This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
File: pGg4Xjj11YpziCOPLtMFVXig7V4.mft (raw, json)
Hash identifier: UmVvSMl6JIJAoffizmzxXPw0bjJnCuuTJGhnBvzf1rU=
Subject key identifier: 2A:28:FC:6D:C1:E4:97:14:F2:B5:0C:82:7D:11:D8:CB:F6:99:0B:A1
Authority key identifier: A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E
Certificate issuer: /CN=A91C5ED0/serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E
Certificate serial: 086C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
Manifest number: 2ADA
Signing time: Sat 06 Dec 2025 16:29:06 +0000
Manifest this update: Sat 06 Dec 2025 16:29:05 +0000
Manifest next update: Sat 13 Dec 2025 16:29:05 +0000
Files and hashes: 1: pGg4Xjj11YpziCOPLtMFVXig7V4.crl (hash: fONxl7Y/wNu0O0MG/Iqg3Phfayu9WcLq5/VGbO4+UAE=)
2: 54E2A752E17211ECA8128235C4F9AE02.roa (hash: DSrMI7Nowx4RDukf/foMtUodJX/NiInBR6IMaoe7AeM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl
rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2156 (0x86c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5ED0, serialNumber=A468385E38F5D58A7388238F2ED3055578A0ED5E
Validity
Not Before: Dec 6 16:29:05 2025 GMT
Not After : Dec 13 16:29:05 2025 GMT
Subject: CN=693459d2-66a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:a3:86:98:93:e7:7c:c5:7b:e5:df:4b:18:
ed:7a:d2:8f:6c:1c:37:d1:4c:c8:d5:b1:1d:60:70:
51:e2:ef:44:0b:5e:83:29:36:08:2b:00:4e:c2:66:
3f:6c:51:aa:66:77:2f:6f:4b:80:9c:3a:8f:4f:2e:
ea:4a:7f:00:ee:15:5e:71:d6:4f:ab:9e:9e:16:cd:
d9:b2:7e:35:e6:3f:d6:96:5e:58:7e:e5:ed:b2:81:
ca:40:67:ab:83:d0:04:4d:8d:ee:6b:98:69:2a:0e:
16:99:51:9d:a4:4e:d9:80:d3:f7:b3:29:f4:e5:ff:
09:f9:93:41:ba:c5:ca:89:8e:9a:4c:73:81:58:07:
96:7e:00:b3:7e:e3:0d:fd:02:d1:f1:f5:0d:73:1a:
79:44:8e:f8:95:b3:d1:8b:50:cd:7a:bc:ab:7f:19:
f1:08:16:f1:21:81:d6:a3:f0:fe:b4:da:b3:7f:26:
a8:1e:de:ac:42:86:28:f8:ab:2a:b0:6f:fe:8c:cf:
bf:e2:04:c3:17:a6:3d:35:7d:6c:c6:b8:03:b7:3e:
55:21:22:a9:f2:57:81:90:a3:25:ef:6f:6c:66:ff:
23:82:41:a8:20:34:f9:75:ac:65:8a:c5:23:15:2c:
0c:cc:0f:65:7f:b2:f1:e4:60:a2:70:8c:0a:6c:f5:
93:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:28:FC:6D:C1:E4:97:14:F2:B5:0C:82:7D:11:D8:CB:F6:99:0B:A1
X509v3 Authority Key Identifier:
keyid:A4:68:38:5E:38:F5:D5:8A:73:88:23:8F:2E:D3:05:55:78:A0:ED:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGg4Xjj11YpziCOPLtMFVXig7V4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/pGg4Xjj11YpziCOPLtMFVXig7V4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:2e:11:4c:ea:72:bb:92:3e:25:42:ec:7c:1f:6d:2d:2e:6b:
44:00:e9:32:c6:bb:ac:d2:31:8a:f0:a1:c1:6c:a8:e3:13:b7:
3f:dd:fd:38:41:40:c7:52:eb:46:d6:5a:02:63:0d:73:54:52:
1c:c8:2f:4f:87:61:28:b3:99:a8:c1:8d:1f:da:a2:42:95:0d:
b4:af:12:73:7f:3e:7a:da:b3:ee:2c:d1:be:7a:89:2f:4e:b9:
4c:48:46:29:49:81:73:07:7c:d2:fa:aa:51:b9:53:b2:e3:ea:
e2:c6:60:ba:f3:9a:84:52:24:ce:7f:b2:64:58:33:a8:5d:b9:
00:84:b0:02:20:84:fa:a7:33:e2:e5:8d:5f:6b:74:04:d7:51:
ca:77:9b:7d:5b:7f:14:86:e6:87:20:ef:94:40:01:6f:a5:16:
80:e7:f8:31:94:98:67:a9:8c:2e:3d:fa:2b:00:c3:de:c6:ec:
c9:1b:2a:e3:b9:ec:10:3f:ec:74:97:4e:b9:29:47:27:4c:d6:
25:f5:cb:c9:bd:a4:38:b2:de:60:14:10:81:c9:3e:f2:11:b7:
3a:40:33:64:89:67:a4:60:16:89:21:b4:95:f6:2d:6b:72:17:
66:7c:ae:a1:26:45:1c:0c:cc:9b:2c:70:28:a5:03:2f:f1:b2:
db:41:d4:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzVFRDAxMTAvBgNVBAUTKEE0NjgzODVFMzhGNUQ1OEE3Mzg4MjM4RjJFRDMwNTU1
NzhBMEVENUUwHhcNMjUxMjA2MTYyOTA1WhcNMjUxMjEzMTYyOTA1WjAYMRYwFAYD
VQQDEw02OTM0NTlkMi02NmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvIyjhpiT53zFe+XfSxjtetKPbBw30UzI1bEdYHBR4u9EC16DKTYIKwBOwmY/
bFGqZncvb0uAnDqPTy7qSn8A7hVecdZPq56eFs3Zsn415j/Wll5YfuXtsoHKQGer
g9AETY3ua5hpKg4WmVGdpE7ZgNP3syn05f8J+ZNBusXKiY6aTHOBWAeWfgCzfuMN
/QLR8fUNcxp5RI74lbPRi1DNeryrfxnxCBbxIYHWo/D+tNqzfyaoHt6sQoYo+Ksq
sG/+jM+/4gTDF6Y9NX1sxrgDtz5VISKp8leBkKMl729sZv8jgkGoIDT5daxlisUj
FSwMzA9lf7Lx5GCicIwKbPWTgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCoo/G3B
5JcU8rUMgn0R2Mv2mQuhMB8GA1UdIwQYMBaAFKRoOF449dWKc4gjjy7TBVV4oO1e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5
NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9wR2c0WGpqMTFZcHppQ09QTHRNRlZYaWc3
VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BHZzRYamoxMVlwemlDT1BMdE1GVlhpZzdWNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9wR2c0WGpqMTFZ
cHppQ09QTHRNRlZYaWc3VjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCLLhFM6nK7kj4lQux8H20tLmtEAOkyxrus0jGK8KHBbKjjE7c/3f04
QUDHUutG1loCYw1zVFIcyC9Ph2Eos5mowY0f2qJClQ20rxJzfz562rPuLNG+eokv
TrlMSEYpSYFzB3zS+qpRuVOy4+rixmC685qEUiTOf7JkWDOoXbkAhLACIIT6pzPi
5Y1fa3QE11HKd5t9W38UhuaHIO+UQAFvpRaA5/gxlJhnqYwuPforAMPexuzJGyrj
uewQP+x0l065KUcnTNYl9cvJvaQ4st5gFBCByT7yEbc6QDNkiWekYBaJIbSV9i1r
chdmfK6hJkUcDMybLHAopQMv8bLbQdSY
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:54:11 2025 by rpki-client