This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft File: PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft (raw, json) Hash identifier: 1yUcQgbtq8Qw2KVWhHQX3FAifnbi0yRjUKJRKe2VKwc= Subject key identifier: 3D:0C:79:08:DF:9A:EE:D2:1F:BD:AB:04:B6:1A:5E:77:A9:B4:D4:99 Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft Manifest number: 01A2 Signing time: Fri 05 Dec 2025 01:57:02 +0000 Manifest this update: Fri 05 Dec 2025 01:57:01 +0000 Manifest next update: Fri 12 Dec 2025 01:57:01 +0000 Files and hashes: 1: PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl (hash: JYVsQQi16C0kKQknNcvucBhNmhcXXL6Sia63Fit0dSk=) 2: A3E08ED6825711EFB7585B6FC4F9AE02.roa (hash: c6Y5sHXtnUIlloWQfNj0Oltc+Rkovm/FExQvQHllfw0=) 3: 23D4183024D711EF932FC941C4F9AE02.roa (hash: PEdc3Ajz5VckvHX4I+KQ2ScP909N/JzMHxUtf14BV6s=) 4: 1D98617687B311EFB4972044C4F9AE02.roa (hash: h8bAcU4fUoKskIhMDXeBIXC9uHuKpiNxD6RQQxWm6fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE09C, serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245 Validity Not Before: Dec 5 01:57:01 2025 GMT Not After : Dec 12 01:57:01 2025 GMT Subject: CN=69323bed-55d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:99:9f:32:04:fe:b3:c9:9c:24:13:e3:e8:4c: 8b:32:a6:d6:4c:39:17:c4:70:bd:ef:8c:09:70:64: 3d:00:9d:3b:96:11:02:b7:28:27:08:eb:fc:a2:1a: ea:d5:dc:01:9d:ce:55:21:91:93:8e:0d:06:7e:99: 8c:d5:a6:3d:5b:c9:18:2e:c1:a2:f5:c3:95:29:dd: f1:69:79:75:8f:d9:22:16:52:61:f3:96:f3:20:c4: f9:e9:a4:8e:d4:9f:2f:c1:81:73:63:65:5c:41:33: 6c:a2:aa:b8:26:70:d4:80:64:d0:3d:71:22:4b:0f: b5:e5:1b:1a:76:1b:37:bd:22:3d:66:e6:8a:f0:4a: cb:d8:a0:e9:3a:c9:63:ce:ef:07:32:86:57:f6:23: 91:49:79:cc:bd:65:00:8a:14:78:71:75:84:3f:1b: c8:81:99:f8:7b:3c:40:8e:21:b4:32:3c:48:66:be: 3a:15:2c:68:eb:b3:5b:6a:9d:3f:d2:a9:4b:da:80: f2:47:41:84:39:1f:83:8b:c8:70:b8:29:75:48:2b: 3e:f1:73:bf:72:eb:99:29:f5:f9:69:50:94:c1:d3: 84:78:51:fd:6a:5d:7f:75:a6:62:ae:92:d8:3b:f7: ae:d6:aa:fa:eb:0c:f9:e5:d1:e5:e7:32:6d:1f:c7: 61:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0C:79:08:DF:9A:EE:D2:1F:BD:AB:04:B6:1A:5E:77:A9:B4:D4:99 X509v3 Authority Key Identifier: keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:14:2d:6d:ad:4a:6e:34:2c:f9:a9:f2:9b:f5:41:3a:03:7c: a3:e8:11:40:8e:7a:fc:af:b3:3f:71:1e:4d:36:69:8e:9e:73: ab:4a:b7:48:38:6a:7b:c5:b7:92:af:10:b2:c4:79:44:b1:85: f7:d2:e4:4b:0c:21:b2:b7:9e:1f:cd:75:06:69:21:cc:fb:ea: 0c:18:e7:16:cd:f3:e6:97:07:1b:78:36:5c:6f:c0:04:b8:75: 64:1f:29:2d:6c:28:c2:76:9f:12:b6:b1:31:31:77:9f:1d:b1: 94:03:8d:a7:22:ff:c4:1e:86:dc:07:a7:23:7e:84:a1:be:31: f2:56:3e:d5:54:84:81:18:d2:f2:96:c5:9b:a3:9d:04:73:2d: ce:39:37:74:41:10:66:2a:86:44:e2:cb:9f:11:00:0a:79:52: 2e:da:99:3b:b3:af:6d:5a:86:48:60:3d:41:12:43:70:16:30: 8a:ea:14:11:f4:56:0b:5a:d8:82:bd:0b:1c:18:28:c0:06:f1: b6:b7:ab:5d:6f:78:ba:2f:7c:72:6c:f1:1b:a8:8c:bf:3a:de: 76:cb:6a:10:a7:4f:b6:2c:39:9e:47:46:6c:58:d6:82:b5:26: 63:0d:74:1c:c3:5e:3c:0d:50:3d:23:b9:c7:10:74:de:b4:be: 54:3f:8c:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUwOUMxMTAvBgNVBAUTKDNDNjlCOUI2MDFEMkM5RjJBMzkxNUE2RkZCQ0EzREFE NjJFOTkyNDUwHhcNMjUxMjA1MDE1NzAxWhcNMjUxMjEyMDE1NzAxWjAYMRYwFAYD VQQDEw02OTMyM2JlZC01NWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpmfMgT+s8mcJBPj6EyLMqbWTDkXxHC974wJcGQ9AJ07lhECtygnCOv8ohrq 1dwBnc5VIZGTjg0GfpmM1aY9W8kYLsGi9cOVKd3xaXl1j9kiFlJh85bzIMT56aSO 1J8vwYFzY2VcQTNsoqq4JnDUgGTQPXEiSw+15Rsadhs3vSI9ZuaK8ErL2KDpOslj zu8HMoZX9iORSXnMvWUAihR4cXWEPxvIgZn4ezxAjiG0MjxIZr46FSxo67Nbap0/ 0qlL2oDyR0GEOR+Di8hwuCl1SCs+8XO/cuuZKfX5aVCUwdOEeFH9al1/daZirpLY O/eu1qr66wz55dHl5zJtH8dhLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0MeQjf mu7SH72rBLYaXneptNSZMB8GA1UdIwQYMBaAFDxpubYB0snyo5Fab/vKPa1i6ZJF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTA5Qy9FRUY3NjJDMDkw NzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lmS2prVnB2LThvOXJXTHBr a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BHbTV0Z0hTeWZLamtWcHYtOG85cldMcGtrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTA5Qy9FRUY3NjJDMDkwNzUxMUVFODdEMjY2ODBDNEY5QUUwMi9QR201dGdIU3lm S2prVnB2LThvOXJXTHBra1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/FC1trUpuNCz5qfKb9UE6A3yj6BFAjnr8r7M/cR5NNmmOnnOrSrdI OGp7xbeSrxCyxHlEsYX30uRLDCGyt54fzXUGaSHM++oMGOcWzfPmlwcbeDZcb8AE uHVkHyktbCjCdp8StrExMXefHbGUA42nIv/EHobcB6cjfoShvjHyVj7VVISBGNLy lsWbo50Ecy3OOTd0QRBmKoZE4sufEQAKeVIu2pk7s69tWoZIYD1BEkNwFjCK6hQR 9FYLWtiCvQscGCjABvG2t6tdb3i6L3xybPEbqIy/Ot52y2oQp0+2LDmeR0ZsWNaC tSZjDXQcw148DVA9I7nHEHTetL5UP4xv -----END CERTIFICATE-----Generated at Sat Dec 6 21:27:29 2025 by rpki-client