This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft File: PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft (raw, json) Hash identifier: Zr0PMpwYddyDihetCy6zKiD0GW3xmG3JLKsEl11jlEg= Subject key identifier: 69:C4:8E:D8:AE:01:24:11:43:21:5E:EA:16:4B:A9:EA:13:F1:50:2F Authority key identifier: 3C:CE:EB:9D:20:59:CF:E9:F6:08:56:77:D4:B7:FA:26:4F:53:3A:0F Certificate issuer: /CN=A91A423D/serialNumber=3CCEEB9D2059CFE9F6085677D4B7FA264F533A0F Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft Manifest number: 18 Signing time: Wed 03 Dec 2025 06:02:28 +0000 Manifest this update: Wed 03 Dec 2025 06:02:28 +0000 Manifest next update: Wed 10 Dec 2025 06:02:28 +0000 Files and hashes: 1: PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl (hash: Wyqjnp6Mqq7KDbnCi+7qenOeI5Y5L3Gv9Fy75GvJzk0=) 2: DEE9FAB2B0A011F0B752B713C4F9AE02.roa (hash: OzIgivIWTesGqIFKDMHLDa65rC0IAhR7ENJM9kOUiG0=) 3: 2ECF71C4B0A111F0B537573FC4F9AE02.roa (hash: 1BBcWkcMpF06powsKVAV0f8YZkxmR/VN9BDTB/ElxGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A423D, serialNumber=3CCEEB9D2059CFE9F6085677D4B7FA264F533A0F Validity Not Before: Dec 3 06:02:28 2025 GMT Not After : Dec 10 06:02:28 2025 GMT Subject: CN=692fd274-3177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:92:2e:99:c8:c8:21:8a:a9:53:64:f9:a1:aa: 20:49:0a:27:5c:38:98:cd:cc:06:e6:99:88:9d:84: 54:07:74:d3:b1:50:0c:50:2b:91:5a:bd:b0:91:72: c6:58:5b:87:06:5b:e4:13:4a:fb:bf:3c:75:8d:e1: ee:f1:70:9a:aa:3b:f4:e6:7d:13:28:6d:e5:ca:c8: 06:59:51:ca:6c:51:f8:6c:32:5c:0f:79:40:87:b3: 6a:a0:c0:69:c3:c7:46:7d:19:fe:93:4a:89:fd:98: 47:cf:41:ff:71:f7:29:c0:73:45:c7:30:0f:2e:44: 09:ed:6a:26:e4:39:a3:33:f4:01:1b:0b:69:c4:ed: be:ff:9b:ca:d6:31:e1:73:b9:0b:56:d4:81:3e:34: 20:31:c1:d5:2f:5f:45:77:35:10:a4:31:b7:1e:37: 70:ad:72:02:09:6e:94:f5:4f:68:eb:e5:72:41:cd: 9b:a8:65:ad:10:7e:14:d3:96:25:39:a0:e2:d1:bc: be:70:fa:59:07:7b:b0:d4:e5:fb:8b:1e:b0:e6:51: 9d:da:02:8e:e7:62:44:6a:ff:bf:30:ab:85:10:f3: 6c:e2:83:63:07:c4:02:02:82:1e:68:5e:40:fd:5e: f0:bb:06:6d:b0:bc:6c:9f:9e:d0:99:a4:c2:1b:ab: 96:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C4:8E:D8:AE:01:24:11:43:21:5E:EA:16:4B:A9:EA:13:F1:50:2F X509v3 Authority Key Identifier: keyid:3C:CE:EB:9D:20:59:CF:E9:F6:08:56:77:D4:B7:FA:26:4F:53:3A:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:4e:15:7b:c3:8e:73:64:a3:0b:53:cd:05:5c:cf:9c:2c:50: 06:68:26:80:98:41:46:4d:13:db:1c:1a:76:bb:68:fe:94:3c: 42:ee:94:00:54:0a:03:71:d2:b4:cb:2c:4b:7d:a0:80:45:ca: 6a:74:98:8e:ac:38:0c:63:23:87:3f:44:e1:d6:eb:a9:b4:8f: ca:c0:dc:82:fb:10:d7:3d:3c:98:42:59:d3:91:8b:aa:b4:10: fa:30:bb:21:1e:34:55:b5:94:0b:a7:cb:1f:77:26:a2:1d:f8: f3:19:9a:45:33:09:2a:e6:31:c6:34:86:51:80:0c:66:ae:66: d4:fb:63:d4:32:b1:d2:b7:75:b6:37:43:ca:2e:19:ee:19:e7: 3e:1a:30:64:fc:08:24:0d:b8:f3:46:4a:6a:7e:c7:84:91:f0: 36:a2:95:19:2d:e8:41:e7:55:39:4f:f3:7a:2a:4d:ea:75:29: d6:dd:e3:32:98:5e:58:4c:8b:da:3f:3a:fc:74:8a:2d:e2:83: 03:0a:c7:b6:54:c1:e6:9c:56:21:8f:74:b4:3c:6b:57:bb:69: 5f:fc:8f:28:65:12:fa:ba:b1:ec:0c:74:9b:31:c7:f5:43:6c: 85:ea:3c:f5:55:c6:f0:06:02:75:7a:cd:d6:59:07:20:d3:95: c2:df:c5:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NDIzRDExMC8GA1UEBRMoM0NDRUVCOUQyMDU5Q0ZFOUY2MDg1Njc3RDRCN0ZBMjY0 RjUzM0EwRjAeFw0yNTEyMDMwNjAyMjhaFw0yNTEyMTAwNjAyMjhaMBgxFjAUBgNV BAMTDTY5MmZkMjc0LTMxNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEki6ZyMghiqlTZPmhqiBJCidcOJjNzAbmmYidhFQHdNOxUAxQK5FavbCRcsZY W4cGW+QTSvu/PHWN4e7xcJqqO/TmfRMobeXKyAZZUcpsUfhsMlwPeUCHs2qgwGnD x0Z9Gf6TSon9mEfPQf9x9ynAc0XHMA8uRAntaibkOaMz9AEbC2nE7b7/m8rWMeFz uQtW1IE+NCAxwdUvX0V3NRCkMbceN3CtcgIJbpT1T2jr5XJBzZuoZa0QfhTTliU5 oOLRvL5w+lkHe7DU5fuLHrDmUZ3aAo7nYkRq/78wq4UQ82zig2MHxAICgh5oXkD9 XvC7Bm2wvGyfntCZpMIbq5ajAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUacSO2K4B JBFDIV7qFkup6hPxUC8wHwYDVR0jBBgwFoAUPM7rnSBZz+n2CFZ31Lf6Jk9TOg8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0MjNEL0I5NzY5QkQ4QjA5 NTExRjA4QzE1Mjc3OEM0RjlBRTAyL1BNN3JuU0Jaei1uMkNGWjMxTGY2Sms5VE9n OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUE03cm5TQlp6LW4yQ0ZaMzFMZjZKazlUT2c4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 MjNEL0I5NzY5QkQ4QjA5NTExRjA4QzE1Mjc3OEM0RjlBRTAyL1BNN3JuU0Jaei1u MkNGWjMxTGY2Sms5VE9nOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFNOFXvDjnNkowtTzQVcz5wsUAZoJoCYQUZNE9scGna7aP6UPELulABU CgNx0rTLLEt9oIBFymp0mI6sOAxjI4c/ROHW66m0j8rA3IL7ENc9PJhCWdORi6q0 EPowuyEeNFW1lAunyx93JqId+PMZmkUzCSrmMcY0hlGADGauZtT7Y9QysdK3dbY3 Q8ouGe4Z5z4aMGT8CCQNuPNGSmp+x4SR8DailRkt6EHnVTlP83oqTep1Kdbd4zKY XlhMi9o/Ovx0ii3igwMKx7ZUweacViGPdLQ8a1e7aV/8jyhlEvq6sewMdJsxx/VD bIXqPPVVxvAGAnV6zdZZByDTlcLfxZQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:12 2025 by rpki-client