This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft File: PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft (raw, json) Hash identifier: PvRCbFdqnfoSJIBNF7KP2iHYwxDbuUYGWMmykLpHw/Q= Subject key identifier: 1A:61:FC:4D:47:6C:04:05:FB:91:C7:B9:5D:0A:ED:DE:57:02:23:B8 Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft Manifest number: 01AC Signing time: Sun 21 Dec 2025 02:54:18 +0000 Manifest this update: Sun 21 Dec 2025 02:54:18 +0000 Manifest next update: Sun 28 Dec 2025 02:54:18 +0000 Files and hashes: 1: PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl (hash: kW74LcGh9qv2i2bk93wBp/CaBIYpKzh5ewf5e9hGTU8=) 2: A3E08ED6825711EFB7585B6FC4F9AE02.roa (hash: 1Bxl9vHMR4K0dXCavsLXW0UxkDhTA+3Edc4fDYeGeeM=) 3: 23D4183024D711EF932FC941C4F9AE02.roa (hash: jHywDoNB/M5/JWK2missGRiO0nqIo+DRSIZ4F6Z5slM=) 4: 1D98617687B311EFB4972044C4F9AE02.roa (hash: QgMj3I5bGTGmmj+YPUJfTzhJ0oh+U+bAGWMsBoGH6bk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE09C, serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Validity Not Before: Dec 21 02:54:18 2025 GMT Not After : Dec 28 02:54:18 2025 GMT Subject: CN=6947615a-370a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:17:b0:8f:0f:a9:d5:c3:f8:6a:62:ba:9d:95: 50:15:c8:9a:ca:90:55:92:81:22:e1:18:68:ea:80: 72:48:5b:20:44:2c:4a:a1:b9:66:e8:c5:4d:d2:47: 26:cc:a9:6f:be:c8:5f:a5:db:f8:1e:16:f3:db:97: 60:34:7a:18:ab:69:b4:98:ab:fd:15:eb:a0:fe:7b: 5e:c3:00:75:75:ee:57:72:2d:e5:86:33:e8:e7:d9: af:71:b0:25:ee:44:1f:2b:f5:fe:b8:39:f3:b7:8a: ed:08:c0:9d:b4:f4:51:5b:cd:67:23:d0:37:0f:43: da:08:1f:4f:f7:35:38:8a:10:55:83:4c:eb:bd:de: 8a:91:65:59:2a:49:eb:dc:aa:29:fc:72:fb:fb:bb: dd:0d:aa:ea:5a:37:95:dc:94:01:a3:b8:0c:a9:e2: 3b:30:13:7a:8d:be:6c:31:b6:7d:4d:23:68:84:11: 07:96:13:e8:0c:47:02:2a:ec:36:53:35:4a:01:f6: 7d:fd:f7:d6:19:f3:ec:c0:ee:c3:25:04:7f:a3:a4: 93:ef:92:83:2a:20:69:51:6f:f8:a8:b3:89:68:4b: 54:2d:2a:d2:62:9f:94:da:9d:c2:9e:d5:42:0e:d6: d2:c5:99:a3:9c:51:c5:90:a7:90:c4:5e:a4:59:92: dc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:61:FC:4D:47:6C:04:05:FB:91:C7:B9:5D:0A:ED:DE:57:02:23:B8 X509v3 Authority Key Identifier: keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:1a:af:44:bf:7c:f9:30:a5:a0:33:86:cf:cf:bd:2c:bc:76: ba:c6:9a:82:70:21:96:3e:68:24:ea:61:61:d0:d4:dc:09:a4: fe:95:c7:13:b9:ca:99:2d:f4:8d:26:06:a7:fa:3a:53:a4:f0: 79:6c:5a:45:1f:55:fe:9b:2e:97:5d:6d:e8:e4:a2:0d:94:1f: ca:72:99:a5:68:7f:5b:7d:e2:4e:da:da:f8:3f:f4:27:a7:8b: dd:ed:1d:36:3c:77:a0:dc:6a:d7:a1:16:0d:7f:61:69:dc:78: 20:fe:52:98:34:f5:ce:29:91:c5:7b:eb:7b:03:56:9e:64:3e: 48:3c:6a:82:29:03:87:7e:a1:c2:bb:02:fe:43:fb:89:26:cc: 33:91:4e:32:9b:9f:b3:ec:50:3a:3d:93:48:bf:84:ac:15:c7: a1:a1:d3:ad:07:f9:ce:81:fa:28:0f:dc:92:82:b0:96:d1:e9: a6:5d:e0:1d:49:69:b8:4d:13:91:23:a3:15:0e:13:e1:b0:19: 3c:f4:83:de:05:a6:e3:73:c9:de:7d:1d:7d:63:7c:0b:9e:a3: 19:3d:28:2c:ff:5e:a6:d1:d3:56:b2:89:8f:6c:85:50:58:5e: 40:bb:48:8f:f1:0e:c8:80:12:13:0f:8d:5b:41:2a:cd:96:0d: 17:a7:05:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RUUwOUMxMTAvBgNVBAUTKDNDNjlCOUI2MDFEMkM5RjJBMzkxNUE2RkZCQ0EzREFE NjJFOTkyNDUwHhcNMjUxMjIxMDI1NDE4WhcNMjUxMjI4MDI1NDE4WjAYMRYwFAYD VQQDDA02OTQ3NjE1YS0zNzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAixewjw+p1cP4amK6nZVQFciaypBVkoEi4Rho6oBySFsgRCxKoblm6MVN0kcm zKlvvshfpdv4Hhbz25dgNHoYq2m0mKv9Feug/ntewwB1de5Xci3lhjPo59mvcbAl 7kQfK/X+uDnzt4rtCMCdtPRRW81nI9A3D0PaCB9P9zU4ihBVg0zrvd6KkWVZKknr 3Kop/HL7+7vdDarqWjeV3JQBo7gMqeI7MBN6jb5sMbZ9TSNohBEHlhPoDEcCKuw2 UzVKAfZ9/ffWGfPswO7DJQR/o6ST75KDKiBpUW/4qLOJaEtULSrSYp+U2p3CntVC DtbSxZmjnFHFkKeQxF6kWZLcVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBph/E1H bAQF+5HHuV0K7d5XAiO4MB8GA1UdIwQYMBaAFDxpubYB0snyo5Fab/vKPa1i6ZJF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5Qy9FRUY3NjJDMDkw NzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lmS2prVnB2LThvOXJXTHBr a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHbTV0Z0hTeWZLamtWcHYtOG85cldMcGtrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTA5Qy9FRUY3NjJDMDkwNzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lm S2prVnB2LThvOXJXTHBra1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsGq9Ev3z5MKWgM4bPz70svHa6xpqCcCGWPmgk6mFh0NTcCaT+lccT ucqZLfSNJgan+jpTpPB5bFpFH1X+my6XXW3o5KINlB/KcpmlaH9bfeJO2tr4P/Qn p4vd7R02PHeg3GrXoRYNf2Fp3Hgg/lKYNPXOKZHFe+t7A1aeZD5IPGqCKQOHfqHC uwL+Q/uJJswzkU4ym5+z7FA6PZNIv4SsFcehodOtB/nOgfooD9ySgrCW0emmXeAd SWm4TRORI6MVDhPhsBk89IPeBabjc8nefR19Y3wLnqMZPSgs/16m0dNWsomPbIVQ WF5Au0iP8Q7IgBITD41bQSrNlg0XpwWA -----END CERTIFICATE-----Generated at Sun Dec 21 06:29:50 2025 by rpki-client