This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft File: PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft (raw, json) Hash identifier: sH2WPqdfN9puk7OgsNbb7iQklG63iJr8f3WOw1Z9c5s= Subject key identifier: ED:15:2A:C2:8D:B6:C0:DD:2D:0B:F2:DA:93:E0:DD:B0:E6:02:33:0E Authority key identifier: 3E:03:FD:15:98:00:99:B5:BF:50:21:E9:0B:E1:F4:A7:7E:00:C7:9C Certificate issuer: /CN=A91538E7/serialNumber=3E03FD15980099B5BF5021E90BE1F4A77E00C79C Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgP9FZgAmbW_UCHpC-H0p34Ax5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft Manifest number: 0855 Signing time: Thu 04 Dec 2025 20:01:29 +0000 Manifest this update: Thu 04 Dec 2025 20:01:29 +0000 Manifest next update: Thu 11 Dec 2025 20:01:29 +0000 Files and hashes: 1: PgP9FZgAmbW_UCHpC-H0p34Ax5w.crl (hash: njbr+PzQf+3rC4rD1K4g4FLwa821cmmbW0zDPba1Ej4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.crl rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgP9FZgAmbW_UCHpC-H0p34Ax5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=3E03FD15980099B5BF5021E90BE1F4A77E00C79C Validity Not Before: Dec 4 20:01:29 2025 GMT Not After : Dec 11 20:01:29 2025 GMT Subject: CN=6931e899-2932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5d:cf:6a:8d:82:cb:a6:54:a2:6b:ed:64:7e: 6c:0e:27:77:3b:27:e0:25:b4:f9:7b:29:cf:71:37: a4:0b:a9:48:a5:19:fc:61:4c:e6:ac:76:01:e3:31: d4:7a:a3:f5:a4:35:15:9a:5e:87:f6:bd:a2:2d:3c: 12:ec:5a:60:71:8f:92:50:02:d0:6b:7d:b9:59:85: 7e:7c:91:80:3f:3b:36:80:28:e0:91:75:37:14:e2: c9:6f:7c:d0:0c:17:48:75:1d:97:64:29:ee:0a:54: 8c:95:d0:0e:e0:7a:83:c3:eb:d3:31:0e:b3:b0:56: 6e:e6:4a:32:f0:c0:ee:48:4f:95:5a:ab:b5:d0:78: a6:86:b4:29:f2:60:49:e3:ab:2d:31:5f:31:cd:2d: e6:08:76:92:49:14:d4:53:bd:6a:fe:c0:d1:69:92: 72:b1:9b:f6:dc:38:8a:bf:59:56:3e:f5:24:fe:a4: 47:c5:4a:84:d9:33:9b:bf:e0:d7:07:b3:e7:d7:33: 9d:a2:17:02:6a:9f:75:fb:75:69:0c:62:0e:09:ca: 77:0a:11:68:51:5d:c5:bf:a9:78:a9:58:b2:3b:68: 95:30:eb:73:6c:95:68:e9:42:65:07:f8:20:ed:b8: 09:7c:65:8e:38:85:71:08:dc:b9:92:f8:68:a9:bf: 77:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:15:2A:C2:8D:B6:C0:DD:2D:0B:F2:DA:93:E0:DD:B0:E6:02:33:0E X509v3 Authority Key Identifier: keyid:3E:03:FD:15:98:00:99:B5:BF:50:21:E9:0B:E1:F4:A7:7E:00:C7:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgP9FZgAmbW_UCHpC-H0p34Ax5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:a8:f6:7d:6b:ac:ac:82:f0:d8:a9:b7:0d:f7:a7:b1:be:b8: 4b:8b:4f:64:48:63:d5:36:83:a2:f0:ca:4b:b3:be:5e:06:98: 14:e1:4d:b6:75:8e:33:10:f4:e5:e8:17:a0:c7:41:dd:ca:ff: 96:56:19:05:d0:5c:82:b2:ff:09:d1:3e:57:16:fb:ef:ac:a7: 61:ec:e0:23:f8:cc:6c:77:39:ac:a7:76:ab:b7:c5:20:6a:87: a9:16:e0:e0:69:53:d9:b3:27:de:01:53:9b:2c:2b:e4:54:d1: 08:e3:8c:51:f1:bf:0e:00:45:21:b6:7b:43:42:be:a6:d4:69: c8:e3:58:13:b5:b3:65:e5:5b:c0:0f:a7:f3:ca:c0:93:13:15: 44:86:91:18:78:bd:30:03:33:21:03:e0:f0:df:89:5f:be:97: 45:3f:33:da:b0:a9:33:61:fa:b2:13:4f:b3:54:02:ac:ef:98: cc:75:02:6d:85:42:9f:7d:79:b4:d7:6d:b9:5f:f1:e4:79:b9: 6b:d0:45:4b:ea:5e:f2:d9:94:be:67:31:3d:2c:30:71:54:41: 17:54:72:b0:c2:ba:d2:da:69:54:8b:26:3c:ad:4b:04:69:2c: 59:e5:4c:0d:d2:ad:45:94:8d:c3:15:11:4c:66:7f:12:e0:cf: 38:e8:ff:d2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzhFNzExMC8GA1UEBRMoM0UwM0ZEMTU5ODAwOTlCNUJGNTAyMUU5MEJFMUY0QTc3 RTAwQzc5QzAeFw0yNTEyMDQyMDAxMjlaFw0yNTEyMTEyMDAxMjlaMBgxFjAUBgNV BAMTDTY5MzFlODk5LTI5MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2Xc9qjYLLplSia+1kfmwOJ3c7J+AltPl7Kc9xN6QLqUilGfxhTOasdgHjMdR6 o/WkNRWaXof2vaItPBLsWmBxj5JQAtBrfblZhX58kYA/OzaAKOCRdTcU4slvfNAM F0h1HZdkKe4KVIyV0A7geoPD69MxDrOwVm7mSjLwwO5IT5Vaq7XQeKaGtCnyYEnj qy0xXzHNLeYIdpJJFNRTvWr+wNFpknKxm/bcOIq/WVY+9ST+pEfFSoTZM5u/4NcH s+fXM52iFwJqn3X7dWkMYg4JyncKEWhRXcW/qXipWLI7aJUw63NslWjpQmUH+CDt uAl8ZY44hXEI3LmS+Gipv3dJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7RUqwo22 wN0tC/Lak+DdsOYCMw4wHwYDVR0jBBgwFoAUPgP9FZgAmbW/UCHpC+H0p34Ax5ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOEU3L0JGNDA0QTVBMDI2 NzExRUI4RTFDMzAxQUM0RjlBRTAyL1BnUDlGWmdBbWJXX1VDSHBDLUgwcDM0QXg1 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUGdQOUZaZ0FtYldfVUNIcEMtSDBwMzRBeDV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz OEU3L0JGNDA0QTVBMDI2NzExRUI4RTFDMzAxQUM0RjlBRTAyL1BnUDlGWmdBbWJX X1VDSHBDLUgwcDM0QXg1dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKOo9n1rrKyC8Niptw33p7G+uEuLT2RIY9U2g6Lwykuzvl4GmBThTbZ1 jjMQ9OXoF6DHQd3K/5ZWGQXQXIKy/wnRPlcW+++sp2Hs4CP4zGx3Oayndqu3xSBq h6kW4OBpU9mzJ94BU5ssK+RU0QjjjFHxvw4ARSG2e0NCvqbUacjjWBO1s2XlW8AP p/PKwJMTFUSGkRh4vTADMyED4PDfiV++l0U/M9qwqTNh+rITT7NUAqzvmMx1Am2F Qp99ebTXbblf8eR5uWvQRUvqXvLZlL5nMT0sMHFUQRdUcrDCutLaaVSLJjytSwRp LFnlTA3SrUWUjcMVEUxmfxLgzzjo/9I= -----END CERTIFICATE-----Generated at Sat Dec 6 18:33:42 2025 by rpki-client