This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft File: pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft (raw, json) Hash identifier: 4A8QEZ28kRuv/uqJIEDCJkL340WkYMFrEznyLWG3dJQ= Subject key identifier: 7E:37:42:63:48:09:E4:0E:E0:7E:ED:B5:A3:E6:CD:C8:2B:37:24:F7 Authority key identifier: A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66 Certificate issuer: /CN=A91E3B25/serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66 Certificate serial: 172B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft Manifest number: 208E Signing time: Thu 18 Dec 2025 16:29:40 +0000 Manifest this update: Thu 18 Dec 2025 16:29:40 +0000 Manifest next update: Thu 25 Dec 2025 16:29:40 +0000 Files and hashes: 1: pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl (hash: 4gzbGtzODrVd11gqFH6DsM7oImzF3aDhJH4LWZN20lc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5931 (0x172b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25, serialNumber=A60C9821F530B0D53A67A98B767196C40A2D5A66 Validity Not Before: Dec 18 16:29:40 2025 GMT Not After : Dec 25 16:29:40 2025 GMT Subject: CN=69442bf4-52c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:00:1a:7b:c4:5a:54:94:4c:33:da:17:d2:1d: 09:95:e0:a3:1c:f6:29:25:80:b3:5e:b6:2c:dd:e9: 02:80:22:a8:20:ca:58:fa:db:9a:30:87:8f:92:a4: 22:5b:12:82:85:67:7f:e6:aa:47:ce:d9:7a:e9:4c: a3:05:10:2f:c3:79:47:5c:c0:b5:1d:0d:7a:1d:38: 91:27:76:21:04:7d:a1:f1:67:a2:ce:f5:99:6e:3b: db:1e:15:27:56:05:d2:62:cc:05:3b:a6:ac:d6:d2: e8:a8:a6:df:dc:50:9e:19:17:a1:3d:66:33:51:3c: 5d:36:91:67:56:5d:f5:bd:1d:22:9f:e1:00:fc:05: ae:83:6e:f2:e7:1e:1e:d8:60:83:2d:d7:25:78:43: f7:b7:f0:c2:1f:64:44:bc:4f:42:47:fd:8b:25:3b: 4c:a9:d9:7b:fd:9d:85:49:e5:67:34:e1:69:90:31: cd:b8:e5:ef:44:6f:3a:d1:45:cc:61:bc:86:22:14: 0c:14:7e:c8:54:61:30:83:1f:f3:ae:f2:12:ba:10: a5:1f:1c:b5:38:f3:7b:34:c8:09:d7:6e:09:a5:ee: e5:05:62:de:f8:f0:13:9f:4a:3b:6f:b8:38:b9:22: ce:d2:50:ed:f6:95:25:c4:fe:d6:3c:e6:06:f3:1a: 92:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:37:42:63:48:09:E4:0E:E0:7E:ED:B5:A3:E6:CD:C8:2B:37:24:F7 X509v3 Authority Key Identifier: keyid:A6:0C:98:21:F5:30:B0:D5:3A:67:A9:8B:76:71:96:C4:0A:2D:5A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgyYIfUwsNU6Z6mLdnGWxAotWmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/pgyYIfUwsNU6Z6mLdnGWxAotWmY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:2b:d4:01:6d:e0:ca:85:5c:35:74:89:a4:8c:c0:ea:11:55: 77:53:d6:30:a6:59:2e:f9:ac:65:1f:50:c1:80:74:2c:a9:8f: ee:b9:db:d2:bd:af:d3:a9:cc:96:d8:22:bf:14:1b:b1:03:f6: fb:de:56:fa:3a:27:c2:db:1e:a4:fb:65:61:ff:29:54:d4:fc: 9b:c8:ef:89:c5:83:f9:a9:41:c4:21:26:99:c0:d5:4f:b6:9f: 8c:87:35:f7:b5:68:19:6e:b6:c0:34:2d:f4:99:18:5e:c5:d7: 6e:58:b0:79:51:ba:81:5d:45:2e:5d:e2:c0:e1:ba:cd:1c:b3: 2a:27:2e:e5:70:72:42:52:be:b5:4f:6b:74:df:ee:6a:66:a3: 3d:30:cb:f5:b8:fc:98:d4:e2:fe:65:22:38:1b:e1:8e:53:6b: 64:72:39:a7:a2:50:a0:05:1b:9e:64:e4:ce:c7:9a:ee:5b:97: 96:9e:1b:91:a1:d7:73:07:3f:e9:9c:3e:6f:b9:18:7a:23:19: 1e:0b:36:04:a6:08:7d:9f:68:d0:0d:d9:10:bf:45:fc:9d:3b: 32:06:f6:e5:f9:e4:5e:c9:37:da:fe:bc:54:7f:d2:83:23:91: fe:de:32:76:b9:79:42:03:0b:d7:88:9d:86:39:95:05:2b:fc: ce:15:29:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEE2MEM5ODIxRjUzMEIwRDUzQTY3QTk4Qjc2NzE5NkM0 MEEyRDVBNjYwHhcNMjUxMjE4MTYyOTQwWhcNMjUxMjI1MTYyOTQwWjAYMRYwFAYD VQQDDA02OTQ0MmJmNC01MmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5wAae8RaVJRMM9oX0h0JleCjHPYpJYCzXrYs3ekCgCKoIMpY+tuaMIePkqQi WxKChWd/5qpHztl66UyjBRAvw3lHXMC1HQ16HTiRJ3YhBH2h8WeizvWZbjvbHhUn VgXSYswFO6as1tLoqKbf3FCeGRehPWYzUTxdNpFnVl31vR0in+EA/AWug27y5x4e 2GCDLdcleEP3t/DCH2REvE9CR/2LJTtMqdl7/Z2FSeVnNOFpkDHNuOXvRG860UXM YbyGIhQMFH7IVGEwgx/zrvISuhClHxy1OPN7NMgJ124Jpe7lBWLe+PATn0o7b7g4 uSLO0lDt9pUlxP7WPOYG8xqSaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH43QmNI CeQO4H7ttaPmzcgrNyT3MB8GA1UdIwQYMBaAFKYMmCH1MLDVOmepi3ZxlsQKLVpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi9wZ3lZSWZVd3NOVTZaNm1MZG5HV3hBb3RX bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BneVlJZlV3c05VNlo2bUxkbkdXeEFvdFdtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0IyNS83RTg5MkNDMkY2MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi9wZ3lZSWZVd3NO VTZaNm1MZG5HV3hBb3RXbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6K9QBbeDKhVw1dImkjMDqEVV3U9Ywplku+axlH1DBgHQsqY/uudvS va/TqcyW2CK/FBuxA/b73lb6OifC2x6k+2Vh/ylU1PybyO+JxYP5qUHEISaZwNVP tp+MhzX3tWgZbrbANC30mRhexdduWLB5UbqBXUUuXeLA4brNHLMqJy7lcHJCUr61 T2t03+5qZqM9MMv1uPyY1OL+ZSI4G+GOU2tkcjmnolCgBRueZOTOx5ruW5eWnhuR oddzBz/pnD5vuRh6IxkeCzYEpgh9n2jQDdkQv0X8nTsyBvbl+eReyTfa/rxUf9KD I5H+3jJ2uXlCAwvXiJ2GOZUFK/zOFSlp -----END CERTIFICATE-----Generated at Fri Dec 19 05:43:41 2025 by rpki-client