This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft File: pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft (raw, json) Hash identifier: b4I8ryDmO/pQFHvPtkWteqUHvp5sszIJdsFhRk+g14w= Subject key identifier: 1C:DD:90:22:24:43:CE:13:D9:07:76:0D:7D:8A:5F:39:B6:3A:5E:3A Authority key identifier: A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3 Certificate issuer: /CN=A91DA736/serialNumber=A5AFA90890BF929181C031F0B8EDB194E3E169E3 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft Manifest number: 3D Signing time: Wed 03 Dec 2025 05:39:47 +0000 Manifest this update: Wed 03 Dec 2025 05:39:46 +0000 Manifest next update: Wed 10 Dec 2025 05:39:46 +0000 Files and hashes: 1: pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl (hash: 0RswmTqXZIXqZFC4dN4XsRP5irCQY9q72MqkCh9MKfs=) 2: 065E09BC732F11F09E8D4450C4F9AE02.roa (hash: fRjTeZ6sOZhL7w9XnHnzng0sCHnh1L73Q9iqK1QuMso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:39:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA736, serialNumber=A5AFA90890BF929181C031F0B8EDB194E3E169E3 Validity Not Before: Dec 3 05:39:46 2025 GMT Not After : Dec 10 05:39:46 2025 GMT Subject: CN=692fcd23-794f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:46:88:90:d6:e4:1a:2c:98:e8:22:89:25:c0: 21:34:ee:91:1f:1f:dd:08:ce:22:79:cb:95:a4:d9: 97:c2:8e:27:c7:b9:12:b0:0f:29:a1:5b:16:b0:ca: 80:05:0c:a1:8f:de:f1:ad:36:78:43:a1:ee:2e:1e: 25:70:39:96:cf:b8:a5:65:06:b3:2b:0b:f0:57:93: 8c:03:36:b3:f5:3f:5c:74:20:12:77:4a:ca:ff:bd: d1:ba:11:b6:48:09:dc:f8:f8:b1:52:4c:52:bb:84: 94:1d:68:d2:5a:d7:ef:59:1e:75:e8:a0:79:63:34: 09:49:c6:b5:41:9f:82:78:68:72:4c:48:37:38:16: 9a:61:d5:c8:0e:13:d1:e6:8c:ae:d9:f5:6f:ab:e0: 34:e5:4c:20:06:84:a4:2e:5a:ce:47:46:77:20:0f: 2f:89:92:74:75:99:87:a0:cd:bb:1b:8f:a5:d1:03: 90:a5:fb:4d:ce:d5:6a:8b:32:6d:09:fb:b2:15:21: c4:10:c2:14:7a:21:1f:ba:2a:a7:ba:17:84:72:ab: 8b:5b:65:33:e1:4b:ee:72:22:b4:74:51:fc:b7:8b: 08:39:87:2e:62:ec:ef:b9:1b:76:e0:21:ad:ed:88: 9c:e1:89:fb:8d:eb:22:ef:7d:85:92:fe:97:99:59: 78:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DD:90:22:24:43:CE:13:D9:07:76:0D:7D:8A:5F:39:B6:3A:5E:3A X509v3 Authority Key Identifier: keyid:A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:29:78:d0:70:c0:1c:03:c2:5e:a5:d9:1e:9a:12:d8:15:98: ef:a2:18:23:9a:43:60:04:b6:bd:a0:38:35:56:f4:d4:41:31: 30:1c:8a:2f:73:db:37:1c:bb:be:1e:b5:b0:b6:28:5c:2b:3d: 55:47:23:23:72:c0:38:01:b3:b5:f6:72:70:9f:04:2d:fa:5b: 12:7b:b3:e0:6f:37:69:62:37:1b:7b:45:66:aa:f4:d6:7e:4b: b8:f6:e1:77:31:84:c8:d6:f2:df:f8:4a:5c:6c:61:58:29:d2: f3:f1:d4:08:2a:46:a5:7d:0a:87:da:34:88:34:44:27:77:da: 6e:59:6d:16:10:14:33:da:8a:7b:90:96:f2:c4:f6:62:d7:fc: 9c:2a:59:4f:15:11:1d:de:56:53:b6:6b:11:84:5d:50:fe:6f: fb:b3:22:10:3b:b1:64:7c:2f:26:b2:a1:ea:82:38:10:da:76: 25:2e:92:83:2b:66:f9:84:ef:17:84:a2:b1:33:9f:bb:f0:ed: d2:6e:4a:17:b4:39:f2:f6:48:b4:c7:39:44:61:ad:a0:cc:2f: 3d:3c:1f:9c:8f:d0:85:80:7c:e8:86:ed:81:77:ee:a0:28:5b: b1:84:3d:2a:8f:37:11:07:1c:1d:89:81:27:5c:86:9a:0b:63: 04:d8:70:ed -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QTczNjExMC8GA1UEBRMoQTVBRkE5MDg5MEJGOTI5MTgxQzAzMUYwQjhFREIxOTRF M0UxNjlFMzAeFw0yNTEyMDMwNTM5NDZaFw0yNTEyMTAwNTM5NDZaMBgxFjAUBgNV BAMTDTY5MmZjZDIzLTc5NGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDARoiQ1uQaLJjoIoklwCE07pEfH90IziJ5y5Wk2ZfCjifHuRKwDymhWxawyoAF DKGP3vGtNnhDoe4uHiVwOZbPuKVlBrMrC/BXk4wDNrP1P1x0IBJ3Ssr/vdG6EbZI Cdz4+LFSTFK7hJQdaNJa1+9ZHnXooHljNAlJxrVBn4J4aHJMSDc4Fpph1cgOE9Hm jK7Z9W+r4DTlTCAGhKQuWs5HRncgDy+JknR1mYegzbsbj6XRA5Cl+03O1WqLMm0J +7IVIcQQwhR6IR+6Kqe6F4Ryq4tbZTPhS+5yIrR0Ufy3iwg5hy5i7O+5G3bgIa3t iJzhifuN6yLvfYWS/peZWXglAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHN2QIiRD zhPZB3YNfYpfObY6XjowHwYDVR0jBBgwFoAUpa+pCJC/kpGBwDHwuO2xlOPhaeMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBNzM2LzVBNkQ4QjVDNzMy NzExRjBCMTUyNjQ2RkM0RjlBRTAyL3BhLXBDSkNfa3BHQndESHd1TzJ4bE9QaGFl TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGEtcENKQ19rcEdCd0RId3VPMnhsT1BoYWVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB NzM2LzVBNkQ4QjVDNzMyNzExRjBCMTUyNjQ2RkM0RjlBRTAyL3BhLXBDSkNfa3BH QndESHd1TzJ4bE9QaGFlTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKIpeNBwwBwDwl6l2R6aEtgVmO+iGCOaQ2AEtr2gODVW9NRBMTAcii9z 2zccu74etbC2KFwrPVVHIyNywDgBs7X2cnCfBC36WxJ7s+BvN2liNxt7RWaq9NZ+ S7j24XcxhMjW8t/4SlxsYVgp0vPx1AgqRqV9CofaNIg0RCd32m5ZbRYQFDPainuQ lvLE9mLX/JwqWU8VER3eVlO2axGEXVD+b/uzIhA7sWR8LyayoeqCOBDadiUukoMr ZvmE7xeEorEzn7vw7dJuShe0OfL2SLTHOURhraDMLz08H5yP0IWAfOiG7YF37qAo W7GEPSqPNxEHHB2JgSdchpoLYwTYcO0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:37 2025 by rpki-client