This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft File: PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft (raw, json) Hash identifier: a4aCWbpWrNLmqZPqNXq6XnP/79BE6HfX1Xl+8AlSeEs= Subject key identifier: EC:9E:52:28:F7:3A:1C:28:C6:53:07:3A:BF:FA:55:78:85:93:54:3C Authority key identifier: 3C:CE:EB:9D:20:59:CF:E9:F6:08:56:77:D4:B7:FA:26:4F:53:3A:0F Certificate issuer: /CN=A91A423D/serialNumber=3CCEEB9D2059CFE9F6085677D4B7FA264F533A0F Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft Manifest number: 2F Signing time: Sat 17 Jan 2026 06:37:07 +0000 Manifest this update: Sat 17 Jan 2026 06:37:06 +0000 Manifest next update: Sat 24 Jan 2026 06:37:06 +0000 Files and hashes: 1: PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl (hash: feKk8S1wyPl7yKH33IF1qAlcmXBoP6UtN52RvXG6WZY=) 2: 2ECF71C4B0A111F0B537573FC4F9AE02.roa (hash: 1BBcWkcMpF06powsKVAV0f8YZkxmR/VN9BDTB/ElxGA=) 3: DEE9FAB2B0A011F0B752B713C4F9AE02.roa (hash: OzIgivIWTesGqIFKDMHLDa65rC0IAhR7ENJM9kOUiG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 06:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A423D, serialNumber=3CCEEB9D2059CFE9F6085677D4B7FA264F533A0F Validity Not Before: Jan 17 06:37:06 2026 GMT Not After : Jan 24 06:37:06 2026 GMT Subject: CN=696b2e13-bb82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:81:09:96:e6:31:0a:74:9d:ad:e3:6d:51:f3: f1:58:a3:31:28:32:fa:d1:24:40:82:33:b1:f8:d6: b9:b6:46:ee:ac:83:6f:f0:32:dc:15:42:e7:df:5e: 52:14:aa:dd:70:e4:41:64:7b:55:d4:26:e2:f6:89: 98:2e:dc:57:62:6b:28:33:b7:30:ee:f5:c4:0f:56: 09:97:74:6b:3a:b5:35:c4:94:bf:2d:52:e1:e0:b5: f9:47:f3:25:9f:39:d0:1a:af:c9:ae:d9:ab:4f:9f: 11:4f:2a:cb:ec:97:2f:4e:dc:e7:ef:aa:06:db:7a: 3f:92:08:65:bc:39:20:ab:e8:9d:9a:8b:5e:34:62: 66:7e:a0:50:39:e7:b2:71:0a:cb:12:e9:07:e9:49: f1:a4:1e:bd:c0:6c:28:f1:92:48:2e:60:d9:ba:47: 4e:a3:32:50:06:99:f7:62:dd:51:d2:97:90:1b:36: 03:b2:2b:da:c7:b8:07:09:8f:8b:ad:1a:ee:69:f3: 96:75:19:69:f9:db:f3:0c:9d:f2:33:3c:39:f4:6e: 06:0e:74:a4:ef:47:03:42:92:87:ea:7c:46:53:53: 3e:a5:e1:be:d3:b8:0d:95:dc:bb:dd:b6:99:f7:2e: 0c:df:79:3f:a5:8a:a1:ec:bd:b4:50:a8:c8:ae:c3: c2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9E:52:28:F7:3A:1C:28:C6:53:07:3A:BF:FA:55:78:85:93:54:3C X509v3 Authority Key Identifier: keyid:3C:CE:EB:9D:20:59:CF:E9:F6:08:56:77:D4:B7:FA:26:4F:53:3A:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423D/B9769BD8B09511F08C152778C4F9AE02/PM7rnSBZz-n2CFZ31Lf6Jk9TOg8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:a3:61:29:ce:37:78:e0:7c:39:fc:ab:a8:c8:24:84:ef:ab: f7:23:c7:25:47:10:ac:60:fa:3b:65:82:cb:c3:52:c6:07:e1: d9:05:97:b0:16:35:be:25:6c:d4:b9:9d:01:ee:2c:d8:8a:72: 5e:8e:5f:60:2a:f9:09:98:ab:23:11:18:d5:31:e0:0d:ff:bc: 45:12:c4:b9:5b:65:77:b9:9d:49:80:a8:a0:16:76:9a:d0:85: 9d:30:62:18:0a:81:bf:be:45:4b:86:98:7c:94:9f:fc:7a:13: 96:8a:df:e6:14:ef:a3:29:e4:c6:51:ac:aa:db:bb:08:ce:97: 59:43:79:18:1c:9d:c2:bb:67:fb:ee:e0:9f:f2:da:41:8a:49: 58:99:fe:32:2b:37:dc:83:14:bb:41:e1:c5:4f:99:d5:0d:93: 6c:0c:2b:9a:f6:c3:6a:a9:74:32:33:31:01:03:fb:a6:47:a5: 3a:c2:fe:0d:61:40:3c:f6:20:5c:17:1c:00:f1:20:8f:60:e3: d4:b0:6d:d6:8f:72:4e:85:1b:1d:bc:b8:6d:c7:c6:5b:9c:8c: 3c:7b:78:f1:24:1d:33:4f:0f:8b:79:09:c4:23:8f:8c:6e:df: 75:8b:8f:7e:71:42:89:4e:16:71:3d:68:da:b4:31:f5:48:7c: 7f:a9:b1:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NDIzRDExMC8GA1UEBRMoM0NDRUVCOUQyMDU5Q0ZFOUY2MDg1Njc3RDRCN0ZBMjY0 RjUzM0EwRjAeFw0yNjAxMTcwNjM3MDZaFw0yNjAxMjQwNjM3MDZaMBgxFjAUBgNV BAMMDTY5NmIyZTEzLWJiODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCigQmW5jEKdJ2t421R8/FYozEoMvrRJECCM7H41rm2Ru6sg2/wMtwVQuffXlIU qt1w5EFke1XUJuL2iZgu3FdiaygztzDu9cQPVgmXdGs6tTXElL8tUuHgtflH8yWf OdAar8mu2atPnxFPKsvsly9O3Ofvqgbbej+SCGW8OSCr6J2ai140YmZ+oFA557Jx CssS6QfpSfGkHr3AbCjxkkguYNm6R06jMlAGmfdi3VHSl5AbNgOyK9rHuAcJj4ut Gu5p85Z1GWn52/MMnfIzPDn0bgYOdKTvRwNCkofqfEZTUz6l4b7TuA2V3Lvdtpn3 LgzfeT+liqHsvbRQqMiuw8L9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7J5SKPc6 HCjGUwc6v/pVeIWTVDwwHwYDVR0jBBgwFoAUPM7rnSBZz+n2CFZ31Lf6Jk9TOg8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0MjNEL0I5NzY5QkQ4QjA5 NTExRjA4QzE1Mjc3OEM0RjlBRTAyL1BNN3JuU0Jaei1uMkNGWjMxTGY2Sms5VE9n OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUE03cm5TQlp6LW4yQ0ZaMzFMZjZKazlUT2c4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 MjNEL0I5NzY5QkQ4QjA5NTExRjA4QzE1Mjc3OEM0RjlBRTAyL1BNN3JuU0Jaei1u MkNGWjMxTGY2Sms5VE9nOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACOjYSnON3jgfDn8q6jIJITvq/cjxyVHEKxg+jtlgsvDUsYH4dkFl7AW Nb4lbNS5nQHuLNiKcl6OX2Aq+QmYqyMRGNUx4A3/vEUSxLlbZXe5nUmAqKAWdprQ hZ0wYhgKgb++RUuGmHyUn/x6E5aK3+YU76Mp5MZRrKrbuwjOl1lDeRgcncK7Z/vu 4J/y2kGKSViZ/jIrN9yDFLtB4cVPmdUNk2wMK5r2w2qpdDIzMQED+6ZHpTrC/g1h QDz2IFwXHADxII9g49SwbdaPck6FGx28uG3HxlucjDx7ePEkHTNPD4t5CcQjj4xu 33WLj35xQolOFnE9aNq0MfVIfH+psWY= -----END CERTIFICATE-----Generated at Sun Jan 18 03:15:14 2026 by rpki-client