This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft File: pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft (raw, json) Hash identifier: pwENCOP8210+sdSdoPSS9QMfpnx/XDfNz9xgeSlWhrQ= Subject key identifier: 6E:6A:92:F5:8B:EA:EA:A9:42:E6:09:7C:35:89:5A:C6:25:2F:5C:28 Authority key identifier: A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3 Certificate issuer: /CN=A91DA736/serialNumber=A5AFA90890BF929181C031F0B8EDB194E3E169E3 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft Manifest number: 3E Signing time: Fri 05 Dec 2025 05:18:22 +0000 Manifest this update: Fri 05 Dec 2025 05:18:21 +0000 Manifest next update: Fri 12 Dec 2025 05:18:21 +0000 Files and hashes: 1: pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl (hash: 8bilP8RYuocCJo48TtPuj6XPeTo7GhvSLZG+Uc0pmes=) 2: 065E09BC732F11F09E8D4450C4F9AE02.roa (hash: fRjTeZ6sOZhL7w9XnHnzng0sCHnh1L73Q9iqK1QuMso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA736, serialNumber=A5AFA90890BF929181C031F0B8EDB194E3E169E3 Validity Not Before: Dec 5 05:18:21 2025 GMT Not After : Dec 12 05:18:21 2025 GMT Subject: CN=69326b1e-cb1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:28:55:7e:12:f8:8c:48:64:1c:38:f2:0d:8a: 25:df:52:1e:c1:35:6f:d4:02:37:7a:a3:00:e9:bf: 5a:be:8f:ba:9d:94:cb:b6:a4:f5:1f:1e:0b:a6:3c: 62:b7:b5:04:dc:8a:0e:c7:51:8c:4b:d6:a1:69:dc: 06:c9:ec:b6:76:bc:58:d3:49:ed:ff:eb:24:3b:23: 90:cb:b7:73:39:d3:72:f3:7a:48:2a:ae:c3:15:33: ac:27:65:05:ae:da:fc:d4:e2:f0:cc:9b:8c:d3:1b: 2e:2f:b0:96:59:37:5e:f1:ad:6a:cf:05:53:1d:61: d3:6f:60:2d:83:e9:53:5f:b3:d1:5a:be:52:88:ce: 86:fc:a7:ec:4a:8c:1a:5a:8e:a0:9e:e9:04:38:1f: 84:0e:90:7c:51:1f:1f:b1:8b:49:37:f1:c3:ee:ee: ed:9f:f1:a1:98:f3:27:bd:27:36:7c:09:de:cb:ec: fa:63:42:c1:2d:d8:0c:a7:74:8b:e0:c2:5a:52:32: d0:64:38:48:90:80:94:f9:e4:71:4b:2d:99:01:00: c5:8a:5c:b8:98:01:b1:d6:c7:21:7b:b1:1c:f7:b2: 4d:38:a1:a7:51:38:2c:88:69:bb:f1:f7:f6:23:49: 5e:4a:da:f4:3e:cc:7f:cc:24:c8:08:42:7d:9d:11: 73:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:6A:92:F5:8B:EA:EA:A9:42:E6:09:7C:35:89:5A:C6:25:2F:5C:28 X509v3 Authority Key Identifier: keyid:A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:db:af:1b:2f:a3:38:c6:ac:8f:c9:8a:93:68:51:83:ad:e6: 23:55:fc:c0:c6:cd:cf:5d:9c:75:60:74:f4:5d:6c:4a:2b:36: 2f:90:48:bb:3e:dc:be:45:12:49:85:0b:d3:cb:d8:79:19:7a: ce:3f:b7:07:8b:99:23:cc:f5:e4:d9:b6:5d:e1:e9:bf:f4:1c: 1b:8a:d1:6f:5c:0b:79:ee:23:ed:33:c6:86:b9:f0:ef:45:23: 4a:48:a7:b9:43:f8:65:68:ba:13:88:9e:6a:ce:54:89:f6:2e: fb:c0:87:49:5c:bb:04:e2:8c:89:6b:ec:7a:0b:06:60:cd:e2: 6d:c0:82:37:9e:7a:f5:bc:0a:cc:3d:15:d9:f8:03:81:87:71: 70:74:ef:21:c2:f5:1f:16:41:f9:a5:45:c6:0e:ae:8e:2f:35: fb:d1:74:33:58:da:d4:88:69:2a:f2:96:69:5f:87:ea:2a:88: 92:b7:9c:fd:a0:c7:6f:5d:90:00:ad:bb:c2:df:c5:e9:df:e6: 81:23:2e:f3:5b:44:75:e3:64:d9:f1:63:48:2b:b1:ff:1b:4c: c9:08:7a:d4:8a:f1:ed:d1:92:a6:33:1f:bb:73:fd:66:04:20: dc:7a:a1:de:8a:e4:0e:72:cc:a4:40:40:87:3e:ca:1a:94:cf: 94:34:fa:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QTczNjExMC8GA1UEBRMoQTVBRkE5MDg5MEJGOTI5MTgxQzAzMUYwQjhFREIxOTRF M0UxNjlFMzAeFw0yNTEyMDUwNTE4MjFaFw0yNTEyMTIwNTE4MjFaMBgxFjAUBgNV BAMTDTY5MzI2YjFlLWNiMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBKFV+EviMSGQcOPINiiXfUh7BNW/UAjd6owDpv1q+j7qdlMu2pPUfHgumPGK3 tQTcig7HUYxL1qFp3AbJ7LZ2vFjTSe3/6yQ7I5DLt3M503LzekgqrsMVM6wnZQWu 2vzU4vDMm4zTGy4vsJZZN17xrWrPBVMdYdNvYC2D6VNfs9FavlKIzob8p+xKjBpa jqCe6QQ4H4QOkHxRHx+xi0k38cPu7u2f8aGY8ye9JzZ8Cd7L7PpjQsEt2AyndIvg wlpSMtBkOEiQgJT55HFLLZkBAMWKXLiYAbHWxyF7sRz3sk04oadROCyIabvx9/Yj SV5K2vQ+zH/MJMgIQn2dEXMrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbmqS9Yvq 6qlC5gl8NYlaxiUvXCgwHwYDVR0jBBgwFoAUpa+pCJC/kpGBwDHwuO2xlOPhaeMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBNzM2LzVBNkQ4QjVDNzMy NzExRjBCMTUyNjQ2RkM0RjlBRTAyL3BhLXBDSkNfa3BHQndESHd1TzJ4bE9QaGFl TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGEtcENKQ19rcEdCd0RId3VPMnhsT1BoYWVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB NzM2LzVBNkQ4QjVDNzMyNzExRjBCMTUyNjQ2RkM0RjlBRTAyL3BhLXBDSkNfa3BH QndESHd1TzJ4bE9QaGFlTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKbbrxsvozjGrI/JipNoUYOt5iNV/MDGzc9dnHVgdPRdbEorNi+QSLs+ 3L5FEkmFC9PL2HkZes4/tweLmSPM9eTZtl3h6b/0HBuK0W9cC3nuI+0zxoa58O9F I0pIp7lD+GVouhOInmrOVIn2LvvAh0lcuwTijIlr7HoLBmDN4m3AgjeeevW8Csw9 Fdn4A4GHcXB07yHC9R8WQfmlRcYOro4vNfvRdDNY2tSIaSrylmlfh+oqiJK3nP2g x29dkACtu8Lfxenf5oEjLvNbRHXjZNnxY0grsf8bTMkIetSK8e3RkqYzH7tz/WYE INx6od6K5A5yzKRAQIc+yhqUz5Q0+vQ= -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:04 2025 by rpki-client