This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft File: pfsx1NUSX3yarlADNaSA_HeQjxU.mft (raw, json) Hash identifier: ugJDmpSH+DU03mEqZdOLQIUYfHbol3pKfXBGFNvCWac= Subject key identifier: 29:8A:98:00:6C:98:B8:34:51:D8:EA:18:C0:90:B2:1E:0D:F4:CE:A6 Authority key identifier: A5:FB:31:D4:D5:12:5F:7C:9A:AE:50:03:35:A4:80:FC:77:90:8F:15 Certificate issuer: /CN=A91A4A13/serialNumber=A5FB31D4D5125F7C9AAE500335A480FC77908F15 Certificate serial: 020C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft Manifest number: 0207 Signing time: Fri 05 Dec 2025 00:40:08 +0000 Manifest this update: Fri 05 Dec 2025 00:40:07 +0000 Manifest next update: Fri 12 Dec 2025 00:40:07 +0000 Files and hashes: 1: pfsx1NUSX3yarlADNaSA_HeQjxU.crl (hash: H8565LGStYn+ycJAribq5RmOCVz8jP6YUvyhN8pCqVI=) 2: A8D327E4BBC711ED8DF23C40C4F9AE02.roa (hash: m/OLPsM6ynBix8nuh4bjX0QKg8+81tb5WXXf1UHLuyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.crl rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4A13, serialNumber=A5FB31D4D5125F7C9AAE500335A480FC77908F15 Validity Not Before: Dec 5 00:40:07 2025 GMT Not After : Dec 12 00:40:07 2025 GMT Subject: CN=693229e7-7861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:7d:26:af:e4:ca:28:d4:56:15:e2:f4:d5:d4: 10:49:b1:58:6a:52:db:d3:2e:0b:b4:35:8a:30:50: 0e:c1:28:a2:83:9a:e3:e5:bb:6f:77:17:a9:78:5e: ba:5e:32:f5:11:99:0e:8c:7c:26:08:a6:44:85:8e: a1:31:e7:76:9e:fe:93:2f:ba:27:c0:bc:23:cc:fb: 34:69:31:d7:4b:6f:92:11:36:66:ee:12:d5:b7:14: d0:45:2d:b6:6c:ee:b7:b3:15:2a:18:8f:cd:4c:0d: 9b:82:bd:13:72:f3:31:7a:af:4b:2c:f0:8d:21:11: 06:f5:38:dc:c9:92:40:d1:83:29:a3:0b:06:77:81: a9:0b:eb:d0:e6:a1:7b:ce:67:5c:af:c4:9c:21:e6: ff:2e:0f:21:97:e2:1e:ea:2e:40:41:d5:0b:9f:54: 5d:23:71:48:92:88:9c:93:40:4c:e5:7d:1b:8d:e6: 11:6f:c2:57:f5:4a:ae:39:bd:4a:ab:cc:a4:47:1a: 07:ec:6f:40:5b:67:aa:8d:00:b7:44:2e:42:a2:35: 24:ac:ec:e4:34:75:63:78:16:35:64:27:f1:25:ab: e0:62:47:b9:d5:8a:84:d8:a9:f5:8e:11:7e:f8:2d: 81:b6:e1:23:cd:17:8e:ac:29:a5:44:ef:3c:bd:02: 6e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:8A:98:00:6C:98:B8:34:51:D8:EA:18:C0:90:B2:1E:0D:F4:CE:A6 X509v3 Authority Key Identifier: keyid:A5:FB:31:D4:D5:12:5F:7C:9A:AE:50:03:35:A4:80:FC:77:90:8F:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:b1:9b:7f:a2:70:70:67:1d:aa:a9:cf:8a:4f:3e:2d:ba:52: 7e:74:78:5c:73:1f:4b:d7:84:c0:be:96:6c:64:ca:62:16:2d: 1c:13:dd:5b:70:a3:86:6f:7e:82:07:19:a4:e0:42:11:86:f5: 19:a9:91:6b:b8:71:84:41:e9:e1:81:9e:59:5c:78:e9:6b:28: 30:45:0f:d1:33:46:06:8d:b0:ee:02:14:d7:90:13:40:60:8f: 59:ef:a1:92:ba:23:fa:d1:5c:e4:35:d3:92:b0:38:d9:9d:a1: fb:07:d0:c8:3c:83:bf:ff:60:e0:49:c4:b0:6a:90:f1:dd:63: f5:e2:2d:1d:3f:a0:36:ef:24:5b:5a:bc:50:c9:cb:58:79:c2: 33:8b:87:f6:9b:00:36:6c:7a:18:19:49:7f:47:38:5f:62:67: c4:12:d1:62:7d:8f:c4:46:2e:f4:7f:91:96:e2:c8:5f:86:5f: 8e:3c:94:e1:56:50:3f:ff:37:8b:19:c3:f7:e0:9a:a4:6b:26: a0:22:ea:1a:48:77:d5:f6:cb:01:d5:51:02:d4:96:31:0d:8b: 48:36:b4:6d:06:f4:b0:2b:a1:ee:f4:35:31:20:41:ec:12:68: e3:c5:38:54:58:53:4c:33:17:2d:7c:52:4d:40:e5:84:94:44: ff:4e:ea:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRBMTMxMTAvBgNVBAUTKEE1RkIzMUQ0RDUxMjVGN0M5QUFFNTAwMzM1QTQ4MEZD Nzc5MDhGMTUwHhcNMjUxMjA1MDA0MDA3WhcNMjUxMjEyMDA0MDA3WjAYMRYwFAYD VQQDEw02OTMyMjllNy03ODYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9H0mr+TKKNRWFeL01dQQSbFYalLb0y4LtDWKMFAOwSiig5rj5btvdxepeF66 XjL1EZkOjHwmCKZEhY6hMed2nv6TL7onwLwjzPs0aTHXS2+SETZm7hLVtxTQRS22 bO63sxUqGI/NTA2bgr0TcvMxeq9LLPCNIREG9TjcyZJA0YMpowsGd4GpC+vQ5qF7 zmdcr8ScIeb/Lg8hl+Ie6i5AQdULn1RdI3FIkoick0BM5X0bjeYRb8JX9UquOb1K q8ykRxoH7G9AW2eqjQC3RC5CojUkrOzkNHVjeBY1ZCfxJavgYke51YqE2Kn1jhF+ +C2BtuEjzReOrCmlRO88vQJuoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmKmABs mLg0UdjqGMCQsh4N9M6mMB8GA1UdIwQYMBaAFKX7MdTVEl98mq5QAzWkgPx3kI8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEExMy9CQjZDOUI1NEI5 ODAxMUVEQTM3QjFCNjVDNEY5QUUwMi9wZnN4MU5VU1gzeWFybEFETmFTQV9IZVFq eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Bmc3gxTlVTWDN5YXJsQUROYVNBX0hlUWp4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEExMy9CQjZDOUI1NEI5ODAxMUVEQTM3QjFCNjVDNEY5QUUwMi9wZnN4MU5VU1gz eWFybEFETmFTQV9IZVFqeFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzsZt/onBwZx2qqc+KTz4tulJ+dHhccx9L14TAvpZsZMpiFi0cE91b cKOGb36CBxmk4EIRhvUZqZFruHGEQenhgZ5ZXHjpaygwRQ/RM0YGjbDuAhTXkBNA YI9Z76GSuiP60VzkNdOSsDjZnaH7B9DIPIO//2DgScSwapDx3WP14i0dP6A27yRb WrxQyctYecIzi4f2mwA2bHoYGUl/RzhfYmfEEtFifY/ERi70f5GW4shfhl+OPJTh VlA//zeLGcP34JqkayagIuoaSHfV9ssB1VEC1JYxDYtINrRtBvSwK6Hu9DUxIEHs EmjjxThUWFNMMxctfFJNQOWElET/TurP -----END CERTIFICATE-----Generated at Sat Dec 6 20:06:32 2025 by rpki-client