This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft File: PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft (raw, json) Hash identifier: Br20UAIL08KwE0U/gkL5l4i8YaZLC7utiE+l52JZRDI= Subject key identifier: 56:A4:8B:D5:03:0B:AA:30:C4:07:75:43:4F:1D:02:CB:AA:96:75:E1 Authority key identifier: 3E:03:FD:15:98:00:99:B5:BF:50:21:E9:0B:E1:F4:A7:7E:00:C7:9C Certificate issuer: /CN=A91538E7/serialNumber=3E03FD15980099B5BF5021E90BE1F4A77E00C79C Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgP9FZgAmbW_UCHpC-H0p34Ax5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft Manifest number: 0869 Signing time: Mon 22 Dec 2025 20:16:47 +0000 Manifest this update: Mon 22 Dec 2025 20:16:47 +0000 Manifest next update: Mon 29 Dec 2025 20:16:47 +0000 Files and hashes: 1: PgP9FZgAmbW_UCHpC-H0p34Ax5w.crl (hash: z94ac6sgF0LmcaG8lKy2u55wWhSTQ3sSvOpGhxOfKhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.crl rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgP9FZgAmbW_UCHpC-H0p34Ax5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=3E03FD15980099B5BF5021E90BE1F4A77E00C79C Validity Not Before: Dec 22 20:16:47 2025 GMT Not After : Dec 29 20:16:47 2025 GMT Subject: CN=6949a72f-a795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e9:e4:81:d9:e7:bf:ec:20:0a:c6:7b:80:f9: a4:16:c4:7f:a2:f2:eb:f4:75:80:af:f1:ef:ea:a1: 95:32:6a:c6:c1:b0:78:fc:cd:36:42:6d:09:b5:75: 44:e6:f6:4b:be:6b:cc:50:ee:7e:7a:d3:ff:dc:89: 43:fa:83:8b:98:75:d9:24:9f:cb:f8:48:f0:4e:11: d8:0a:56:33:2c:a2:f2:d7:27:fc:c2:85:60:e2:83: b3:ca:24:1a:1f:c6:29:2e:18:4d:77:94:cb:54:35: b5:cf:52:cf:f9:c2:cf:30:97:73:fe:3c:b5:43:13: ee:aa:7d:5f:86:f0:cf:9c:26:ff:a0:74:ce:35:a7: a5:43:20:09:e6:51:97:2f:26:3b:c2:74:e4:ae:10: da:24:de:d8:05:93:57:84:42:64:0c:d6:c6:0e:1e: e2:95:37:54:ae:7a:31:a8:f8:c3:69:f2:74:be:0f: 3e:eb:da:0b:44:99:6a:bb:8b:b1:95:66:bd:33:bf: 53:ea:61:c0:b7:a2:ed:39:15:1a:2f:49:f3:4d:81: ef:cd:73:fe:fd:e8:d0:f3:4a:7c:8f:cc:0b:d2:9b: a3:3f:f3:cb:55:d8:95:01:c4:ea:90:96:da:d3:0c: 27:e8:1f:5b:0e:cc:3a:47:16:dd:fc:ca:f6:15:0e: 4d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A4:8B:D5:03:0B:AA:30:C4:07:75:43:4F:1D:02:CB:AA:96:75:E1 X509v3 Authority Key Identifier: keyid:3E:03:FD:15:98:00:99:B5:BF:50:21:E9:0B:E1:F4:A7:7E:00:C7:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgP9FZgAmbW_UCHpC-H0p34Ax5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:73:2b:f4:49:ec:ba:63:4e:36:96:0c:54:cf:b1:11:51:f3: 15:8c:66:ff:01:62:70:63:99:c6:61:f3:7d:73:d3:70:bf:54: b7:7c:ca:d7:42:53:53:63:49:35:a1:4c:ea:61:07:b2:57:ec: 7d:ef:22:3c:7e:5e:87:1e:fa:ac:eb:4b:3b:0b:2e:fe:87:71: 35:37:a6:fb:1e:1b:c4:2e:59:60:fc:be:d6:1f:a7:12:2a:5f: 56:0a:c3:93:af:e1:22:2f:74:e0:1d:64:27:48:9f:c7:ae:81: 5b:a6:06:97:1f:09:66:39:ed:57:f1:14:5b:36:09:05:0f:cf: 70:86:3c:45:e3:0e:7b:91:b0:6a:3f:ea:a1:5a:d7:42:00:9d: fa:8c:74:ac:84:9e:81:4a:fd:53:df:e0:52:29:f3:b5:d5:8f: 36:91:55:ad:49:c7:d8:0a:41:ca:24:1c:f9:69:32:ae:58:ca: a4:76:c4:31:fa:83:c8:24:d6:c6:61:6b:46:23:b3:ba:0e:62: c7:ed:4c:e3:b4:87:4d:8b:5c:0e:a0:c0:cd:ea:23:45:3e:55: 3b:79:74:3d:57:a4:ac:43:8f:4f:85:29:5a:d3:96:0f:9d:1a: 84:2c:6c:dd:ce:b6:5b:b4:83:3f:ba:2a:f2:76:79:bf:c3:94: 81:e0:2f:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzhFNzExMC8GA1UEBRMoM0UwM0ZEMTU5ODAwOTlCNUJGNTAyMUU5MEJFMUY0QTc3 RTAwQzc5QzAeFw0yNTEyMjIyMDE2NDdaFw0yNTEyMjkyMDE2NDdaMBgxFjAUBgNV BAMMDTY5NDlhNzJmLWE3OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCa6eSB2ee/7CAKxnuA+aQWxH+i8uv0dYCv8e/qoZUyasbBsHj8zTZCbQm1dUTm 9ku+a8xQ7n560//ciUP6g4uYddkkn8v4SPBOEdgKVjMsovLXJ/zChWDig7PKJBof xikuGE13lMtUNbXPUs/5ws8wl3P+PLVDE+6qfV+G8M+cJv+gdM41p6VDIAnmUZcv JjvCdOSuENok3tgFk1eEQmQM1sYOHuKVN1SuejGo+MNp8nS+Dz7r2gtEmWq7i7GV Zr0zv1PqYcC3ou05FRovSfNNge/Nc/796NDzSnyPzAvSm6M/88tV2JUBxOqQltrT DCfoH1sOzDpHFt38yvYVDk3tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVqSL1QML qjDEB3VDTx0Cy6qWdeEwHwYDVR0jBBgwFoAUPgP9FZgAmbW/UCHpC+H0p34Ax5ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOEU3L0JGNDA0QTVBMDI2 NzExRUI4RTFDMzAxQUM0RjlBRTAyL1BnUDlGWmdBbWJXX1VDSHBDLUgwcDM0QXg1 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUGdQOUZaZ0FtYldfVUNIcEMtSDBwMzRBeDV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz OEU3L0JGNDA0QTVBMDI2NzExRUI4RTFDMzAxQUM0RjlBRTAyL1BnUDlGWmdBbWJX X1VDSHBDLUgwcDM0QXg1dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJtzK/RJ7LpjTjaWDFTPsRFR8xWMZv8BYnBjmcZh831z03C/VLd8ytdC U1NjSTWhTOphB7JX7H3vIjx+Xoce+qzrSzsLLv6HcTU3pvseG8QuWWD8vtYfpxIq X1YKw5Ov4SIvdOAdZCdIn8eugVumBpcfCWY57VfxFFs2CQUPz3CGPEXjDnuRsGo/ 6qFa10IAnfqMdKyEnoFK/VPf4FIp87XVjzaRVa1Jx9gKQcokHPlpMq5YyqR2xDH6 g8gk1sZha0Yjs7oOYsftTOO0h02LXA6gwM3qI0U+VTt5dD1XpKxDj0+FKVrTlg+d GoQsbN3Otlu0gz+6KvJ2eb/DlIHgLws= -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:38 2025 by rpki-client