This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft File: pcmHAk0KjqwJZAn9mewy7JBHC6M.mft (raw, json) Hash identifier: GRHG0vqyAWMGOi3JcOAafGj9uWsNSkAJVph7otRtgww= Subject key identifier: 5F:F4:57:39:74:50:32:70:11:7E:BE:00:BB:46:6A:73:6E:EC:C5:40 Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3 Certificate issuer: /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft Manifest number: 99 Signing time: Tue 23 Dec 2025 05:20:32 +0000 Manifest this update: Tue 23 Dec 2025 05:20:31 +0000 Manifest next update: Tue 30 Dec 2025 05:20:31 +0000 Files and hashes: 1: pcmHAk0KjqwJZAn9mewy7JBHC6M.crl (hash: aj8IXoy8OWzZu3eUZhFnKXcFYiYGGVlZS0UJicAdfkk=) 2: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (hash: EWVCVV5zCZB19LClSuWFTWXQU193NPHqHKJqFm4wMOE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3 Validity Not Before: Dec 23 05:20:31 2025 GMT Not After : Dec 30 05:20:31 2025 GMT Subject: CN=694a26a0-5129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ba:7e:07:e2:3b:93:d8:02:c7:ee:fb:3e:c7: e5:91:0f:28:50:4f:dc:62:84:e5:91:3a:b3:39:73: 7b:5b:60:88:60:e0:a0:22:1a:36:68:f4:0c:17:01: 44:7d:17:c5:cd:9f:69:1c:bc:66:10:24:4e:20:b7: 55:6a:1c:2e:7b:d5:2c:67:88:c3:68:35:ea:20:25: a8:55:a5:71:38:d8:83:9b:e3:c0:ac:50:9b:f3:5b: a0:aa:81:ed:45:1b:aa:f2:f1:96:01:de:c7:8a:2b: 99:6a:a8:ec:0a:fe:91:5a:03:ea:07:70:88:5b:39: df:c7:e6:8e:f5:0f:e9:fb:fc:ab:ea:ef:c8:6c:e6: 0e:27:56:0d:dc:b5:18:0e:10:65:d1:25:b6:25:75: 0b:0d:7a:56:7c:44:a8:68:fd:f3:0b:aa:40:9d:e7: 36:75:bd:c6:75:e0:1b:eb:64:02:92:68:14:4d:4b: e2:cd:4b:02:7c:90:37:2f:59:fc:35:02:ad:f3:5a: 75:db:dc:d6:81:f0:d7:40:d7:4d:cd:31:22:0c:16: 90:4d:18:49:65:4d:86:03:ba:a4:c4:26:c8:51:5e: bb:44:70:79:94:57:62:eb:55:f8:aa:31:33:dc:7b: ca:74:a3:d7:a5:5a:38:19:ca:85:db:9c:12:fb:d1: dd:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F4:57:39:74:50:32:70:11:7E:BE:00:BB:46:6A:73:6E:EC:C5:40 X509v3 Authority Key Identifier: keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:3b:ad:59:29:01:67:6a:04:d2:36:1d:bf:ee:50:10:54:9e: a5:45:8a:a6:40:4d:d5:db:eb:54:c1:f9:c4:23:b7:02:50:e1: 63:fe:39:02:8c:17:23:90:af:35:ff:8a:0e:98:ed:44:2f:39: b4:08:6a:b8:56:81:dd:5b:4f:6f:c0:43:61:b7:2c:96:12:8a: b0:a5:e0:b3:60:22:a4:92:c6:b1:dc:d8:d7:8a:10:00:e3:5a: 03:85:78:02:93:64:65:55:40:a1:f8:10:1a:e7:64:e4:9b:a2: b8:a2:c4:c0:79:cb:ef:db:25:a5:49:d5:77:45:ab:8a:06:fa: 2e:00:f2:6b:bc:f8:68:b0:fc:61:64:74:79:05:be:99:f0:f5: 3e:33:b4:00:f2:b1:74:7b:12:63:88:a0:fe:13:59:ab:58:8a: af:ca:61:5b:75:0c:e7:1b:71:a3:46:c6:69:ee:9e:2d:dc:11: 02:65:a4:8d:9d:e9:39:d8:2d:f4:61:dd:6e:f0:b1:3d:68:a8: 31:8d:c5:93:48:16:96:ef:d5:01:2b:b9:d0:00:99:d7:5f:a1: 60:fc:be:6b:90:2c:6a:e0:de:f7:57:89:14:8e:c2:fa:32:09: d0:2d:26:7d:4e:1b:a9:44:a1:f7:a7:1a:21:b4:19:06:ee:9f: e2:f5:c9:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRCODYxMTAvBgNVBAUTKEE1Qzk4NzAyNEQwQThFQUMwOTY0MDlGRDk5RUMzMkVD OTA0NzBCQTMwHhcNMjUxMjIzMDUyMDMxWhcNMjUxMjMwMDUyMDMxWjAYMRYwFAYD VQQDDA02OTRhMjZhMC01MTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLp+B+I7k9gCx+77PsflkQ8oUE/cYoTlkTqzOXN7W2CIYOCgIho2aPQMFwFE fRfFzZ9pHLxmECROILdVahwue9UsZ4jDaDXqICWoVaVxONiDm+PArFCb81ugqoHt RRuq8vGWAd7HiiuZaqjsCv6RWgPqB3CIWznfx+aO9Q/p+/yr6u/IbOYOJ1YN3LUY DhBl0SW2JXULDXpWfESoaP3zC6pAnec2db3GdeAb62QCkmgUTUvizUsCfJA3L1n8 NQKt81p129zWgfDXQNdNzTEiDBaQTRhJZU2GA7qkxCbIUV67RHB5lFdi61X4qjEz 3HvKdKPXpVo4GcqF25wS+9Hd6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/0Vzl0 UDJwEX6+ALtGanNu7MVAMB8GA1UdIwQYMBaAFKXJhwJNCo6sCWQJ/ZnsMuyQRwuj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEI4Ni84OTMzMTQ4QUY3 RTMxMUVGOEFEQThBNDFDNEY5QUUwMi9wY21IQWswS2pxd0paQW45bWV3eTdKQkhD Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BjbUhBazBLanF3SlpBbjltZXd5N0pCSEM2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEI4Ni84OTMzMTQ4QUY3RTMxMUVGOEFEQThBNDFDNEY5QUUwMi9wY21IQWswS2px d0paQW45bWV3eTdKQkhDNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/O61ZKQFnagTSNh2/7lAQVJ6lRYqmQE3V2+tUwfnEI7cCUOFj/jkC jBcjkK81/4oOmO1ELzm0CGq4VoHdW09vwENhtyyWEoqwpeCzYCKkksax3NjXihAA 41oDhXgCk2RlVUCh+BAa52Tkm6K4osTAecvv2yWlSdV3RauKBvouAPJrvPhosPxh ZHR5Bb6Z8PU+M7QA8rF0exJjiKD+E1mrWIqvymFbdQznG3GjRsZp7p4t3BECZaSN nek52C30Yd1u8LE9aKgxjcWTSBaW79UBK7nQAJnXX6Fg/L5rkCxq4N73V4kUjsL6 MgnQLSZ9ThupRKH3pxohtBkG7p/i9cki -----END CERTIFICATE-----Generated at Thu Dec 25 05:31:27 2025 by rpki-client