This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft File: PnIyBI3L0sabqyJbikIhYEbBiyU.mft (raw, json) Hash identifier: 8a61qSvjfx5X7MUPK4qcb3hgNYCtUya/YesDioZ3JyQ= Subject key identifier: AF:71:3F:54:A0:B4:34:3F:C3:E7:AF:88:67:B9:19:4D:86:32:81:6D Authority key identifier: 3E:72:32:04:8D:CB:D2:C6:9B:AB:22:5B:8A:42:21:60:46:C1:8B:25 Certificate issuer: /CN=A911CA78/serialNumber=3E7232048DCBD2C69BAB225B8A42216046C18B25 Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PnIyBI3L0sabqyJbikIhYEbBiyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft Manifest number: 01F6 Signing time: Sat 24 Jan 2026 18:29:00 +0000 Manifest this update: Sat 24 Jan 2026 18:29:00 +0000 Manifest next update: Sat 31 Jan 2026 18:29:00 +0000 Files and hashes: 1: PnIyBI3L0sabqyJbikIhYEbBiyU.crl (hash: p5Fjfejc/ocnpUSBdN1dWIxAI0/S0nTmYOYXDsDmqp0=) 2: 1ABB6C4E17DB11EE92B1C26FC4F9AE02.roa (hash: 5FCghaTHfjGe3056E9DhPQUiNt12XMkuoaYKrbjkSQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.crl rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PnIyBI3L0sabqyJbikIhYEbBiyU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78, serialNumber=3E7232048DCBD2C69BAB225B8A42216046C18B25 Validity Not Before: Jan 24 18:29:00 2026 GMT Not After : Jan 31 18:29:00 2026 GMT Subject: CN=69750f6c-4ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fb:d5:c1:38:1b:c0:7d:9f:5a:4e:39:6d:57: da:71:88:d5:cd:5d:df:5c:70:43:fc:b9:7c:75:6c: c7:7e:59:ce:3a:57:1a:3b:29:8a:0e:e2:0c:f3:0e: 59:6c:5e:eb:15:e1:df:64:74:e5:46:77:e8:88:8c: 98:74:57:22:c8:fc:e7:18:61:1a:91:1a:d9:76:ff: 64:01:c9:a2:d6:c3:90:c0:4d:9b:2d:16:6c:c3:bf: 47:57:3e:83:fe:56:6f:e9:51:11:ea:17:b4:41:ae: b7:0f:20:f9:4d:f8:3a:12:1c:94:aa:19:bc:1e:73: 19:17:2b:94:1d:f2:58:3c:ec:c1:ca:26:e2:6d:bd: b8:ef:6b:9c:c1:4c:c1:46:8e:a0:04:29:e8:81:4b: 3b:af:91:2c:46:e4:c8:ba:e6:9d:54:9a:58:52:73: 8d:70:48:19:c8:0f:2b:d6:77:8b:cd:65:08:50:9f: 38:3b:3e:b4:e9:fc:6d:df:86:d1:e5:b8:ce:19:87: f1:73:ba:79:70:c8:7b:3b:42:8e:41:7a:12:21:20: 83:0d:71:32:c2:67:2a:fe:2a:6f:18:ec:e1:2f:e5: b7:aa:bb:01:72:c1:43:ef:a0:03:32:a4:f2:40:59: 64:93:a6:39:d3:13:e5:69:f1:f8:5f:0a:88:75:06: a6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:71:3F:54:A0:B4:34:3F:C3:E7:AF:88:67:B9:19:4D:86:32:81:6D X509v3 Authority Key Identifier: keyid:3E:72:32:04:8D:CB:D2:C6:9B:AB:22:5B:8A:42:21:60:46:C1:8B:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PnIyBI3L0sabqyJbikIhYEbBiyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:a5:0d:26:88:fb:5d:e8:00:54:9b:52:32:bb:dd:6d:7c:31: 08:67:04:1f:04:dd:25:dd:9b:14:a9:be:29:ef:67:35:2e:cb: 32:11:7e:21:4c:0a:3e:ff:dd:33:0c:7d:f0:ab:67:9f:5a:28: 73:2f:c4:ab:f5:d0:cc:0f:f8:12:68:64:c1:28:81:c8:bb:e6: 36:22:b7:40:48:79:30:e8:a2:1e:67:a2:38:e1:63:17:cd:91: 45:d5:4b:ab:7d:d8:ab:f0:ff:0b:39:d3:c5:ac:23:70:89:1d: 02:89:da:31:29:35:e3:44:db:f7:9c:66:fb:e8:a8:e4:b7:03: b2:b2:e7:82:6d:90:b8:ba:a6:2a:f3:de:8f:28:bb:a2:db:6a: 5d:48:e3:42:e7:2b:4e:58:c3:e0:ef:c9:d5:f5:4f:a6:c4:d7: f3:a4:e1:a9:96:4e:6e:c1:2d:7b:99:3d:3c:05:bc:bc:9b:5d: 8f:7e:45:8c:06:0c:fa:cb:07:44:38:09:56:04:d9:1b:db:0e: e4:7e:a7:18:71:e6:0f:3d:f3:96:ed:d7:d2:98:ed:65:ce:f1: 67:e1:10:e0:65:1e:c6:7b:66:c7:93:99:f5:81:7d:a0:2a:eb: 44:60:97:07:a9:11:ff:8e:07:8e:22:c0:d6:ce:9b:a7:8c:f5: 9b:87:67:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDNFNzIzMjA0OERDQkQyQzY5QkFCMjI1QjhBNDIyMTYw NDZDMThCMjUwHhcNMjYwMTI0MTgyOTAwWhcNMjYwMTMxMTgyOTAwWjAYMRYwFAYD VQQDDA02OTc1MGY2Yy00YWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/vVwTgbwH2fWk45bVfacYjVzV3fXHBD/Ll8dWzHflnOOlcaOymKDuIM8w5Z bF7rFeHfZHTlRnfoiIyYdFciyPznGGEakRrZdv9kAcmi1sOQwE2bLRZsw79HVz6D /lZv6VER6he0Qa63DyD5Tfg6EhyUqhm8HnMZFyuUHfJYPOzByibibb2472ucwUzB Ro6gBCnogUs7r5EsRuTIuuadVJpYUnONcEgZyA8r1neLzWUIUJ84Oz606fxt34bR 5bjOGYfxc7p5cMh7O0KOQXoSISCDDXEywmcq/ipvGOzhL+W3qrsBcsFD76ADMqTy QFlkk6Y50xPlafH4XwqIdQam+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9xP1Sg tDQ/w+eviGe5GU2GMoFtMB8GA1UdIwQYMBaAFD5yMgSNy9LGm6siW4pCIWBGwYsl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC8wMjhGNThGRTE2 RDkxMUVFOUYxNzUzMTVDNEY5QUUwMi9Qbkl5QkkzTDBzYWJxeUpiaWtJaFlFYkJp eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BuSXlCSTNMMHNhYnF5SmJpa0loWUViQml5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0E3OC8wMjhGNThGRTE2RDkxMUVFOUYxNzUzMTVDNEY5QUUwMi9Qbkl5QkkzTDBz YWJxeUpiaWtJaFlFYkJpeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIpQ0miPtd6ABUm1Iyu91tfDEIZwQfBN0l3ZsUqb4p72c1LssyEX4h TAo+/90zDH3wq2efWihzL8Sr9dDMD/gSaGTBKIHIu+Y2IrdASHkw6KIeZ6I44WMX zZFF1Uurfdir8P8LOdPFrCNwiR0CidoxKTXjRNv3nGb76KjktwOysueCbZC4uqYq 896PKLui22pdSONC5ytOWMPg78nV9U+mxNfzpOGplk5uwS17mT08Bby8m12PfkWM Bgz6ywdEOAlWBNkb2w7kfqcYceYPPfOW7dfSmO1lzvFn4RDgZR7Ge2bHk5n1gX2g KutEYJcHqRH/jgeOIsDWzpunjPWbh2e2 -----END CERTIFICATE-----Generated at Sun Jan 25 10:59:27 2026 by rpki-client