This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft File: PfG7945KTnVEGahIyf0My9LmpFg.mft (raw, json) Hash identifier: rKMn6r0rxsvh4j/UiS8/b8f5cLgTBNHEf7dJo0iNvNs= Subject key identifier: 87:32:A9:3A:C0:22:70:01:48:22:20:50:53:8B:53:3B:BD:AC:E3:EB Authority key identifier: 3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 Certificate issuer: /CN=A91C1052/serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Certificate serial: 0243 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft Manifest number: 023A Signing time: Sun 21 Dec 2025 01:11:40 +0000 Manifest this update: Sun 21 Dec 2025 01:11:40 +0000 Manifest next update: Sun 28 Dec 2025 01:11:40 +0000 Files and hashes: 1: PfG7945KTnVEGahIyf0My9LmpFg.crl (hash: XpZ6K5xA4HfyQvDU7cHhOV2xa5KAhzaEqzvsRfIQC2s=) 2: D6E2AAC0772911ED95084884C4F9AE02.roa (hash: cj6biBNtaUtX7+44SxYYBzzhO476/vbaxRtf96Tl68E=) 3: 74A3C1988E8311ED903ADA1CC4F9AE02.roa (hash: 0Ty6Wy83nXEuGUo3EX3HWpgQzq88t3uK3cVK224snpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:11:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 579 (0x243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1052, serialNumber=3DF1BBF78E4A4E754419A848C9FD0CCBD2E6A458 Validity Not Before: Dec 21 01:11:40 2025 GMT Not After : Dec 28 01:11:40 2025 GMT Subject: CN=6947494c-0b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:45:d6:d9:d7:74:f8:78:55:3c:e8:d7:fc:79: 3d:fb:56:1c:46:b4:56:20:06:8c:8f:cf:0f:d2:55: f4:68:3f:63:ff:4b:53:b9:ec:a1:80:84:0b:02:6a: f6:a4:24:9b:9d:8d:3e:ef:6c:91:ad:4f:d6:ce:8a: a3:4f:cf:5a:d7:fc:22:19:7f:8c:63:f8:9e:fc:34: be:6d:cf:bb:be:7d:c2:b3:94:b9:19:ad:3d:11:5d: 53:62:e4:d2:8e:48:b5:03:f8:cd:b2:56:c0:fa:ea: f9:2d:37:c3:b3:57:f0:8f:a1:1e:7b:77:5c:8b:28: bb:2c:31:a4:5f:54:e9:ef:62:5c:b3:70:ff:c5:28: 8a:3f:79:2f:d0:22:7b:9c:bd:cd:f3:b0:87:51:3d: 8d:56:1c:1c:3c:44:1c:75:f2:19:3c:b4:c1:e4:74: 9d:54:8b:2d:cb:f7:ad:85:b2:e5:4d:b0:b6:ee:6a: 24:f3:eb:29:0e:e6:16:1f:73:45:81:3c:31:a9:4c: 2e:21:bb:aa:44:8f:bf:16:a6:a0:78:af:4e:c5:67: ff:43:0f:a5:2c:74:08:a5:b9:16:1a:21:3b:9e:77: 4e:e1:0a:99:55:40:20:45:c1:18:94:2d:18:b0:66: eb:cf:06:58:d1:11:e6:a5:af:27:84:db:6a:cf:f2: 76:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:32:A9:3A:C0:22:70:01:48:22:20:50:53:8B:53:3B:BD:AC:E3:EB X509v3 Authority Key Identifier: keyid:3D:F1:BB:F7:8E:4A:4E:75:44:19:A8:48:C9:FD:0C:CB:D2:E6:A4:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PfG7945KTnVEGahIyf0My9LmpFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1052/806FB276772611ED86D09680C4F9AE02/PfG7945KTnVEGahIyf0My9LmpFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:04:18:86:18:1b:b9:ca:5b:2b:b8:19:2e:d8:ec:c0:dc:d5: c0:42:ec:86:54:17:a6:6c:5e:0f:7c:64:fd:e0:e7:89:46:ac: dd:20:f5:3d:a7:8e:52:d2:36:21:a9:fb:ea:40:d2:94:67:64: 8a:b3:14:4b:b8:b3:e4:88:ae:12:6e:38:88:25:2c:9e:26:11: 20:6f:30:04:70:4a:10:3c:48:b4:ba:2b:cf:a4:25:52:9d:16: 5c:f4:23:12:9f:31:1d:b7:c0:e4:42:96:cc:25:5b:35:0a:eb: 9b:40:b0:74:b8:35:f3:b4:09:b3:a6:ee:06:31:e9:2d:9d:40: 00:59:c4:e9:c8:ad:23:d7:0f:06:fa:c8:87:21:ff:be:6b:b4: 85:59:20:4f:3d:b7:b2:fb:0f:ed:18:63:c9:3d:ad:d5:19:f6: a5:a8:d8:db:73:f9:a6:58:76:e0:46:58:c4:eb:3f:7c:d7:fc: cf:01:cd:22:73:f4:2b:4d:8a:f3:a7:33:5a:8d:e0:52:0f:bd: 3b:34:3d:75:07:1b:55:d3:1b:08:10:a5:99:eb:9f:ad:7c:07: 8e:44:2a:99:4c:21:15:00:ef:b4:2f:b9:5c:f7:89:6c:f6:ab: 46:78:5d:6d:8a:5c:0c:d1:e4:f5:b0:60:31:50:dd:e9:67:25: 5c:db:f2:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwNTIxMTAvBgNVBAUTKDNERjFCQkY3OEU0QTRFNzU0NDE5QTg0OEM5RkQwQ0NC RDJFNkE0NTgwHhcNMjUxMjIxMDExMTQwWhcNMjUxMjI4MDExMTQwWjAYMRYwFAYD VQQDDA02OTQ3NDk0Yy0wYjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUXW2dd0+HhVPOjX/Hk9+1YcRrRWIAaMj88P0lX0aD9j/0tTueyhgIQLAmr2 pCSbnY0+72yRrU/WzoqjT89a1/wiGX+MY/ie/DS+bc+7vn3Cs5S5Ga09EV1TYuTS jki1A/jNslbA+ur5LTfDs1fwj6Eee3dciyi7LDGkX1Tp72Jcs3D/xSiKP3kv0CJ7 nL3N87CHUT2NVhwcPEQcdfIZPLTB5HSdVIsty/ethbLlTbC27mok8+spDuYWH3NF gTwxqUwuIbuqRI+/FqageK9OxWf/Qw+lLHQIpbkWGiE7nndO4QqZVUAgRcEYlC0Y sGbrzwZY0RHmpa8nhNtqz/J2PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIcyqTrA InABSCIgUFOLUzu9rOPrMB8GA1UdIwQYMBaAFD3xu/eOSk51RBmoSMn9DMvS5qRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTA1Mi84MDZGQjI3Njc3 MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1RuVkVHYWhJeWYwTXk5TG1w RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BmRzc5NDVLVG5WRUdhaEl5ZjBNeTlMbXBGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTA1Mi84MDZGQjI3Njc3MjYxMUVEODZEMDk2ODBDNEY5QUUwMi9QZkc3OTQ1S1Ru VkVHYWhJeWYwTXk5TG1wRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtBBiGGBu5ylsruBku2OzA3NXAQuyGVBembF4PfGT94OeJRqzdIPU9 p45S0jYhqfvqQNKUZ2SKsxRLuLPkiK4SbjiIJSyeJhEgbzAEcEoQPEi0uivPpCVS nRZc9CMSnzEdt8DkQpbMJVs1CuubQLB0uDXztAmzpu4GMektnUAAWcTpyK0j1w8G +siHIf++a7SFWSBPPbey+w/tGGPJPa3VGfalqNjbc/mmWHbgRljE6z981/zPAc0i c/QrTYrzpzNajeBSD707ND11BxtV0xsIEKWZ65+tfAeORCqZTCEVAO+0L7lc94ls 9qtGeF1tilwM0eT1sGAxUN3pZyVc2/Ix -----END CERTIFICATE-----Generated at Mon Dec 22 00:52:44 2025 by rpki-client