This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft File: pBG7PJekzTyP_HCtY6ny7JaSrbc.mft (raw, json) Hash identifier: vD0Yyx7P3BLZjQPscjIaIDxmT1cpsAkOe5PtY1YJudw= Subject key identifier: EC:3B:11:23:A8:24:E7:A9:CF:23:13:BB:7E:AE:27:6C:BC:5E:3D:9D Authority key identifier: A4:11:BB:3C:97:A4:CD:3C:8F:FC:70:AD:63:A9:F2:EC:96:92:AD:B7 Certificate issuer: /CN=A91EFD20/serialNumber=A411BB3C97A4CD3C8FFC70AD63A9F2EC9692ADB7 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBG7PJekzTyP_HCtY6ny7JaSrbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft Manifest number: 29 Signing time: Tue 23 Dec 2025 03:56:12 +0000 Manifest this update: Tue 23 Dec 2025 03:56:12 +0000 Manifest next update: Tue 30 Dec 2025 03:56:12 +0000 Files and hashes: 1: pBG7PJekzTyP_HCtY6ny7JaSrbc.crl (hash: JxA5NijZg8s5dxMsgUyrosXJ9t5Bz5Vff/9QFSmD5vc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.crl rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBG7PJekzTyP_HCtY6ny7JaSrbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFD20, serialNumber=A411BB3C97A4CD3C8FFC70AD63A9F2EC9692ADB7 Validity Not Before: Dec 23 03:56:12 2025 GMT Not After : Dec 30 03:56:12 2025 GMT Subject: CN=694a12dc-f5c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8e:b3:30:5e:a7:20:b6:ad:3c:b6:5b:00:ed: e8:dc:c9:cf:c0:fb:c5:79:49:82:f8:63:ef:93:83: bf:77:8d:45:7b:80:6d:c0:b2:18:e3:b3:41:04:24: 7c:a4:1b:fb:a5:ba:d6:36:92:4f:e6:d0:ea:cc:37: 28:94:7d:64:8b:c2:9c:a8:3c:3e:00:38:f5:8c:3f: fb:69:43:06:80:be:9e:22:66:9d:1d:15:fa:31:7f: 3a:38:35:b2:4b:e8:f0:85:a6:61:44:1b:ff:cd:6d: 08:ff:a8:fd:e3:a4:aa:90:1d:22:b9:7a:6b:4b:45: 2f:e0:31:a8:7f:8a:1c:82:e6:07:81:de:db:7a:29: 09:21:91:66:3f:84:6c:1b:14:e5:80:d7:8f:8c:b7: 87:49:07:47:a3:3b:db:8b:4e:33:64:b1:8d:65:1c: 05:09:46:2c:49:21:38:2b:0c:6a:d1:4c:59:6b:96: 56:b9:ae:04:04:2c:bb:a4:6e:87:3d:7f:45:e4:88: 1f:fc:85:91:77:03:02:4e:f2:f8:7f:a5:ad:da:e7: 1c:16:1d:36:f9:ed:ea:2f:79:05:14:5e:7f:e1:93: 09:ac:bf:19:02:79:6c:44:41:d6:70:23:39:7c:2b: 0e:ab:f5:a6:10:12:c8:b9:f1:a6:a9:af:e0:1f:67: 3e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3B:11:23:A8:24:E7:A9:CF:23:13:BB:7E:AE:27:6C:BC:5E:3D:9D X509v3 Authority Key Identifier: keyid:A4:11:BB:3C:97:A4:CD:3C:8F:FC:70:AD:63:A9:F2:EC:96:92:AD:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBG7PJekzTyP_HCtY6ny7JaSrbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/C26FA276A1DA11F080B26453C4F9AE02/pBG7PJekzTyP_HCtY6ny7JaSrbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:46:f0:f1:f2:7a:8b:e3:49:d5:86:12:1c:e0:23:19:5a:39: a5:47:9f:ad:87:d9:e6:a9:59:c7:87:8f:4f:da:a3:e0:67:24: 35:ae:27:25:5b:48:3f:f1:29:b2:19:22:d7:03:28:68:df:ed: 03:88:64:66:4d:68:ac:f3:c4:12:64:98:74:5e:0c:3b:3d:0c: 8e:25:df:27:90:14:8f:3e:44:2a:cb:e3:1a:a7:aa:de:4a:0f: 4e:50:43:d8:a5:c2:82:99:7a:f8:59:78:38:72:60:7c:a5:fa: f3:43:71:ef:dd:24:d8:f1:3e:e8:e1:0b:ee:cc:71:8d:2d:cd: 13:e9:1e:7a:3a:84:f4:db:6e:26:c0:35:42:96:6c:59:7f:f7: 1b:fd:83:65:f4:49:b9:62:08:32:f4:ef:26:1d:f8:73:8f:46: c6:fc:de:b7:ec:2f:1f:15:63:f2:2e:3a:ec:88:4d:27:03:5d: 75:6e:03:4a:39:5d:78:a5:64:d0:f8:95:ef:35:1b:ee:d1:6b: 87:8d:70:c7:2b:13:bc:1e:83:80:f9:a5:84:f6:e6:34:b3:a2: e6:aa:96:e0:ae:b9:9e:fa:f1:49:58:2d:0f:64:41:aa:0a:44: 73:2b:46:72:1f:f4:33:e2:70:e9:db:d6:fb:9d:6d:f5:59:42: 92:40:14:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RkQyMDExMC8GA1UEBRMoQTQxMUJCM0M5N0E0Q0QzQzhGRkM3MEFENjNBOUYyRUM5 NjkyQURCNzAeFw0yNTEyMjMwMzU2MTJaFw0yNTEyMzAwMzU2MTJaMBgxFjAUBgNV BAMMDTY5NGExMmRjLWY1YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfjrMwXqcgtq08tlsA7ejcyc/A+8V5SYL4Y++Tg793jUV7gG3Ashjjs0EEJHyk G/ulutY2kk/m0OrMNyiUfWSLwpyoPD4AOPWMP/tpQwaAvp4iZp0dFfoxfzo4NbJL 6PCFpmFEG//NbQj/qP3jpKqQHSK5emtLRS/gMah/ihyC5geB3tt6KQkhkWY/hGwb FOWA14+Mt4dJB0ejO9uLTjNksY1lHAUJRixJITgrDGrRTFlrlla5rgQELLukboc9 f0XkiB/8hZF3AwJO8vh/pa3a5xwWHTb57eoveQUUXn/hkwmsvxkCeWxEQdZwIzl8 Kw6r9aYQEsi58aapr+AfZz73AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7DsRI6gk 56nPIxO7fq4nbLxePZ0wHwYDVR0jBBgwFoAUpBG7PJekzTyP/HCtY6ny7JaSrbcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGRDIwL0MyNkZBMjc2QTFE QTExRjA4MEIyNjQ1M0M0RjlBRTAyL3BCRzdQSmVrelR5UF9IQ3RZNm55N0phU3Ji Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcEJHN1BKZWt6VHlQX0hDdFk2bnk3SmFTcmJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG RDIwL0MyNkZBMjc2QTFEQTExRjA4MEIyNjQ1M0M0RjlBRTAyL3BCRzdQSmVrelR5 UF9IQ3RZNm55N0phU3JiYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACpG8PHyeovjSdWGEhzgIxlaOaVHn62H2eapWceHj0/ao+BnJDWuJyVb SD/xKbIZItcDKGjf7QOIZGZNaKzzxBJkmHReDDs9DI4l3yeQFI8+RCrL4xqnqt5K D05QQ9ilwoKZevhZeDhyYHyl+vNDce/dJNjxPujhC+7McY0tzRPpHno6hPTbbibA NUKWbFl/9xv9g2X0SbliCDL07yYd+HOPRsb83rfsLx8VY/IuOuyITScDXXVuA0o5 XXilZND4le81G+7Ra4eNcMcrE7weg4D5pYT25jSzouaqluCuuZ768UlYLQ9kQaoK RHMrRnIf9DPicOnb1vudbfVZQpJAFDQ= -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:33 2025 by rpki-client