This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft File: PVlGAD7uVIrZXXlssYi3UcV82sg.mft (raw, json) Hash identifier: AjXEmrv+DZidZV7NwZwD3ZzEF6SoAusA7R+J+Dcbxk0= Subject key identifier: 0B:DF:B0:B7:C9:64:4E:4D:81:E1:2C:00:26:0B:2F:42:7B:E1:F6:1E Authority key identifier: 3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8 Certificate issuer: /CN=A91F9E0A/serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft Manifest number: 0111 Signing time: Fri 05 Dec 2025 03:03:55 +0000 Manifest this update: Fri 05 Dec 2025 03:03:55 +0000 Manifest next update: Fri 12 Dec 2025 03:03:55 +0000 Files and hashes: 1: PVlGAD7uVIrZXXlssYi3UcV82sg.crl (hash: XQe0eie4gxUxyyBa2qVAuJKKfLScBzYLh03NhA/omH8=) 2: D0CDFEEA406E11EFA085272AC4F9AE02.roa (hash: aewA7Recxf1QEkAlzyh8eNS8lnCo6hOfpjo3yvsUTtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E0A, serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8 Validity Not Before: Dec 5 03:03:55 2025 GMT Not After : Dec 12 03:03:55 2025 GMT Subject: CN=69324b9b-7b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9b:08:ca:49:d3:04:ef:ea:ae:2f:bf:e1:c6: 4b:09:bc:12:81:3c:00:ca:ed:05:22:f3:94:98:fb: c8:6b:c1:6c:da:de:c9:6e:63:79:05:c1:6e:8e:61: f8:bf:ed:35:af:d8:9c:70:03:33:8d:26:f2:f2:da: 19:ae:5f:dc:82:3c:28:43:20:3a:2b:ac:98:a3:0a: d3:19:b9:d7:61:3e:8f:7e:60:77:ba:83:71:9e:f7: b3:a4:4f:2d:39:af:2c:17:8c:46:75:d7:8c:1d:64: ae:11:a5:98:62:71:6d:c5:97:f3:48:58:eb:32:bc: a2:3d:ad:06:1a:49:5b:cb:8c:ce:09:5e:14:0b:4e: 25:b6:c2:a1:29:86:09:24:cd:37:97:d1:99:00:bd: ea:33:0a:76:64:df:43:66:a5:da:9e:27:dd:d6:70: a5:cc:dc:58:7b:a9:05:24:f6:46:76:8a:ed:c7:0b: f2:08:5c:b7:eb:48:50:fa:94:72:4d:1f:df:a6:69: b8:ba:7f:61:6b:80:dd:f8:6c:d6:9b:c7:0c:d9:45: 1d:d7:63:53:60:74:3a:9f:c6:83:8b:ee:03:13:4f: 0d:98:d2:81:27:ca:a9:24:3e:ff:c5:85:67:7d:18: 93:37:df:28:28:c7:6d:e0:a4:e0:2d:4e:77:d6:70: e1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:DF:B0:B7:C9:64:4E:4D:81:E1:2C:00:26:0B:2F:42:7B:E1:F6:1E X509v3 Authority Key Identifier: keyid:3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:39:e8:d9:f2:9b:94:22:9f:c5:63:b5:90:00:a2:9c:4f:a7: 5e:d2:d5:7b:d4:51:77:11:30:01:8c:06:aa:a9:c0:ef:97:17: 6e:9f:96:0d:47:f8:2e:08:f5:e7:7f:83:4b:fb:5e:9b:51:88: dc:e9:92:2a:79:e0:ed:47:76:3e:3c:c3:f5:d1:68:c2:a1:ef: 7d:55:45:ee:bf:6b:4d:1c:13:df:d0:84:7a:ce:f1:5f:c0:9d: d1:a9:b7:89:96:3e:f6:e8:a6:09:ef:8b:43:a0:d8:e8:36:3b: 29:06:b3:9a:f0:d7:38:e9:3d:11:8f:71:fc:f2:d7:b9:d2:67: 5c:ff:16:6b:81:99:e2:6b:39:6e:f9:01:3c:54:3c:0e:78:e5: 0c:92:d1:ab:11:35:68:9d:ae:f2:43:91:ae:c0:25:c6:f0:50: 3e:96:f9:48:c9:52:26:fc:cf:86:cd:f3:42:67:a7:4d:7a:20: 87:2a:0f:9a:9c:bb:7d:89:19:82:51:4f:5f:b6:fa:b3:13:a9: e8:d2:d3:40:d9:67:95:b8:de:8f:2f:92:ec:2c:13:a2:74:1e: e5:ef:c6:ae:47:f5:cc:ee:dc:44:d7:c7:3c:64:f9:c0:63:4d: 4c:e3:bd:4d:c6:b5:b4:a7:8d:9c:e4:2b:88:7c:59:0e:5d:06: d8:dd:91:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFMEExMTAvBgNVBAUTKDNENTk0NjAwM0VFRTU0OEFEOTVENzk2Q0IxODhCNzUx QzU3Q0RBQzgwHhcNMjUxMjA1MDMwMzU1WhcNMjUxMjEyMDMwMzU1WjAYMRYwFAYD VQQDEw02OTMyNGI5Yi03YjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpsIyknTBO/qri+/4cZLCbwSgTwAyu0FIvOUmPvIa8Fs2t7JbmN5BcFujmH4 v+01r9iccAMzjSby8toZrl/cgjwoQyA6K6yYowrTGbnXYT6PfmB3uoNxnvezpE8t Oa8sF4xGddeMHWSuEaWYYnFtxZfzSFjrMryiPa0GGklby4zOCV4UC04ltsKhKYYJ JM03l9GZAL3qMwp2ZN9DZqXanifd1nClzNxYe6kFJPZGdortxwvyCFy360hQ+pRy TR/fpmm4un9ha4Dd+GzWm8cM2UUd12NTYHQ6n8aDi+4DE08NmNKBJ8qpJD7/xYVn fRiTN98oKMdt4KTgLU531nDh4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvfsLfJ ZE5NgeEsACYLL0J74fYeMB8GA1UdIwQYMBaAFD1ZRgA+7lSK2V15bLGIt1HFfNrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUUwQS8wQkQ5ODVFODNF NjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9QVmxHQUQ3dVZJclpYWGxzc1lpM1VjVjgy c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BWbEdBRDd1VklyWlhYbHNzWWkzVWNWODJzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUUwQS8wQkQ5ODVFODNFNjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9QVmxHQUQ3dVZJ clpYWGxzc1lpM1VjVjgyc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDOejZ8puUIp/FY7WQAKKcT6de0tV71FF3ETABjAaqqcDvlxdun5YN R/guCPXnf4NL+16bUYjc6ZIqeeDtR3Y+PMP10WjCoe99VUXuv2tNHBPf0IR6zvFf wJ3RqbeJlj726KYJ74tDoNjoNjspBrOa8Nc46T0Rj3H88te50mdc/xZrgZniazlu +QE8VDwOeOUMktGrETVona7yQ5GuwCXG8FA+lvlIyVIm/M+GzfNCZ6dNeiCHKg+a nLt9iRmCUU9ftvqzE6no0tNA2WeVuN6PL5LsLBOidB7l78auR/XM7txE18c8ZPnA Y01M471NxrW0p42c5CuIfFkOXQbY3ZFy -----END CERTIFICATE-----Generated at Sun Dec 7 00:19:37 2025 by rpki-client