This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft File: pGM3j5KTiRbgseQTrw8MinPCH08.mft (raw, json) Hash identifier: Iq8wAqrr/6cuwYykO3Vbz+LgotHW3mx3oX2telssHX0= Subject key identifier: A2:FB:59:F1:9F:A8:13:36:E5:E9:8F:C9:39:E0:F4:42:0F:3B:30:03 Authority key identifier: A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F Certificate issuer: /CN=A917C3A7/serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F Certificate serial: 04B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft Manifest number: 04B5 Signing time: Sat 06 Dec 2025 22:37:49 +0000 Manifest this update: Sat 06 Dec 2025 22:37:49 +0000 Manifest next update: Sat 13 Dec 2025 22:37:49 +0000 Files and hashes: 1: pGM3j5KTiRbgseQTrw8MinPCH08.crl (hash: 4VVwtIGV+imwTpuJHKBfsXKj/KBsWFcbuG8ZLK+3nDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1205 (0x4b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C3A7, serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F Validity Not Before: Dec 6 22:37:49 2025 GMT Not After : Dec 13 22:37:49 2025 GMT Subject: CN=6934b03d-6f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bd:62:a1:25:2c:17:7f:a2:a4:d6:f8:b1:a6: 76:d4:5a:b6:0d:c2:27:4a:97:f8:b7:71:63:aa:48: b5:3e:ed:f0:14:d9:15:ce:ce:95:a7:2b:e7:51:60: 88:67:e8:e3:0b:98:99:11:77:15:95:21:71:9f:5c: 28:e9:b5:e1:39:21:7b:00:f2:85:ed:3b:57:2e:3d: b0:8f:b2:ea:ec:13:f5:09:dd:65:0d:ed:68:a7:2e: 4b:2f:17:ac:dd:5a:e8:bf:7e:62:68:82:6f:6a:eb: 15:b5:96:31:25:a4:4f:07:9c:fc:bd:05:b0:df:11: 16:96:33:62:c3:bb:17:f6:4d:f4:21:72:6c:18:e7: dd:db:ee:d3:44:bc:38:fd:4f:44:9c:80:41:17:b0: 0a:79:55:3c:21:88:68:e3:b6:39:d3:b8:96:dd:40: 86:ec:08:4a:1a:4b:82:27:da:a9:66:d1:ca:15:1c: 25:85:49:f9:56:b2:fc:90:4c:ac:0b:fd:fa:c2:5a: 55:97:d3:e2:b7:73:10:98:07:73:b0:0d:9e:e7:84: da:b1:f0:43:e9:d3:84:0d:10:e0:60:85:d6:42:b0: eb:44:99:f2:4b:e7:36:b8:2c:05:6a:9f:8d:48:1c: a3:2c:65:c5:24:5e:28:af:86:50:57:27:cb:7b:ad: 49:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FB:59:F1:9F:A8:13:36:E5:E9:8F:C9:39:E0:F4:42:0F:3B:30:03 X509v3 Authority Key Identifier: keyid:A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:d9:24:cd:1f:77:4e:a6:67:de:3d:aa:87:dc:3b:cc:a6:b4: db:8d:e4:a4:f1:ca:1f:3e:41:ae:5b:ff:59:8f:11:ca:ba:b6: 38:a6:bb:6f:13:8d:11:d9:4f:e2:b3:a8:49:9a:79:a6:2b:35: ba:15:18:b7:6e:c9:a6:c9:48:ae:22:26:8b:37:76:d4:07:cc: 28:0a:c7:08:84:82:1c:bf:56:64:9e:42:4e:98:aa:0a:1e:63: 57:f3:b7:7f:a7:05:13:bd:22:c4:0e:ef:d0:f6:46:ce:1a:41: fd:9f:0a:8d:ce:f8:f0:37:97:c4:be:8f:c2:c6:cd:90:1f:b8: 15:01:98:3d:55:78:2d:21:e5:d8:82:27:ad:e4:12:98:d7:e2: 20:ae:41:b1:d4:94:c2:d8:9f:cf:01:c3:09:d3:bd:47:73:4b: 29:6e:77:20:f1:dd:a2:f4:be:ea:6d:3b:df:96:57:a2:30:0c: f5:6e:a3:05:0a:92:63:63:c0:65:bc:e6:d0:00:24:36:8d:06: 9b:62:27:09:09:69:ce:8a:4f:17:08:bb:ee:f3:db:88:10:0c: 6c:6f:50:29:15:ab:bc:12:e8:ee:0e:6b:2a:49:c1:9e:ca:83: 7c:10:84:fc:9c:1c:f4:c2:ac:7e:15:06:79:57:05:69:2d:3f: 8c:cf:96:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzQTcxMTAvBgNVBAUTKEE0NjMzNzhGOTI5Mzg5MTZFMEIxRTQxM0FGMEYwQzhB NzNDMjFGNEYwHhcNMjUxMjA2MjIzNzQ5WhcNMjUxMjEzMjIzNzQ5WjAYMRYwFAYD VQQDEw02OTM0YjAzZC02ZjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv71ioSUsF3+ipNb4saZ21Fq2DcInSpf4t3Fjqki1Pu3wFNkVzs6VpyvnUWCI Z+jjC5iZEXcVlSFxn1wo6bXhOSF7APKF7TtXLj2wj7Lq7BP1Cd1lDe1opy5LLxes 3Vrov35iaIJvausVtZYxJaRPB5z8vQWw3xEWljNiw7sX9k30IXJsGOfd2+7TRLw4 /U9EnIBBF7AKeVU8IYho47Y507iW3UCG7AhKGkuCJ9qpZtHKFRwlhUn5VrL8kEys C/36wlpVl9Pit3MQmAdzsA2e54TasfBD6dOEDRDgYIXWQrDrRJnyS+c2uCwFap+N SByjLGXFJF4or4ZQVyfLe61JUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKL7WfGf qBM25emPyTng9EIPOzADMB8GA1UdIwQYMBaAFKRjN4+Sk4kW4LHkE68PDIpzwh9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzNBNy9FNDFGRjBBNjUz MjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlSYmdzZVFUcnc4TWluUENI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BHTTNqNUtUaVJiZ3NlUVRydzhNaW5QQ0gwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzNBNy9FNDFGRjBBNjUzMjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlS YmdzZVFUcnc4TWluUENIMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT2STNH3dOpmfePaqH3DvMprTbjeSk8cofPkGuW/9ZjxHKurY4prtv E40R2U/is6hJmnmmKzW6FRi3bsmmyUiuIiaLN3bUB8woCscIhIIcv1ZknkJOmKoK HmNX87d/pwUTvSLEDu/Q9kbOGkH9nwqNzvjwN5fEvo/Cxs2QH7gVAZg9VXgtIeXY giet5BKY1+IgrkGx1JTC2J/PAcMJ071Hc0spbncg8d2i9L7qbTvflleiMAz1bqMF CpJjY8BlvObQACQ2jQabYicJCWnOik8XCLvu89uIEAxsb1ApFau8EujuDmsqScGe yoN8EIT8nBz0wqx+FQZ5VwVpLT+Mz5bg -----END CERTIFICATE-----Generated at Sun Dec 7 03:41:59 2025 by rpki-client