This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft File: PVlGAD7uVIrZXXlssYi3UcV82sg.mft (raw, json) Hash identifier: g6iRQ4V+VZj2sBrZvSn6EWQj1VflIl1HEQ49LWMk0Cs= Subject key identifier: 33:02:CB:E8:29:6F:E1:AF:AB:07:EF:7A:8C:FF:AD:94:AD:50:7D:29 Authority key identifier: 3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8 Certificate issuer: /CN=A91F9E0A/serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft Manifest number: 011A Signing time: Tue 23 Dec 2025 03:54:09 +0000 Manifest this update: Tue 23 Dec 2025 03:54:09 +0000 Manifest next update: Tue 30 Dec 2025 03:54:09 +0000 Files and hashes: 1: PVlGAD7uVIrZXXlssYi3UcV82sg.crl (hash: s+DmSk49G28+4svNZ9m7Hf0P08LvIk0CJsVOlY92tBg=) 2: D0CDFEEA406E11EFA085272AC4F9AE02.roa (hash: aewA7Recxf1QEkAlzyh8eNS8lnCo6hOfpjo3yvsUTtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E0A, serialNumber=3D5946003EEE548AD95D796CB188B751C57CDAC8 Validity Not Before: Dec 23 03:54:09 2025 GMT Not After : Dec 30 03:54:09 2025 GMT Subject: CN=694a1261-72be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fe:ac:cc:d5:3a:48:01:f3:5c:7d:a0:e2:e3: b1:bd:62:e9:e1:95:bf:04:84:97:0a:ee:b7:56:01: 90:0b:e2:e2:b0:bc:74:3c:eb:00:f5:6b:90:f0:79: f9:c9:79:81:95:1f:63:ed:e6:f0:ac:cd:8b:cc:43: 7c:dd:58:87:4f:08:25:b2:fb:46:16:f5:cb:66:4a: b8:b7:c5:b3:14:3e:5e:42:3b:95:39:c4:8e:63:48: 9f:c2:5d:cb:72:53:22:76:96:f8:50:e9:67:41:b5: d3:3b:d3:69:2b:a0:6e:65:f6:38:0a:16:8e:b5:7a: a3:f4:fb:d5:d5:07:f8:75:58:8a:8d:73:69:74:77: 05:2c:66:87:74:d4:85:e3:ad:4d:ac:1c:a7:7d:1f: 3e:6b:5c:a6:e0:2b:dc:37:88:7c:54:fa:be:01:a0: b6:93:19:81:72:86:13:0f:9d:d0:a0:65:71:82:35: 09:2a:9c:0f:d5:50:b3:51:58:fc:95:4b:d9:d7:f1: da:ac:be:ab:c3:0d:63:e8:e1:dd:21:3a:35:16:95: 32:3c:1f:ae:e7:ae:9b:8f:e3:2f:08:76:2d:36:7b: 6f:fc:b2:27:ef:81:93:32:a6:c3:87:ce:04:1b:17: 86:08:74:93:58:44:4e:a7:8d:c4:5f:eb:29:af:e0: ba:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:02:CB:E8:29:6F:E1:AF:AB:07:EF:7A:8C:FF:AD:94:AD:50:7D:29 X509v3 Authority Key Identifier: keyid:3D:59:46:00:3E:EE:54:8A:D9:5D:79:6C:B1:88:B7:51:C5:7C:DA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVlGAD7uVIrZXXlssYi3UcV82sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E0A/0BD985E83E6911EFA2CE676AC4F9AE02/PVlGAD7uVIrZXXlssYi3UcV82sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:64:6e:73:f9:5e:c5:af:ee:d4:cd:dc:07:ed:49:6e:33:e3: 47:a4:bd:48:b2:7e:99:9c:28:81:24:f6:c8:ab:6e:c8:42:c2: d4:b7:b2:23:09:cd:94:44:ba:ce:68:3a:a8:6d:35:6c:2d:55: 86:7f:35:53:f8:f3:40:c0:9f:df:93:fa:e4:29:2f:0f:32:fd: 26:63:de:99:fa:2e:62:1f:59:0c:76:e6:69:ba:45:06:4e:a9: fe:57:78:8c:a0:53:11:47:7f:a1:d5:67:55:56:32:07:97:99: 4a:6e:3a:7c:fd:ed:91:96:d6:e6:fb:e4:9c:53:98:9a:6b:4d: 19:89:b0:e1:52:8a:53:a0:b0:2f:9f:e3:3b:a7:23:bc:8c:ff: 41:f8:80:4d:80:97:cf:d2:58:1f:25:09:20:85:f3:92:93:d8: 49:b5:6f:4f:fd:9c:df:c9:66:9c:91:54:4a:6d:5b:09:82:71: 7c:49:5f:e1:9c:e7:b3:43:14:02:29:08:6c:52:70:aa:32:6f: 9e:37:3c:92:eb:22:bd:5d:7c:08:e6:e9:85:37:4b:50:02:83: 48:a2:3f:1b:c9:42:e4:2c:aa:0c:dd:e5:86:b0:b6:e2:ce:1d: bd:f7:09:09:21:20:72:fd:6c:5e:a6:fe:49:20:db:d3:17:63: 63:dd:74:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFMEExMTAvBgNVBAUTKDNENTk0NjAwM0VFRTU0OEFEOTVENzk2Q0IxODhCNzUx QzU3Q0RBQzgwHhcNMjUxMjIzMDM1NDA5WhcNMjUxMjMwMDM1NDA5WjAYMRYwFAYD VQQDDA02OTRhMTI2MS03MmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuv6szNU6SAHzXH2g4uOxvWLp4ZW/BISXCu63VgGQC+LisLx0POsA9WuQ8Hn5 yXmBlR9j7ebwrM2LzEN83ViHTwglsvtGFvXLZkq4t8WzFD5eQjuVOcSOY0ifwl3L clMidpb4UOlnQbXTO9NpK6BuZfY4ChaOtXqj9PvV1Qf4dViKjXNpdHcFLGaHdNSF 461NrBynfR8+a1ym4CvcN4h8VPq+AaC2kxmBcoYTD53QoGVxgjUJKpwP1VCzUVj8 lUvZ1/HarL6rww1j6OHdITo1FpUyPB+u566bj+MvCHYtNntv/LIn74GTMqbDh84E GxeGCHSTWEROp43EX+spr+C6uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMCy+gp b+Gvqwfveoz/rZStUH0pMB8GA1UdIwQYMBaAFD1ZRgA+7lSK2V15bLGIt1HFfNrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUUwQS8wQkQ5ODVFODNF NjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9QVmxHQUQ3dVZJclpYWGxzc1lpM1VjVjgy c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BWbEdBRDd1VklyWlhYbHNzWWkzVWNWODJzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUUwQS8wQkQ5ODVFODNFNjkxMUVGQTJDRTY3NkFDNEY5QUUwMi9QVmxHQUQ3dVZJ clpYWGxzc1lpM1VjVjgyc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzZG5z+V7Fr+7UzdwH7UluM+NHpL1Isn6ZnCiBJPbIq27IQsLUt7Ij Cc2URLrOaDqobTVsLVWGfzVT+PNAwJ/fk/rkKS8PMv0mY96Z+i5iH1kMduZpukUG Tqn+V3iMoFMRR3+h1WdVVjIHl5lKbjp8/e2Rltbm++ScU5iaa00ZibDhUopToLAv n+M7pyO8jP9B+IBNgJfP0lgfJQkghfOSk9hJtW9P/ZzfyWackVRKbVsJgnF8SV/h nOezQxQCKQhsUnCqMm+eNzyS6yK9XXwI5umFN0tQAoNIoj8byULkLKoM3eWGsLbi zh299wkJISBy/Wxepv5JINvTF2Nj3XRu -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:38 2025 by rpki-client