This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft File: PNmBJcGXpVFDEgG3kG1QS7iySt4.mft (raw, json) Hash identifier: ALX96paOFARl2KxEP4JNsgChPTRWu00fyGeNTFY2Y+Y= Subject key identifier: 79:FA:16:5E:F0:8B:CD:58:B2:B5:FA:7D:70:24:A6:2F:03:F5:BF:72 Authority key identifier: 3C:D9:81:25:C1:97:A5:51:43:12:01:B7:90:6D:50:4B:B8:B2:4A:DE Certificate issuer: /CN=A918BB6D/serialNumber=3CD98125C197A551431201B7906D504BB8B24ADE Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft Manifest number: 03 Signing time: Mon 05 Jan 2026 06:59:43 +0000 Manifest this update: Mon 05 Jan 2026 06:59:43 +0000 Manifest next update: Mon 12 Jan 2026 06:59:43 +0000 Files and hashes: 1: PNmBJcGXpVFDEgG3kG1QS7iySt4.crl (hash: Gt9Te5+C46aGWIRSEgMBFqA+dFfVUyWoK5Vd1QOCfY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.crl rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Jan 2026 06:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB6D, serialNumber=3CD98125C197A551431201B7906D504BB8B24ADE Validity Not Before: Jan 5 06:59:43 2026 GMT Not After : Jan 12 06:59:43 2026 GMT Subject: CN=695b615f-2c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:46:34:f7:86:6d:0b:cb:db:3f:7d:ea:47:27: 2e:e1:be:48:dd:2d:61:2a:10:b6:c3:b1:c1:f5:c5: 08:bc:ca:6f:c6:4b:4f:19:df:8d:80:81:bb:da:db: e6:2d:88:32:a7:d7:2b:e6:88:7f:65:96:29:02:3a: 25:90:36:ef:7f:d0:87:28:5b:40:19:85:2d:9a:22: f8:49:53:d0:3c:44:1c:97:cf:73:5f:3f:a5:e5:cf: 26:ce:19:f5:47:0b:54:9a:de:55:5d:46:22:25:8a: 62:db:64:c7:4a:32:61:f4:d5:c4:c5:59:81:08:6b: 1c:97:9c:fa:22:af:04:b6:65:97:99:d1:c0:1b:6c: a1:a7:c7:7d:bb:1d:31:1e:fc:9e:a7:40:8c:86:74: f3:ac:f5:18:b5:ee:b3:90:30:0b:65:71:fa:82:c1: 0d:e2:75:0a:8f:d6:51:f7:f3:3f:f3:d8:be:cb:6b: da:a6:65:4b:a1:0e:10:54:0f:03:71:b5:99:7f:07: dd:ca:c6:1d:d3:d8:70:e1:e4:a5:7a:33:fd:88:ba: 3e:0f:4b:09:7a:8a:2e:95:f9:64:5d:2d:f4:87:fd: a7:7a:a2:9b:6c:50:46:bd:aa:9d:dc:b0:f4:f6:30: b0:d7:9e:d9:23:e4:67:7e:51:78:60:c6:a3:78:8b: 22:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FA:16:5E:F0:8B:CD:58:B2:B5:FA:7D:70:24:A6:2F:03:F5:BF:72 X509v3 Authority Key Identifier: keyid:3C:D9:81:25:C1:97:A5:51:43:12:01:B7:90:6D:50:4B:B8:B2:4A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:75:c7:bb:67:b7:67:c3:ee:07:47:64:d2:61:72:e1:ad:85: a8:fb:83:cc:95:8d:2c:06:ad:25:3d:6e:83:ec:9c:b6:0a:42: 2f:03:c3:48:81:72:6c:ae:91:e2:d5:66:fd:69:8a:2e:ba:8e: 6d:3d:b3:c3:f4:96:19:7f:3a:37:47:df:48:ad:b2:d6:74:5f: f6:85:55:f4:cc:7f:41:2f:56:e7:15:ad:bb:4d:fa:79:f5:db: 21:26:3e:7b:0d:63:1a:f6:39:c6:a8:47:af:e9:06:cf:8b:70: 20:8c:17:54:24:00:3d:4f:5b:83:5d:12:c1:a2:80:43:66:cc: de:65:2d:b7:69:07:55:dd:88:ea:fc:61:e8:b7:9e:6a:a3:9b: 3d:80:d2:6b:1c:96:44:55:93:cd:0e:a7:11:92:bc:b1:20:92: 3f:ab:e9:4b:c9:27:7d:9c:5b:f1:da:c0:91:7f:52:75:92:5b: dd:bf:e4:ca:72:24:9a:b2:dd:80:4d:21:6e:d8:cc:2e:73:5c: 76:a9:94:24:ac:07:e1:e4:f8:a6:35:e5:73:88:d7:89:bb:f1: b7:e8:a6:62:59:b7:47:79:26:bb:e1:b7:94:f8:4b:b5:b4:9d: 54:3a:d3:c5:5c:d3:eb:75:ca:33:9a:17:5f:47:52:f3:6f:82: 27:69:d8:ad -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE4 QkI2RDExMC8GA1UEBRMoM0NEOTgxMjVDMTk3QTU1MTQzMTIwMUI3OTA2RDUwNEJC OEIyNEFERTAeFw0yNjAxMDUwNjU5NDNaFw0yNjAxMTIwNjU5NDNaMBgxFjAUBgNV BAMMDTY5NWI2MTVmLTJjOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCeRjT3hm0Ly9s/fepHJy7hvkjdLWEqELbDscH1xQi8ym/GS08Z342Agbva2+Yt iDKn1yvmiH9llikCOiWQNu9/0IcoW0AZhS2aIvhJU9A8RByXz3NfP6XlzybOGfVH C1Sa3lVdRiIlimLbZMdKMmH01cTFWYEIaxyXnPoirwS2ZZeZ0cAbbKGnx327HTEe /J6nQIyGdPOs9Ri17rOQMAtlcfqCwQ3idQqP1lH38z/z2L7La9qmZUuhDhBUDwNx tZl/B93Kxh3T2HDh5KV6M/2Iuj4PSwl6ii6V+WRdLfSH/ad6optsUEa9qp3csPT2 MLDXntkj5Gd+UXhgxqN4iyITAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUefoWXvCL zViytfp9cCSmLwP1v3IwHwYDVR0jBBgwFoAUPNmBJcGXpVFDEgG3kG1QS7iySt4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCQjZELzg4MEQ2Q0FDRTkx QjExRjBBNzU0MTYxMjczNkY1NkJDL1BObUJKY0dYcFZGREVnRzNrRzFRUzdpeVN0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUE5tQkpjR1hwVkZERWdHM2tHMVFTN2l5U3Q0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC QjZELzg4MEQ2Q0FDRTkxQjExRjBBNzU0MTYxMjczNkY1NkJDL1BObUJKY0dYcFZG REVnRzNrRzFRUzdpeVN0NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJJ1x7tnt2fD7gdHZNJhcuGthaj7g8yVjSwGrSU9boPsnLYKQi8Dw0iB cmyukeLVZv1pii66jm09s8P0lhl/OjdH30itstZ0X/aFVfTMf0EvVucVrbtN+nn1 2yEmPnsNYxr2OcaoR6/pBs+LcCCMF1QkAD1PW4NdEsGigENmzN5lLbdpB1XdiOr8 Yei3nmqjmz2A0msclkRVk80OpxGSvLEgkj+r6UvJJ32cW/HawJF/UnWSW92/5Mpy JJqy3YBNIW7YzC5zXHaplCSsB+Hk+KY15XOI14m78bfopmJZt0d5Jrvht5T4S7W0 nVQ608Vc0+t1yjOaF19HUvNvgidp2K0= -----END CERTIFICATE-----Generated at Wed Jan 7 06:36:36 2026 by rpki-client