This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft File: pBG7PJekzTyP_HCtY6ny7JaSrbc.mft (raw, json) Hash identifier: M2YZzSMAWJYLR94AgujJzzCiewqmotQtQTJo0pLdEqU= Subject key identifier: E4:03:FC:D4:ED:3B:33:53:82:B1:0E:F3:A5:C0:E3:46:A5:48:B4:9D Authority key identifier: A4:11:BB:3C:97:A4:CD:3C:8F:FC:70:AD:63:A9:F2:EC:96:92:AD:B7 Certificate issuer: /CN=A91EFD20/serialNumber=A411BB3C97A4CD3C8FFC70AD63A9F2EC9692ADB7 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBG7PJekzTyP_HCtY6ny7JaSrbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft Manifest number: 20 Signing time: Fri 05 Dec 2025 03:05:59 +0000 Manifest this update: Fri 05 Dec 2025 03:05:58 +0000 Manifest next update: Fri 12 Dec 2025 03:05:58 +0000 Files and hashes: 1: pBG7PJekzTyP_HCtY6ny7JaSrbc.crl (hash: ncCR8r1l8YWDM1/6r2Rl6in3hnMhcEQ2kB+2JK6igdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.crl rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBG7PJekzTyP_HCtY6ny7JaSrbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFD20, serialNumber=A411BB3C97A4CD3C8FFC70AD63A9F2EC9692ADB7 Validity Not Before: Dec 5 03:05:58 2025 GMT Not After : Dec 12 03:05:58 2025 GMT Subject: CN=69324c17-3ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:b8:10:ea:6a:a7:f9:92:e1:00:7f:38:51: ca:bb:d9:99:60:92:0a:2d:b6:0f:bf:ff:47:b3:52: 9a:80:60:7c:3c:91:2b:67:8c:2d:ed:6f:00:76:1e: b3:9d:eb:02:bc:5e:e6:ec:21:50:60:bf:0d:db:f2: b7:6e:07:a8:5f:04:05:07:bc:85:12:64:4f:38:d4: 37:2c:a0:60:18:5e:24:f6:79:e0:5e:d8:19:6a:37: e6:7a:f2:13:b1:d1:09:cd:11:b9:20:ed:9d:b4:cf: f8:40:18:03:c5:31:31:40:96:22:f6:28:4d:fa:be: 0d:8d:90:63:49:8c:11:06:9c:78:79:a1:20:bc:a1: f0:7a:7c:ff:e2:2f:74:f5:9c:3d:56:9e:55:ad:fe: 32:b7:e1:1c:b9:5f:59:03:e7:eb:b1:04:86:80:4e: 12:1b:c7:dd:d8:8e:8c:9d:7f:0b:37:e5:08:24:c9: 44:f9:5c:32:a0:88:73:71:a7:ce:02:82:ba:53:31: 61:fe:7e:19:91:eb:1c:95:2c:ec:90:73:51:88:66: b0:20:e9:7c:52:d6:75:07:d4:2e:f0:90:59:40:ce: d6:98:d2:6c:04:cd:f0:21:60:41:1e:88:b8:51:2b: db:1b:15:94:f6:be:37:74:4d:f3:0d:5b:e8:42:8d: 0d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:03:FC:D4:ED:3B:33:53:82:B1:0E:F3:A5:C0:E3:46:A5:48:B4:9D X509v3 Authority Key Identifier: keyid:A4:11:BB:3C:97:A4:CD:3C:8F:FC:70:AD:63:A9:F2:EC:96:92:AD:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBG7PJekzTyP_HCtY6ny7JaSrbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:15:6b:c1:52:a5:42:29:8e:ec:07:1a:9f:e3:9c:68:7e:de: 9b:ca:01:77:5f:32:5b:2d:25:46:27:1f:3b:a2:d3:f0:d4:7b: ce:6f:68:2b:77:25:a5:8d:c7:04:8f:5f:7e:0d:5a:7e:17:f3: c1:c2:f3:97:5f:cd:29:06:14:20:48:3e:f7:50:62:40:8e:a0: c4:d8:0a:4e:46:a4:83:88:ec:b7:e1:fa:0f:b2:d6:71:e2:31: 64:e9:f2:41:fd:b3:09:c1:ce:a4:79:4f:7a:f6:2c:c0:a4:f1: 1c:53:93:9f:ce:7f:b3:01:ae:c8:ef:25:a2:1e:b2:58:d8:3e: 86:16:8f:d6:0f:d9:4b:72:ec:8f:8d:7f:c7:1b:f9:e7:81:9c: 4f:a9:1f:c3:77:49:ce:3b:04:02:a8:e5:31:0c:9b:d8:f8:33: 97:84:69:05:b8:f6:61:a0:61:70:be:ee:a3:ee:d4:e6:20:24: 1b:d4:01:83:60:dc:aa:d5:e8:b2:8a:70:3b:0e:7c:fb:24:11: c9:c9:f2:d8:29:93:d3:e0:71:7e:4c:0b:3c:68:35:1f:9c:53: 34:68:99:19:31:2d:66:ad:0a:66:2c:f3:da:4a:ac:d3:8e:b5: 76:33:9a:fa:18:da:0b:64:24:ea:e5:ce:10:7f:0e:b0:4b:6d: ec:1b:34:dc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RkQyMDExMC8GA1UEBRMoQTQxMUJCM0M5N0E0Q0QzQzhGRkM3MEFENjNBOUYyRUM5 NjkyQURCNzAeFw0yNTEyMDUwMzA1NThaFw0yNTEyMTIwMzA1NThaMBgxFjAUBgNV BAMTDTY5MzI0YzE3LTNlZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0nrgQ6mqn+ZLhAH84Ucq72Zlgkgottg+//0ezUpqAYHw8kStnjC3tbwB2HrOd 6wK8XubsIVBgvw3b8rduB6hfBAUHvIUSZE841DcsoGAYXiT2eeBe2BlqN+Z68hOx 0QnNEbkg7Z20z/hAGAPFMTFAliL2KE36vg2NkGNJjBEGnHh5oSC8ofB6fP/iL3T1 nD1WnlWt/jK34Ry5X1kD5+uxBIaAThIbx93Yjoydfws35QgkyUT5XDKgiHNxp84C grpTMWH+fhmR6xyVLOyQc1GIZrAg6XxS1nUH1C7wkFlAztaY0mwEzfAhYEEeiLhR K9sbFZT2vjd0TfMNW+hCjQ2VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5AP81O07 M1OCsQ7zpcDjRqVItJ0wHwYDVR0jBBgwFoAUpBG7PJekzTyP/HCtY6ny7JaSrbcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGRDIwL0MyNkZBMjc2QTFE QTExRjA4MEIyNjQ1M0M0RjlBRTAyL3BCRzdQSmVrelR5UF9IQ3RZNm55N0phU3Ji Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcEJHN1BKZWt6VHlQX0hDdFk2bnk3SmFTcmJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG RDIwL0MyNkZBMjc2QTFEQTExRjA4MEIyNjQ1M0M0RjlBRTAyL3BCRzdQSmVrelR5 UF9IQ3RZNm55N0phU3JiYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKUVa8FSpUIpjuwHGp/jnGh+3pvKAXdfMlstJUYnHzui0/DUe85vaCt3 JaWNxwSPX34NWn4X88HC85dfzSkGFCBIPvdQYkCOoMTYCk5GpIOI7Lfh+g+y1nHi MWTp8kH9swnBzqR5T3r2LMCk8RxTk5/Of7MBrsjvJaIesljYPoYWj9YP2Uty7I+N f8cb+eeBnE+pH8N3Sc47BAKo5TEMm9j4M5eEaQW49mGgYXC+7qPu1OYgJBvUAYNg 3KrV6LKKcDsOfPskEcnJ8tgpk9PgcX5MCzxoNR+cUzRomRkxLWatCmYs89pKrNOO tXYzmvoY2gtkJOrlzhB/DrBLbewbNNw= -----END CERTIFICATE-----Generated at Sat Dec 6 22:02:38 2025 by rpki-client