This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft File: pnlJEZesgi4NGBlxE3pGfSfCsCw.mft (raw, json) Hash identifier: Pcc0O+dtKkko1e344fE2LnttK9GJrJT7IvEwffQqxYQ= Subject key identifier: C0:36:6F:91:6E:01:B6:16:34:2A:EA:13:1B:B7:CB:FC:C3:57:44:98 Authority key identifier: A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C Certificate issuer: /CN=A919F0F1/serialNumber=A679491197AC822E0D181971137A467D27C2B02C Certificate serial: 11B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft Manifest number: 11A0 Signing time: Sat 06 Dec 2025 16:43:29 +0000 Manifest this update: Sat 06 Dec 2025 16:43:29 +0000 Manifest next update: Sat 13 Dec 2025 16:43:29 +0000 Files and hashes: 1: pnlJEZesgi4NGBlxE3pGfSfCsCw.crl (hash: AlGT2PvE/dLYBE5mk7c8CbojVYKND2/IhvdavMRjq2g=) 2: DB4085480A3A11E999FA296FC4F9AE02.roa (hash: 16660dDxZH468UZss0VebZFnv/Ql37+WVYt3vkRrUmQ=) 3: 041E1E420A3811E9BE336267C4F9AE02.roa (hash: Spb+pH4GvP2Ukki1wFpymghuHWZTFJjsX3H/le8aCzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4532 (0x11b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0F1, serialNumber=A679491197AC822E0D181971137A467D27C2B02C Validity Not Before: Dec 6 16:43:29 2025 GMT Not After : Dec 13 16:43:29 2025 GMT Subject: CN=69345d31-105e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:db:be:09:af:48:2b:fa:55:15:a7:5b:21:5e: d9:a3:2a:77:0c:14:49:6c:dd:75:ed:ce:5b:70:8b: bd:7e:ed:ac:c7:05:91:50:24:60:20:58:d1:4a:db: 9c:05:75:23:40:75:74:43:d1:41:11:40:73:e3:74: 38:2f:cc:25:f0:ef:57:59:00:a4:a7:7d:92:78:d5: 50:f7:fe:cc:16:e5:0d:b9:ef:49:ce:ac:a4:d2:d9: 7c:f4:ef:dd:8c:5a:12:04:50:7b:c1:cf:69:da:67: 4f:5b:8c:58:5d:ca:f9:1d:9d:e2:85:c8:37:8e:a2: 59:35:25:d1:ac:20:fc:68:a2:31:e6:38:2e:ac:d8: 91:2c:bf:55:a0:ee:ab:e6:37:d9:43:35:82:40:1b: ec:44:78:79:da:e1:9e:38:07:cb:9b:e1:e1:2b:3f: 74:d8:9e:16:20:27:fa:9e:ed:38:e6:93:91:3d:9e: b0:d2:9c:24:43:ee:77:fc:37:21:1a:c7:c1:39:6f: 1f:c9:05:d9:e3:bb:02:24:c1:04:6d:db:83:06:24: ee:5e:b7:a4:d5:86:5c:e8:67:00:15:0d:c0:72:44: 83:5a:5c:ee:d9:ca:58:a8:be:e7:cb:b7:e5:c5:8e: 99:7b:fa:bc:41:6c:43:92:03:b0:d4:78:5b:a5:4b: 7b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:36:6F:91:6E:01:B6:16:34:2A:EA:13:1B:B7:CB:FC:C3:57:44:98 X509v3 Authority Key Identifier: keyid:A6:79:49:11:97:AC:82:2E:0D:18:19:71:13:7A:46:7D:27:C2:B0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pnlJEZesgi4NGBlxE3pGfSfCsCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0F1/40B13BC00A3611E987A9C464C4F9AE02/pnlJEZesgi4NGBlxE3pGfSfCsCw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:f4:5d:d7:3f:26:59:97:0c:bd:a4:58:aa:ef:b3:9b:05:35: be:41:3e:ee:ed:55:51:5d:ca:bd:47:ef:31:8f:0c:ba:d4:b5: d4:11:5b:30:e4:d5:75:3f:ea:6e:62:cd:2d:35:fb:bb:35:5f: c4:1f:d6:75:ac:ba:56:84:0e:29:35:ba:f8:15:08:d7:03:54: 58:3d:15:c5:dd:9d:6f:d3:2e:a9:f8:af:d9:66:8e:7f:06:61: 93:66:5c:56:09:c2:16:16:87:a2:5d:1c:b4:f0:c6:8d:ec:fe: 02:2b:59:47:94:4d:36:6f:c6:2f:3d:9c:66:ef:04:b6:96:60: db:e1:03:08:b0:89:02:c1:8e:42:88:50:6e:27:e4:2a:d0:8f: 27:06:c0:61:ea:a1:03:f6:b6:c9:09:c8:40:0e:57:02:bc:7b: 10:a5:b9:8b:ac:88:64:cb:60:22:5e:e6:7a:4d:ad:7b:0e:3f: 82:53:c6:d6:b7:a5:df:45:7d:c5:f7:cc:27:27:03:71:0c:a3: 6c:9b:82:d6:d4:ca:8f:33:f5:2b:97:c1:51:13:5e:21:e5:6d: f5:81:47:50:8b:40:20:0e:0a:69:fe:5d:6f:e0:09:6f:45:42: 24:c1:ce:16:d7:da:b1:f6:53:23:fa:d0:fd:ec:83:93:cd:14: 8b:80:a3:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwRjExMTAvBgNVBAUTKEE2Nzk0OTExOTdBQzgyMkUwRDE4MTk3MTEzN0E0NjdE MjdDMkIwMkMwHhcNMjUxMjA2MTY0MzI5WhcNMjUxMjEzMTY0MzI5WjAYMRYwFAYD VQQDEw02OTM0NWQzMS0xMDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3tu+Ca9IK/pVFadbIV7Zoyp3DBRJbN117c5bcIu9fu2sxwWRUCRgIFjRStuc BXUjQHV0Q9FBEUBz43Q4L8wl8O9XWQCkp32SeNVQ9/7MFuUNue9Jzqyk0tl89O/d jFoSBFB7wc9p2mdPW4xYXcr5HZ3ihcg3jqJZNSXRrCD8aKIx5jgurNiRLL9VoO6r 5jfZQzWCQBvsRHh52uGeOAfLm+HhKz902J4WICf6nu045pORPZ6w0pwkQ+53/Dch GsfBOW8fyQXZ47sCJMEEbduDBiTuXrek1YZc6GcAFQ3AckSDWlzu2cpYqL7ny7fl xY6Ze/q8QWxDkgOw1HhbpUt7+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMA2b5Fu AbYWNCrqExu3y/zDV0SYMB8GA1UdIwQYMBaAFKZ5SRGXrIIuDRgZcRN6Rn0nwrAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBGMS80MEIxM0JDMDBB MzYxMUU5ODdBOUM0NjRDNEY5QUUwMi9wbmxKRVplc2dpNE5HQmx4RTNwR2ZTZkNz Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BubEpFWmVzZ2k0TkdCbHhFM3BHZlNmQ3NDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBGMS80MEIxM0JDMDBBMzYxMUU5ODdBOUM0NjRDNEY5QUUwMi9wbmxKRVplc2dp NE5HQmx4RTNwR2ZTZkNzQ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU9F3XPyZZlwy9pFiq77ObBTW+QT7u7VVRXcq9R+8xjwy61LXUEVsw 5NV1P+puYs0tNfu7NV/EH9Z1rLpWhA4pNbr4FQjXA1RYPRXF3Z1v0y6p+K/ZZo5/ BmGTZlxWCcIWFoeiXRy08MaN7P4CK1lHlE02b8YvPZxm7wS2lmDb4QMIsIkCwY5C iFBuJ+Qq0I8nBsBh6qED9rbJCchADlcCvHsQpbmLrIhky2AiXuZ6Ta17Dj+CU8bW t6XfRX3F98wnJwNxDKNsm4LW1MqPM/Url8FRE14h5W31gUdQi0AgDgpp/l1v4Alv RUIkwc4W19qx9lMj+tD97IOTzRSLgKN6 -----END CERTIFICATE-----Generated at Sat Dec 6 19:36:40 2025 by rpki-client