This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft File: pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft (raw, json) Hash identifier: T59C7devfEFEn7byrdaTjaRMJ8Jgcb2C8s3ZCAgJh3w= Subject key identifier: C6:52:AE:C1:4D:B5:15:8B:81:58:7D:A7:59:86:50:D4:43:61:50:93 Authority key identifier: A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66 Certificate issuer: /CN=A91E3B25/serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66 Certificate serial: 172E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft Manifest number: 2094 Signing time: Wed 24 Dec 2025 16:24:29 +0000 Manifest this update: Wed 24 Dec 2025 16:24:29 +0000 Manifest next update: Wed 31 Dec 2025 16:24:29 +0000 Files and hashes: 1: pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl (hash: A1nb//g27+O/AkuxHg1MbZldYDpkfNoNLfyhjHgkGzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 16:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5934 (0x172e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25, serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66 Validity Not Before: Dec 24 16:24:29 2025 GMT Not After : Dec 31 16:24:29 2025 GMT Subject: CN=694c13bd-625c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c5:41:15:9c:13:a3:fd:8d:60:58:fa:4c:1c: d0:91:66:0e:d0:46:87:42:71:d4:81:67:80:39:11: 27:0d:ee:89:8e:62:b2:72:5e:cc:d7:2e:b4:42:75: de:9f:26:4a:1d:7e:40:2b:11:14:be:f6:e0:25:2c: e7:78:41:88:ef:92:f9:61:d7:10:b7:6d:fd:e5:a9: d5:e9:70:c4:72:14:d0:cb:9a:c5:0e:d3:63:12:f5: e7:a6:c2:ef:21:4d:9e:42:d8:37:e2:0b:84:49:7e: f0:3c:24:43:6c:cb:76:c7:cf:d8:17:c1:6c:98:a2: 9f:68:95:71:75:af:dd:8c:ab:79:ca:7a:d9:94:68: 92:8c:8c:6b:6e:30:4f:33:85:a5:79:7e:7d:4f:8e: 36:c4:3f:f9:b5:fb:21:32:e8:5d:9f:7e:b4:a1:f2: 24:1a:ec:76:7a:dd:b7:70:da:22:06:87:ca:d7:25: 1f:fd:c8:1c:44:77:ff:9e:be:66:fd:9c:ee:ca:d9: fb:6a:b2:06:9d:80:94:00:66:fc:fd:70:86:0c:2d: 12:e1:df:f7:c5:de:f4:63:5f:44:03:ce:0c:d5:df: 2d:a7:c3:53:e9:8b:79:25:f8:29:9d:e8:22:86:c6: 07:40:82:d6:02:41:83:f6:21:7e:d9:f1:cf:76:d8: 63:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:52:AE:C1:4D:B5:15:8B:81:58:7D:A7:59:86:50:D4:43:61:50:93 X509v3 Authority Key Identifier: keyid:A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:76:4f:9c:2f:90:71:cb:33:66:10:c3:1e:4c:c8:97:ed:d9: d4:b4:8c:ce:aa:56:43:f8:90:a9:67:84:4e:dc:7d:83:fb:1c: 62:72:3d:db:9b:15:8a:11:b7:75:8a:c0:64:1d:7d:9a:ab:7b: 16:4a:d9:19:69:00:d8:56:0b:0a:2d:31:75:24:30:a4:f0:05: 25:4e:51:35:cf:4e:30:fd:9e:6e:e0:e1:fe:81:1f:01:33:5a: 51:4e:8e:3c:f3:1d:94:fa:f8:08:75:74:a1:7b:4a:4f:67:ea: 49:7f:c3:ba:a9:a9:c8:e6:ef:68:de:c4:3c:50:e3:d2:37:17: d2:7a:42:c6:3b:65:7a:f1:4a:b6:09:84:4e:85:3d:2f:8c:a1: e0:97:df:a5:e4:f2:db:1c:f5:47:df:46:36:31:96:d4:18:c4: 63:56:78:61:f0:3f:24:73:f7:26:6f:3a:08:bd:a0:14:fd:c7: 14:d5:86:35:97:48:37:f8:4c:c5:0f:59:f0:d7:83:e8:1b:00: 3e:3d:66:b1:4f:cf:60:97:97:b9:15:b8:53:cc:ba:fe:05:e0: ca:63:23:7f:b3:21:88:5f:a7:6e:f8:d7:8c:93:1d:df:a7:1a: f5:b7:fc:52:4b:e9:61:e6:a8:42:1a:71:ee:1b:6b:03:05:87: 6e:84:1b:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEE2MEM5ODIxRjUzMEIwRDUzQTY3QTk4Qjc2NzE5NkM0 MEEyRDVBNjYwHhcNMjUxMjI0MTYyNDI5WhcNMjUxMjMxMTYyNDI5WjAYMRYwFAYD VQQDDA02OTRjMTNiZC02MjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8VBFZwTo/2NYFj6TBzQkWYO0EaHQnHUgWeAOREnDe6JjmKycl7M1y60QnXe nyZKHX5AKxEUvvbgJSzneEGI75L5YdcQt2395anV6XDEchTQy5rFDtNjEvXnpsLv IU2eQtg34guESX7wPCRDbMt2x8/YF8FsmKKfaJVxda/djKt5ynrZlGiSjIxrbjBP M4WleX59T442xD/5tfshMuhdn360ofIkGux2et23cNoiBofK1yUf/cgcRHf/nr5m /Zzuytn7arIGnYCUAGb8/XCGDC0S4d/3xd70Y19EA84M1d8tp8NT6Yt5Jfgpnegi hsYHQILWAkGD9iF+2fHPdthjxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZSrsFN tRWLgVh9p1mGUNRDYVCTMB8GA1UdIwQYMBaAFKYMmCH1MLDVOmepi3ZxlsQKLVpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi9wZ3lZSWZVd3NOVTZaNm1MZG5HV3hBb3RX bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BneVlJZlV3c05VNlo2bUxkbkdXeEFvdFdtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi9wZ3lZSWZVd3NO VTZaNm1MZG5HV3hBb3RXbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApdk+cL5BxyzNmEMMeTMiX7dnUtIzOqlZD+JCpZ4RO3H2D+xxicj3b mxWKEbd1isBkHX2aq3sWStkZaQDYVgsKLTF1JDCk8AUlTlE1z04w/Z5u4OH+gR8B M1pRTo488x2U+vgIdXShe0pPZ+pJf8O6qanI5u9o3sQ8UOPSNxfSekLGO2V68Uq2 CYROhT0vjKHgl9+l5PLbHPVH30Y2MZbUGMRjVnhh8D8kc/cmbzoIvaAU/ccU1YY1 l0g3+EzFD1nw14PoGwA+PWaxT89gl5e5FbhTzLr+BeDKYyN/syGIX6du+NeMkx3f pxr1t/xSS+lh5qhCGnHuG2sDBYduhBt6 -----END CERTIFICATE-----Generated at Thu Dec 25 02:46:13 2025 by rpki-client