This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft File: PfG7945KTnVEGahIyf0My9LmpFg.mft (raw, json) Hash identifier: chvZj8qdl5rhoP8gxBzN06RDBCd+FQtO4czNLCinp5U= Subject key identifier: 43:E9:04:7D:79:A6:1F:03:52:C2:EA:BF:A5:D4:8D:6A:4B:A9:16:32 Authority key identifier: 3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 Certificate issuer: /CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Certificate serial: 023B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft Manifest number: 0232 Signing time: Fri 05 Dec 2025 00:19:57 +0000 Manifest this update: Fri 05 Dec 2025 00:19:56 +0000 Manifest next update: Fri 12 Dec 2025 00:19:56 +0000 Files and hashes: 1: PfG7945KTnVEGahIyf0My9LmpFg.crl (hash: XlC2t8g/vK2BDFAkxk69gyix0rICI5P1tJeGLcYQSGE=) 2: 74A3C1988E8311ED903ADA1CC4F9AE02.roa (hash: 0Ty6Wy83nXEuGUo3EX3HWpgQzq88t3uK3cVK224snpU=) 3: D6E2AAC0772911ED95084884C4F9AE02.roa (hash: cj6biBNtaUtX7+44SxYYBzzhO476/vbaxRtf96Tl68E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 571 (0x23b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1052, serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Validity Not Before: Dec 5 00:19:56 2025 GMT Not After : Dec 12 00:19:56 2025 GMT Subject: CN=6932252c-a689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:12:26:44:d6:6e:d5:22:ca:fe:1a:57:76:d4: dc:50:e0:03:18:b4:d4:18:0d:98:c4:fd:50:87:cc: a3:40:da:45:fd:25:2a:cd:dd:c5:c0:72:e9:c3:8b: f5:18:7e:7a:80:3a:b5:ab:82:ee:28:18:51:23:28: 14:64:30:a0:f6:bf:8c:ab:c5:19:f7:c4:94:22:13: 5e:45:93:25:6f:b6:64:1b:24:8a:59:74:13:24:5c: ec:69:a5:d4:20:09:df:02:45:24:d0:da:97:8b:1b: 5a:d5:08:fc:cd:98:99:95:4d:93:03:48:45:b5:96: 56:52:e8:a3:16:41:e9:54:5f:cf:a3:82:19:d8:60: 88:db:22:b0:c2:a1:a5:3e:00:a3:d0:80:5a:03:b5: a3:23:16:40:89:41:52:76:09:78:36:48:b5:7f:b3: 85:1e:5a:d0:9d:59:fc:3e:ca:e9:98:56:1e:02:62: 47:eb:bb:31:61:2e:86:c8:1b:3a:13:71:59:cf:df: 98:70:21:69:c0:14:80:d7:04:69:c2:af:80:97:76: 8f:5f:58:ee:03:4b:ba:50:26:2d:17:28:be:95:1d: c3:65:2f:0f:26:d7:01:e3:a6:ff:86:f0:c5:17:79: 35:a5:da:ef:12:33:49:36:f0:00:30:00:32:eb:0f: 6f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E9:04:7D:79:A6:1F:03:52:C2:EA:BF:A5:D4:8D:6A:4B:A9:16:32 X509v3 Authority Key Identifier: keyid:3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:23:5b:df:cc:e6:26:20:f9:52:f4:91:90:8b:2c:ee:46:50: 82:34:93:87:cf:d0:c5:5f:c0:53:b7:8e:c2:9e:b2:f3:cd:93: 10:f3:4c:a5:42:53:46:f4:09:7f:a8:4f:ef:1f:29:d0:f7:e5: ee:60:9b:c5:cb:cf:bb:33:04:51:37:e7:a6:f5:d3:f1:01:80: 9b:ce:c0:fe:49:03:ed:1c:47:55:d0:4c:3f:62:8a:d5:ed:c7: 0b:c6:cd:dd:cc:f6:3e:95:75:1c:a5:68:81:b3:dc:19:e5:a1: bc:9b:46:a0:a0:91:60:93:14:18:31:1a:53:c0:68:6d:da:28: 1b:8d:50:11:34:16:d2:98:68:ce:cc:4a:3e:86:7e:86:18:a4: 41:27:87:bb:0c:24:16:57:d4:80:15:5a:35:18:b2:d9:9a:1e: b9:0a:59:35:42:14:c0:8b:08:6c:a9:54:0f:e3:a5:c3:86:fb: 2d:13:f8:f9:02:07:73:28:d1:2b:eb:07:47:57:1a:c0:bf:c9: fb:6f:ec:07:27:8b:72:fb:ee:fb:46:1e:40:49:bd:43:f2:75: f9:e0:10:c9:11:ae:70:68:a7:fc:f5:50:00:0a:2e:40:0a:07: 2f:9a:ba:ac:89:3b:80:e8:33:e5:fa:bf:04:b1:65:3b:1f:1c: 1c:6f:9c:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwNTIxMTAvBgNVBAUTKDNERjFCQkY3OEU0QTRFNzU0NDE5QTg0OEM5RkQwQ0NC RDJFNkE0NTgwHhcNMjUxMjA1MDAxOTU2WhcNMjUxMjEyMDAxOTU2WjAYMRYwFAYD VQQDEw02OTMyMjUyYy1hNjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnBImRNZu1SLK/hpXdtTcUOADGLTUGA2YxP1Qh8yjQNpF/SUqzd3FwHLpw4v1 GH56gDq1q4LuKBhRIygUZDCg9r+Mq8UZ98SUIhNeRZMlb7ZkGySKWXQTJFzsaaXU IAnfAkUk0NqXixta1Qj8zZiZlU2TA0hFtZZWUuijFkHpVF/Po4IZ2GCI2yKwwqGl PgCj0IBaA7WjIxZAiUFSdgl4Nki1f7OFHlrQnVn8PsrpmFYeAmJH67sxYS6GyBs6 E3FZz9+YcCFpwBSA1wRpwq+Al3aPX1juA0u6UCYtFyi+lR3DZS8PJtcB46b/hvDF F3k1pdrvEjNJNvAAMAAy6w9vPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPpBH15 ph8DUsLqv6XUjWpLqRYyMB8GA1UdIwQYMBaAFD3xu/eOSk51RBmoSMn9DMvS5qRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTA1Mi84MDZGQjI3Njc3 MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1RuVkVHYWhJeWYwTXk5TG1w RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmRzc5NDVLVG5WRUdhaEl5ZjBNeTlMbXBGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTA1Mi84MDZGQjI3Njc3MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1Ru VkVHYWhJeWYwTXk5TG1wRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXI1vfzOYmIPlS9JGQiyzuRlCCNJOHz9DFX8BTt47CnrLzzZMQ80yl QlNG9Al/qE/vHynQ9+XuYJvFy8+7MwRRN+em9dPxAYCbzsD+SQPtHEdV0Ew/YorV 7ccLxs3dzPY+lXUcpWiBs9wZ5aG8m0agoJFgkxQYMRpTwGht2igbjVARNBbSmGjO zEo+hn6GGKRBJ4e7DCQWV9SAFVo1GLLZmh65Clk1QhTAiwhsqVQP46XDhvstE/j5 AgdzKNEr6wdHVxrAv8n7b+wHJ4ty++77Rh5ASb1D8nX54BDJEa5waKf89VAACi5A CgcvmrqsiTuA6DPl+r8EsWU7Hxwcb5w5 -----END CERTIFICATE-----Generated at Sat Dec 6 22:04:29 2025 by rpki-client