This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft File: PnOyvhMDe-dEOR06iZzdICuC920.mft (raw, json) Hash identifier: kPnr5Pw9UU3Mgob8+gWc2/xGnEuMeW+VhecztOgl5GA= Subject key identifier: 4F:A0:B6:F0:AB:5B:08:8E:0D:74:B0:4B:C3:61:80:25:5A:BD:AD:45 Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D Certificate issuer: /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Certificate serial: 0536 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft Manifest number: 051E Signing time: Thu 18 Dec 2025 22:58:47 +0000 Manifest this update: Thu 18 Dec 2025 22:58:46 +0000 Manifest next update: Thu 25 Dec 2025 22:58:46 +0000 Files and hashes: 1: PnOyvhMDe-dEOR06iZzdICuC920.crl (hash: hgvPNq367WE8TPJ9WeAkeeXx/rhj5ORrcLumEKKrNl4=) 2: 9C581C28B07511EF9D153813C4F9AE02.roa (hash: USbezzx4u+HcyowHtZXvIGxC9833a2cIPADsDabhgHE=) 3: FE76F7D8EC4A11EFA7845862C4F9AE02.roa (hash: ffe9csoIa+aK1Zbhj8RuxgnC6GGLQDbgoCQkHm0MFNA=) 4: EFFA034837D111EC9337B812C4F9AE02.roa (hash: eOzDGtd2FPhdJliCdckHnz758nq276hv9KBB5yuJrEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1334 (0x536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Validity Not Before: Dec 18 22:58:46 2025 GMT Not After : Dec 25 22:58:46 2025 GMT Subject: CN=69448727-c481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9d:a9:ab:32:22:98:36:ba:b3:dc:8f:3c:c6: f7:b3:0d:6d:67:51:58:d1:f5:77:15:5e:aa:6e:f0: 96:b1:82:a4:ba:8b:6b:e2:4c:ec:6b:17:31:8b:6d: aa:e8:95:a7:c5:12:5e:e9:1a:59:c0:ef:84:86:3d: 17:a0:06:9a:43:06:2f:21:e1:f0:a5:06:bc:be:24: 50:a9:fb:03:fa:d2:80:54:49:56:76:37:49:31:a4: f6:2e:56:18:81:72:7d:49:bc:5d:f6:58:8e:d1:d9: f7:74:bb:2a:f1:eb:f1:cf:a0:bd:d6:dd:31:c4:df: 3c:97:1f:b9:ac:51:3f:fc:e9:e2:aa:a4:9c:f3:00: 81:3c:04:74:97:d3:65:8f:08:b9:3b:cd:9a:eb:c1: 27:d2:bc:cd:c9:16:a6:42:84:88:09:a5:57:82:70: f4:53:d8:ba:b3:f3:02:a1:2e:42:6f:4a:29:93:b7: 05:73:81:03:7d:b6:39:19:16:3e:28:92:d3:39:4a: b7:b3:8f:df:72:03:86:22:6c:c7:70:9b:be:f8:7c: 50:d3:d6:85:56:3d:00:f1:71:d8:f4:6e:f8:be:95: 3c:10:20:52:ab:40:bb:9d:25:c5:54:bb:69:0c:63: 78:b7:84:07:a0:f2:ed:f7:e9:fc:d0:a8:4f:6c:fb: 80:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A0:B6:F0:AB:5B:08:8E:0D:74:B0:4B:C3:61:80:25:5A:BD:AD:45 X509v3 Authority Key Identifier: keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:4b:12:1c:5b:1b:5b:a4:47:00:95:e9:59:15:b7:83:bf:db: 3e:d2:cb:65:cf:24:45:43:f2:1d:a3:5c:d0:da:23:57:c0:34: ba:4a:8e:ea:f8:e2:35:59:92:7f:e9:4c:d6:ca:d7:eb:43:1f: 49:0c:f8:f0:03:6d:36:61:ed:8b:ad:a8:a5:85:df:f5:4d:41: b7:95:4b:31:60:15:0c:48:03:7a:91:6a:5e:f5:3a:0e:8b:f6: 19:e0:27:56:a4:59:a2:27:99:9d:f0:de:18:92:66:18:8c:e2: 10:d1:ca:6a:1e:c3:e8:2d:76:50:45:d5:a2:b3:5d:0e:9f:2b: c0:35:5b:60:02:c7:62:7f:2b:b1:e6:6f:a3:ff:b7:55:40:c2: b0:a1:69:64:f5:48:bd:38:72:be:3b:87:90:0b:14:39:7a:28: b0:49:f8:6d:b5:59:d9:36:2f:27:55:b5:15:eb:6b:62:fa:0e: 19:d4:57:b0:91:43:59:b6:02:79:93:f2:fc:ec:7b:fb:62:20: e0:2f:c0:b5:f3:1f:ad:bd:32:cb:3e:ba:18:9a:6b:72:c7:36: bd:94:c0:cb:64:4f:d4:5f:bf:c6:bc:a8:84:b2:1b:5f:ba:64: d7:34:a7:90:bc:5e:45:93:70:af:82:da:3c:7e:70:8f:f2:41: 27:49:7f:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVEMEMxMTAvBgNVBAUTKDNFNzNCMkJFMTMwMzdCRTc0NDM5MUQzQTg5OUNERDIw MkI4MkY3NkQwHhcNMjUxMjE4MjI1ODQ2WhcNMjUxMjI1MjI1ODQ2WjAYMRYwFAYD VQQDDA02OTQ0ODcyNy1jNDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm52pqzIimDa6s9yPPMb3sw1tZ1FY0fV3FV6qbvCWsYKkuotr4kzsaxcxi22q 6JWnxRJe6RpZwO+Ehj0XoAaaQwYvIeHwpQa8viRQqfsD+tKAVElWdjdJMaT2LlYY gXJ9Sbxd9liO0dn3dLsq8evxz6C91t0xxN88lx+5rFE//OniqqSc8wCBPAR0l9Nl jwi5O82a68En0rzNyRamQoSICaVXgnD0U9i6s/MCoS5Cb0opk7cFc4EDfbY5GRY+ KJLTOUq3s4/fcgOGImzHcJu++HxQ09aFVj0A8XHY9G74vpU8ECBSq0C7nSXFVLtp DGN4t4QHoPLt9+n80KhPbPuAzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+gtvCr WwiODXSwS8NhgCVava1FMB8GA1UdIwQYMBaAFD5zsr4TA3vnRDkdOomc3SArgvdt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQwQy84OTFCNEVDQTMy MzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUtZEVPUjA2aVp6ZElDdUM5 MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BuT3l2aE1EZS1kRU9SMDZpWnpkSUN1QzkyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQwQy84OTFCNEVDQTMyMzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUt ZEVPUjA2aVp6ZElDdUM5MjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbSxIcWxtbpEcAlelZFbeDv9s+0stlzyRFQ/Ido1zQ2iNXwDS6So7q +OI1WZJ/6UzWytfrQx9JDPjwA202Ye2Lrailhd/1TUG3lUsxYBUMSAN6kWpe9ToO i/YZ4CdWpFmiJ5md8N4YkmYYjOIQ0cpqHsPoLXZQRdWis10OnyvANVtgAsdifyux 5m+j/7dVQMKwoWlk9Ui9OHK+O4eQCxQ5eiiwSfhttVnZNi8nVbUV62ti+g4Z1Few kUNZtgJ5k/L87Hv7YiDgL8C18x+tvTLLProYmmtyxza9lMDLZE/UX7/GvKiEshtf umTXNKeQvF5Fk3Cvgto8fnCP8kEnSX/S -----END CERTIFICATE-----Generated at Fri Dec 19 19:10:17 2025 by rpki-client