This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.mft
File: PGIfAALQYHByq7Fal4r7xa9DpVw.mft (raw, json)
Hash identifier: ilFXMESPy+RhnLs63SwwcLfd8fxuVZFYQ8IyWQ8toTo=
Subject key identifier: 4F:64:55:45:D5:E9:3C:D4:9C:17:93:A7:61:FC:1A:65:43:D1:3A:C7
Authority key identifier: 3C:62:1F:00:02:D0:60:70:72:AB:B1:5A:97:8A:FB:C5:AF:43:A5:5C
Certificate issuer: /CN=A91F4130/serialNumber=3C621F0002D0607072ABB15A978AFBC5AF43A55C
Certificate serial: 13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGIfAALQYHByq7Fal4r7xa9DpVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.mft
Manifest number: 13
Signing time: Fri 19 Dec 2025 06:48:57 +0000
Manifest this update: Fri 19 Dec 2025 06:48:57 +0000
Manifest next update: Fri 26 Dec 2025 06:48:57 +0000
Files and hashes: 1: PGIfAALQYHByq7Fal4r7xa9DpVw.crl (hash: 1OIRR2h9I/tfpH/UDTJoZAIDSNTDRl0Dl3e3xQZTuKE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.crl
rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGIfAALQYHByq7Fal4r7xa9DpVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 06:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4130, serialNumber=3C621F0002D0607072ABB15A978AFBC5AF43A55C
Validity
Not Before: Dec 19 06:48:57 2025 GMT
Not After : Dec 26 06:48:57 2025 GMT
Subject: CN=6944f559-fe36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5e:13:05:18:db:d9:fa:48:76:8e:c3:4a:07:
c6:f5:57:08:4a:62:43:36:20:c2:3a:d9:47:7e:e5:
db:e2:bc:ad:28:fe:7b:c3:f5:17:46:52:86:09:bc:
01:9b:4d:6b:a7:12:94:7e:c1:35:2d:fc:07:db:d2:
6c:0b:ed:4c:99:33:60:28:b3:98:ea:82:41:7a:d5:
b8:cf:e3:a1:31:a9:34:2c:05:07:cf:e4:33:55:5e:
56:0c:76:07:e2:60:98:cf:17:15:f9:bb:e3:b9:97:
a7:c3:f0:15:83:19:ca:56:e7:22:1c:c9:b8:c3:8f:
d6:d3:0d:15:2e:a5:75:9b:48:0a:91:24:a4:c0:49:
6c:b3:3a:46:9a:de:a1:f1:3e:f9:8d:61:f0:0c:69:
cb:e6:33:ec:ef:9b:9e:2a:e4:5a:76:3f:3b:99:3c:
3e:2e:80:51:f6:31:7c:06:1c:bc:98:71:5d:24:1a:
9f:51:fd:0b:66:30:2b:06:da:78:db:29:a0:55:ce:
c5:9e:36:64:d9:fb:01:c1:82:8d:9c:df:c4:68:6e:
9a:1d:58:2b:57:86:52:a1:eb:07:08:bd:c4:aa:e3:
df:6a:12:79:db:8c:08:7a:41:21:71:6f:f3:69:2c:
eb:96:89:2b:6d:e7:11:45:dd:43:85:a3:7e:da:82:
2a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:64:55:45:D5:E9:3C:D4:9C:17:93:A7:61:FC:1A:65:43:D1:3A:C7
X509v3 Authority Key Identifier:
keyid:3C:62:1F:00:02:D0:60:70:72:AB:B1:5A:97:8A:FB:C5:AF:43:A5:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGIfAALQYHByq7Fal4r7xa9DpVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4130/FD050D20C11211F0A24F1420C4F9AE02/PGIfAALQYHByq7Fal4r7xa9DpVw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:13:eb:2b:c1:20:57:0a:65:e5:cb:a9:ce:c8:ee:4f:b6:11:
2c:5a:dd:7c:b6:2e:40:58:e4:58:12:1f:52:f0:e8:8f:e0:f9:
65:b6:fb:29:14:2a:11:96:be:30:48:d6:0b:ec:8e:97:36:ad:
4f:dd:11:57:aa:d5:53:67:b5:c5:4e:79:f2:b6:6c:1f:7e:d6:
07:bf:88:d9:eb:b6:c9:dc:d7:9a:18:26:fb:d7:0c:dd:df:0b:
7e:16:54:b9:75:b5:5d:03:05:f7:92:c4:72:3f:79:59:3c:70:
e0:78:34:59:cd:67:a1:2a:5a:51:65:0b:48:9a:94:bc:81:57:
90:5f:6e:91:cd:0a:40:1b:6a:55:da:2f:27:7a:c6:28:3d:90:
14:46:39:79:61:86:3b:c0:da:7f:be:42:a6:d6:c4:e8:11:f0:
37:be:34:3f:2c:8b:7b:a5:bb:fb:de:c4:2a:25:78:de:34:94:
db:b4:f9:72:c2:99:65:7f:cd:71:33:89:38:9a:c0:0b:70:95:
28:fb:90:f2:6e:6f:12:91:cc:40:cf:d6:9a:10:ab:61:30:b6:
6c:3f:48:ef:a8:49:1c:55:de:b9:86:33:2e:f6:d2:fd:7a:98:
2e:3e:da:4b:ce:6c:9b:f1:57:28:89:99:b0:98:e1:fa:68:c6:
49:27:07:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:23:48 2025 by rpki-client