50:52 +0000 Manifest next update: Fri 26 Dec 2025 06:50:52 +0000 Files and hashes: 1: Pgw5tVhKz65BgIE4j08KlNbajgY.crl (hash: yPA0KU/+UQUMl9FKW0+HvBXdT3llV5CGNZYZjoEP4dI=) 2: 132F5C52C52511F0B4A6F21BC4F9AE02.roa (hash: /Y2EdOVMEdELF6kWc09Ad/zaSKbdqBOuMsA2OetL/fM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD7A3, serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06 Validity Not Before: Dec 19 06:50:52 2025 GMT Not After : Dec 26 06:50:52 2025 GMT Subject: CN=6944f5cc-83d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:17:42:86:50:32:cf:28:04:5b:8b:38:bb:7b: 44:06:6d:bd:12:a2:c3:03:8e:26:ec:e5:25:58:dd: 46:8b:db:19:76:9f:24:98:c3:9d:da:aa:0d:77:02: 87:91:0c:dd:66:f8:0b:4b:93:d1:62:29:a8:45:b6: 3e:94:30:59:54:f0:33:fa:20:17:14:20:89:79:a2: ea:d8:eb:41:4f:7f:a1:f1:21:a9:a8:c8:8d:e1:46: 13:d3:06:0b:fb:65:32:49:d1:8e:83:41:c8:fe:9d: 46:0b:6a:d1:bf:7d:c5:6a:d8:6f:13:7c:00:a9:b7: 50:fd:ba:73:37:0b:5f:f9:0b:ff:ea:03:ab:7f:dd: c2:29:a6:0b:37:9d:08:6a:44:36:ad:6d:b4:34:f1: e5:e0:dc:b7:bc:d6:22:b3:a8:c3:6d:f4:bf:a5:b2: 1f:f2:39:f5:7b:d2:d1:47:bd:e7:3b:ea:8a:c0:6c: 18:d3:63:46:47:c0:ba:49:a0:5c:6f:38:90:22:26: 64:2f:03:b4:2e:00:e2:aa:e3:4d:14:4c:4b:2e:09: 28:75:b6:3c:54:0b:8e:76:8e:7e:35:77:03:b0:40: 2a:63:46:cd:57:f6:b9:2d:b6:09:cf:19:f5:fc:7c: cf:bc:02:2b:50:d3:ca:ee:d4:27:ed:8a:e4:eb:ce: 4e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:67:D3:19:DA:17:90:DF:C0:71:14:53:10:4C:9C:61:92:66:1F:A7 X509v3 Authority Key Identifier: keyid:3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c4:1c:21:01:1e:8d:7f:d7:29:81:ce:3a:6d:a7:f8:2e:d6: 83:12:2b:cd:1f:58:6e:6e:36:b1:ca:ac:e6:f4:3e:b2:0e:a2: 27:61:8f:b0:66:83:a5:73:69:03:f4:0a:82:52:fc:a6:d0:f3: 04:00:20:4d:ea:38:7d:ed:73:da:6c:2f:fb:29:6d:62:46:ed: 0e:93:09:38:1e:18:8a:1e:9d:de:45:d0:c4:c8:8f:a9:3e:41: 0d:28:7c:b4:26:7b:7d:21:96:d9:5a:6a:a3:3c:8c:6b:b7:84: 04:63:b9:06:21:94:5e:8b:05:93:53:ca:f1:6c:f6:4d:8b:1f: cd:3c:f0:ab:8e:a4:bb:8e:9e:f8:49:f1:30:5e:57:a2:d6:2c: 09:0f:e6:2c:8e:5d:5b:a4:4a:27:25:c9:31:0b:b1:a0:06:f8: da:74:02:f7:78:a5:1e:a3:f0:38:69:04:0c:a5:c2:b7:ae:3f: ce:5e:c6:48:98:b5:cf:fb:72:8d:dc:93:2c:69:48:d5:03:c1: 70:ef:a6:0f:f3:e0:39:8e:01:e8:8b:70:a8:a7:32:74:b2:4a: fc:8f:47:78:14:fe:c1:cf:b0:50:d5:4d:40:b9:13:61:ff:c2: 82:ce:ef:bd:86:00:a1:43:1e:e9:2f:5a:38:6a:7c:32:e4:75: d8:b0:9b:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RDdBMzExMC8GA1UEBRMoM0UwQzM5QjU1ODRBQ0ZBRTQxODA4MTM4OEY0RjBBOTRE NkRBOEUwNjAeFw0yNTEyMTkwNjUwNTJaFw0yNTEyMjYwNjUwNTJaMBgxFjAUBgNV BAMMDTY5NDRmNWNjLTgzZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkF0KGUDLPKARbizi7e0QGbb0SosMDjibs5SVY3UaL2xl2nySYw53aqg13AoeR DN1m+AtLk9FiKahFtj6UMFlU8DP6IBcUIIl5ourY60FPf6HxIamoyI3hRhPTBgv7 ZTJJ0Y6DQcj+nUYLatG/fcVq2G8TfACpt1D9unM3C1/5C//qA6t/3cIppgs3nQhq RDatbbQ08eXg3Le81iKzqMNt9L+lsh/yOfV70tFHvec76orAbBjTY0ZHwLpJoFxv OJAiJmQvA7QuAOKq400UTEsuCSh1tjxUC452jn41dwOwQCpjRs1X9rkttgnPGfX8 fM+8AitQ08ru1CftiuTrzk6/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVGfTGdoX kN/AcRRTEEycYZJmH6cwHwYDVR0jBBgwFoAUPgw5tVhKz65BgIE4j08KlNbajgYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEN0EzLzhGMDYwMjVBQzUy NDExRjBBMkE0REQxQUM0RjlBRTAyL1BndzV0VmhLejY1QmdJRTRqMDhLbE5iYWpn WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUGd3NXRWaEt6NjVCZ0lFNGowOEtsTmJhamdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE N0EzLzhGMDYwMjVBQzUyNDExRjBBMkE0REQxQUM0RjlBRTAyL1BndzV0VmhLejY1 QmdJRTRqMDhLbE5iYWpnWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD7EHCEBHo1/1ymBzjptp/gu1oMSK80fWG5uNrHKrOb0PrIOoidhj7Bm g6VzaQP0CoJS/KbQ8wQAIE3qOH3tc9psL/spbWJG7Q6TCTgeGIoend5F0MTIj6k+ QQ0ofLQme30hltlaaqM8jGu3hARjuQYhlF6LBZNTyvFs9k2LH8088KuOpLuOnvhJ 8TBeV6LWLAkP5iyOXVukSiclyTELsaAG+Np0Avd4pR6j8DhpBAylwreuP85exkiY tc/7co3ckyxpSNUDwXDvpg/z4DmOAeiLcKinMnSySvyPR3gU/sHPsFDVTUC5E2H/ woLO772GAKFDHukvWjhqfDLkddiwmz0= -----END CERTIFICATE-----Generated at Fri Dec 19 17:41:53 2025 by rpki-client