This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft File: Pgw5tVhKz65BgIE4j08KlNbajgY.mft (raw, json) Hash identifier: fHRjRJ2Ulvnr3hG00GXvG/5qTEAKlyym5qRqNgAH4GI= Subject key identifier: 6C:01:E8:B0:3A:67:54:5C:59:38:59:81:3C:1B:ED:1F:AB:26:1F:D3 Authority key identifier: 3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06 Certificate issuer: /CN=A91BD7A3/serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft Manifest number: 08 Signing time: Wed 03 Dec 2025 06:11:19 +0000 Manifest this update: Wed 03 Dec 2025 06:11:18 +0000 Manifest next update: Wed 10 Dec 2025 06:11:18 +0000 Files and hashes: 1: Pgw5tVhKz65BgIE4j08KlNbajgY.crl (hash: enzg7G6DYhD+wKUNYuXnSdcdfjPqJHCp31lUM46QXTI=) 2: 132F5C52C52511F0B4A6F21BC4F9AE02.roa (hash: /Y2EdOVMEdELF6kWc09Ad/zaSKbdqBOuMsA2OetL/fM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD7A3, serialNumber=3E0C39B5584ACFAE418081388F4F0A94D6DA8E06 Validity Not Before: Dec 3 06:11:18 2025 GMT Not After : Dec 10 06:11:18 2025 GMT Subject: CN=692fd487-35d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:91:40:03:2f:ef:d1:6e:59:c5:93:a3:a6:6c: 96:4c:04:ac:8f:18:e8:e7:91:44:00:a8:8b:4a:e4: 2c:7b:cb:23:83:ad:cb:35:14:18:ed:0e:70:88:ad: 13:23:95:08:ac:6b:08:03:38:5b:15:13:04:ca:5b: dc:b2:c2:13:af:ec:4f:ab:35:a0:50:ef:78:88:f7: a5:bf:fc:b3:e8:05:3b:37:71:3d:38:bc:ce:fc:f3: e0:84:ed:79:d5:6d:3b:8e:0f:99:5d:d8:e1:4a:59: aa:b5:12:08:70:12:44:80:ce:93:a7:d4:8f:6c:6e: bb:93:26:90:3c:04:1d:2d:49:bd:ec:a4:03:d5:af: 20:c0:d7:a4:6a:35:3a:fd:6f:4f:bb:ec:17:10:f8: 9a:0e:84:eb:2f:c5:2f:1c:53:78:5e:a9:e4:42:9a: 0f:b1:13:cb:40:36:a3:fa:d2:3f:1f:80:d7:d4:4f: 57:e4:0c:51:ac:08:0b:a7:02:57:44:f3:58:eb:1b: d3:82:fc:1e:fc:37:b4:fc:4c:a1:e0:81:02:43:c6: 5b:d3:e1:1a:d8:e9:70:35:0a:ed:9a:eb:02:5d:d6: 31:a4:7a:a6:da:a7:99:6c:10:2e:7b:54:43:cb:57: 5b:f0:ea:9f:81:73:55:84:4e:04:a2:c8:94:77:cc: 56:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:01:E8:B0:3A:67:54:5C:59:38:59:81:3C:1B:ED:1F:AB:26:1F:D3 X509v3 Authority Key Identifier: keyid:3E:0C:39:B5:58:4A:CF:AE:41:80:81:38:8F:4F:0A:94:D6:DA:8E:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pgw5tVhKz65BgIE4j08KlNbajgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD7A3/8F06025AC52411F0A2A4DD1AC4F9AE02/Pgw5tVhKz65BgIE4j08KlNbajgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:68:8a:2e:87:b2:7e:6d:47:99:9e:d3:d7:5c:48:14:28:10: 8d:d1:7a:b3:e2:1e:83:8a:c3:68:ec:6c:29:f7:66:79:50:e1: 10:00:11:cc:23:d9:9f:9c:8f:cd:13:d7:bb:26:11:61:6a:c1: 10:7c:e7:22:3a:30:05:37:6e:22:c4:d4:2b:50:1c:70:af:2b: d0:5c:a4:2e:ee:ec:64:c9:d5:30:df:ea:ef:c0:f9:75:80:18: e9:70:37:5f:1c:fe:ec:28:8a:32:81:d9:9d:d9:fe:6f:4c:c3: 99:b8:9b:15:16:99:34:ed:72:7e:32:c4:5f:71:82:49:f1:2c: ff:1f:c8:a9:6a:c2:1a:f8:0b:85:22:d9:b3:c3:e4:12:32:6a: 7b:97:62:0c:c7:89:b4:ef:77:b7:4c:cb:e4:b3:10:58:cf:87: 9e:b6:7a:64:bd:3b:93:d7:75:ba:7a:ae:1d:f9:78:e2:38:9f: d4:b7:32:ff:e9:a2:a2:c7:e3:57:76:9f:b0:23:30:14:3e:83: 5b:6b:63:97:5a:99:a4:f3:1d:b2:03:39:74:7a:44:df:7f:84: 00:b5:b6:13:44:15:2f:c4:c8:b7:14:b4:c6:46:5d:12:8b:0f: f5:74:48:c2:2d:06:62:3b:9b:dc:ca:4d:ce:11:b0:e5:43:e3: 07:72:cf:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RDdBMzExMC8GA1UEBRMoM0UwQzM5QjU1ODRBQ0ZBRTQxODA4MTM4OEY0RjBBOTRE NkRBOEUwNjAeFw0yNTEyMDMwNjExMThaFw0yNTEyMTAwNjExMThaMBgxFjAUBgNV BAMTDTY5MmZkNDg3LTM1ZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUkUADL+/RblnFk6OmbJZMBKyPGOjnkUQAqItK5Cx7yyODrcs1FBjtDnCIrRMj lQisawgDOFsVEwTKW9yywhOv7E+rNaBQ73iI96W//LPoBTs3cT04vM788+CE7XnV bTuOD5ld2OFKWaq1EghwEkSAzpOn1I9sbruTJpA8BB0tSb3spAPVryDA16RqNTr9 b0+77BcQ+JoOhOsvxS8cU3heqeRCmg+xE8tANqP60j8fgNfUT1fkDFGsCAunAldE 81jrG9OC/B78N7T8TKHggQJDxlvT4RrY6XA1Cu2a6wJd1jGkeqbap5lsEC57VEPL V1vw6p+Bc1WETgSiyJR3zFbvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbAHosDpn VFxZOFmBPBvtH6smH9MwHwYDVR0jBBgwFoAUPgw5tVhKz65BgIE4j08KlNbajgYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEN0EzLzhGMDYwMjVBQzUy NDExRjBBMkE0REQxQUM0RjlBRTAyL1BndzV0VmhLejY1QmdJRTRqMDhLbE5iYWpn WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUGd3NXRWaEt6NjVCZ0lFNGowOEtsTmJhamdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE N0EzLzhGMDYwMjVBQzUyNDExRjBBMkE0REQxQUM0RjlBRTAyL1BndzV0VmhLejY1 QmdJRTRqMDhLbE5iYWpnWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAARoii6Hsn5tR5me09dcSBQoEI3RerPiHoOKw2jsbCn3ZnlQ4RAAEcwj 2Z+cj80T17smEWFqwRB85yI6MAU3biLE1CtQHHCvK9BcpC7u7GTJ1TDf6u/A+XWA GOlwN18c/uwoijKB2Z3Z/m9Mw5m4mxUWmTTtcn4yxF9xgknxLP8fyKlqwhr4C4Ui 2bPD5BIyanuXYgzHibTvd7dMy+SzEFjPh562emS9O5PXdbp6rh35eOI4n9S3Mv/p oqLH41d2n7AjMBQ+g1trY5damaTzHbIDOXR6RN9/hAC1thNEFS/EyLcUtMZGXRKL D/V0SMItBmI7m9zKTc4RsOVD4wdyzzw= -----END CERTIFICATE-----Generated at Wed Dec 3 17:07:51 2025 by rpki-client