This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft File: PwmXnYiKPadxYLPIBzfMNgDGuN4.mft (raw, json) Hash identifier: lUMHWA5qQHneZx3kFiMQYOXx0gB8hWepKHEIDIJz3Jg= Subject key identifier: B1:86:18:E6:B6:59:4F:6B:E8:31:5A:D6:5F:CA:DD:44:06:97:E9:F1 Authority key identifier: 3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE Certificate issuer: /CN=A91389E7/serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft Manifest number: 58 Signing time: Fri 05 Dec 2025 05:02:38 +0000 Manifest this update: Fri 05 Dec 2025 05:02:38 +0000 Manifest next update: Fri 12 Dec 2025 05:02:38 +0000 Files and hashes: 1: PwmXnYiKPadxYLPIBzfMNgDGuN4.crl (hash: f93vvCPZnvwe7HNDsLD0xJQI1Eey9DWk/6D5cZJK4uA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91389E7, serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE Validity Not Before: Dec 5 05:02:38 2025 GMT Not After : Dec 12 05:02:38 2025 GMT Subject: CN=6932676e-205b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5f:35:1b:c4:7e:34:91:f2:63:69:15:fe:3b: eb:df:2b:8a:74:b6:d9:19:01:08:f7:09:7a:b1:8a: 77:4e:9a:c2:eb:47:a4:28:fb:0e:c4:67:d4:d8:be: 99:bc:d6:ff:86:e4:31:4f:95:06:e1:b0:81:40:17: f9:2c:14:c9:d1:1d:af:f4:b2:8e:d4:ac:15:57:7d: 07:69:75:3f:dd:52:b8:fc:ef:52:66:f5:28:17:08: b5:ca:c8:54:8b:2d:ff:45:dd:67:6e:ac:e9:fd:cb: 26:18:08:53:9c:8a:34:5e:8a:a5:e4:6d:bb:59:6c: de:71:62:45:0d:50:0c:79:41:cf:a8:76:e8:5e:52: ba:5a:6a:df:6b:09:ff:36:cd:69:45:e8:98:c6:bd: ad:aa:c1:79:e5:80:55:f8:c2:9c:2d:3c:83:63:bf: fd:5d:e8:4a:eb:4b:6b:8a:e4:d3:f8:26:ed:22:30: e3:7d:ae:b3:10:92:8d:a2:43:bd:c5:a1:26:a0:32: 7f:9a:37:c5:aa:c8:06:4a:67:05:b9:c3:df:74:e2: 33:c9:8f:21:11:81:8b:e6:13:78:ee:df:4d:5a:e2: 7a:6c:d9:ab:aa:94:0d:4d:e3:fb:8c:e9:4a:69:34: ac:df:6e:79:70:03:13:c1:ee:2b:97:49:72:cf:a4: 66:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:86:18:E6:B6:59:4F:6B:E8:31:5A:D6:5F:CA:DD:44:06:97:E9:F1 X509v3 Authority Key Identifier: keyid:3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:1b:05:92:61:6c:30:62:ff:7d:b5:9e:2e:d7:77:f8:ed:58: fe:34:94:4f:47:d9:d3:84:56:c1:fa:cf:8d:24:a4:f9:16:57: f8:0d:89:1a:c4:ab:1e:89:09:f2:4e:f6:a0:61:64:42:f7:4b: 15:ca:05:2e:b2:b8:e0:30:e8:95:59:a0:dc:36:c7:3d:8e:cd: e1:88:1e:e8:3d:e8:c2:92:03:01:e8:b9:8e:63:91:ec:9d:97: 73:ac:b3:a8:e2:c6:20:65:64:16:2d:52:a0:e2:a7:b3:ac:60: 0f:fa:db:45:67:89:46:9c:69:c8:74:b3:04:a6:81:68:78:4f: 56:4b:dd:1d:55:cf:c9:0c:39:47:3d:9e:ad:87:ee:3e:db:1b: 46:31:e6:9a:e5:4f:f5:a5:ef:42:72:33:39:68:aa:c4:55:95: fe:a6:86:8b:af:47:59:e2:d1:fe:b7:ca:d4:15:13:9c:37:64: e3:cc:2a:3e:fe:fe:bf:fe:b6:f2:16:36:70:95:8e:3e:62:5b: 9e:17:0f:f3:d1:21:53:23:33:14:4c:62:33:c5:e7:a3:fe:81: 84:bd:4f:84:7b:27:a4:23:46:71:14:93:57:62:22:5d:5e:50: 1f:11:54:45:34:98:07:f8:1b:50:88:d7:65:1d:52:70:89:59: 5c:ed:12:0c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODlFNzExMC8GA1UEBRMoM0YwOTk3OUQ4ODhBM0RBNzcxNjBCM0M4MDczN0NDMzYw MEM2QjhERTAeFw0yNTEyMDUwNTAyMzhaFw0yNTEyMTIwNTAyMzhaMBgxFjAUBgNV BAMTDTY5MzI2NzZlLTIwNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtXzUbxH40kfJjaRX+O+vfK4p0ttkZAQj3CXqxindOmsLrR6Qo+w7EZ9TYvpm8 1v+G5DFPlQbhsIFAF/ksFMnRHa/0so7UrBVXfQdpdT/dUrj871Jm9SgXCLXKyFSL Lf9F3WdurOn9yyYYCFOcijReiqXkbbtZbN5xYkUNUAx5Qc+oduheUrpaat9rCf82 zWlF6JjGva2qwXnlgFX4wpwtPINjv/1d6ErrS2uK5NP4Ju0iMON9rrMQko2iQ73F oSagMn+aN8WqyAZKZwW5w9904jPJjyERgYvmE3ju301a4nps2auqlA1N4/uM6Upp NKzfbnlwAxPB7iuXSXLPpGa5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsYYY5rZZ T2voMVrWX8rdRAaX6fEwHwYDVR0jBBgwFoAUPwmXnYiKPadxYLPIBzfMNgDGuN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4OUU3L0EyN0ZFNkRDNEMw OTExRjA5RjM4QjYyOEM0RjlBRTAyL1B3bVhuWWlLUGFkeFlMUElCemZNTmdER3VO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUHdtWG5ZaUtQYWR4WUxQSUJ6Zk1OZ0RHdU40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 OUU3L0EyN0ZFNkRDNEMwOTExRjA5RjM4QjYyOEM0RjlBRTAyL1B3bVhuWWlLUGFk eFlMUElCemZNTmdER3VONC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKMbBZJhbDBi/321ni7Xd/jtWP40lE9H2dOEVsH6z40kpPkWV/gNiRrE qx6JCfJO9qBhZEL3SxXKBS6yuOAw6JVZoNw2xz2OzeGIHug96MKSAwHouY5jkeyd l3Oss6jixiBlZBYtUqDip7OsYA/620VniUacach0swSmgWh4T1ZL3R1Vz8kMOUc9 nq2H7j7bG0Yx5prlT/Wl70JyMzloqsRVlf6mhouvR1ni0f63ytQVE5w3ZOPMKj7+ /r/+tvIWNnCVjj5iW54XD/PRIVMjMxRMYjPF56P+gYS9T4R7J6QjRnEUk1diIl1e UB8RVEU0mAf4G1CI12UdUnCJWVztEgw= -----END CERTIFICATE-----Generated at Sat Dec 6 15:56:30 2025 by rpki-client