This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft File: PwmXnYiKPadxYLPIBzfMNgDGuN4.mft (raw, json) Hash identifier: BrMIjf1p9EehgeEkw90Jz2FerLUt2tomyuASS4DzV9E= Subject key identifier: 17:D3:E9:30:A9:93:B5:89:4E:7C:C7:90:EC:44:D1:70:A7:E1:4D:4F Authority key identifier: 3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE Certificate issuer: /CN=A91389E7/serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft Manifest number: 72 Signing time: Sun 25 Jan 2026 05:58:57 +0000 Manifest this update: Sun 25 Jan 2026 05:58:57 +0000 Manifest next update: Sun 01 Feb 2026 05:58:57 +0000 Files and hashes: 1: PwmXnYiKPadxYLPIBzfMNgDGuN4.crl (hash: BULjCAVaAYpQ8Tnfiu8XFS2YHcDmiC5SKfGzmSEJytY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91389E7, serialNumber=3F09979D888A3DA77160B3C80737CC3600C6B8DE Validity Not Before: Jan 25 05:58:57 2026 GMT Not After : Feb 1 05:58:57 2026 GMT Subject: CN=6975b121-9a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:43:3c:e0:f8:71:a5:20:5f:7c:2a:04:d9:ff: 0d:60:8b:6f:ed:a8:17:56:4d:f2:37:2c:de:d9:f8: f0:59:23:97:68:f3:b4:d7:34:ef:3c:8e:d7:df:96: 22:8c:ac:48:77:f0:54:1e:52:de:43:ba:f1:d5:e1: 85:51:a5:86:fa:36:9e:96:35:70:a8:9a:cd:31:53: ff:33:d5:d1:e2:9a:c5:ec:c1:72:56:c5:95:5b:af: 71:bf:ac:cc:63:d3:0c:93:13:fb:f4:b7:4e:aa:4c: 77:03:7c:8d:f5:2d:8a:d9:ce:7b:ff:b6:a3:20:67: 85:f4:e6:50:b9:27:11:e7:a1:45:ea:41:df:6c:82: 2e:f8:e2:e9:9b:3f:80:fa:a6:b1:d7:87:37:f1:a5: 1e:d3:db:2b:a9:ff:04:0e:6d:4f:1f:03:94:84:56: 04:b2:d8:7a:06:e0:1f:1f:b2:fa:20:36:8f:a6:95: fe:90:cc:fb:4e:4b:96:35:1c:e3:93:86:b7:93:a3: dd:7a:73:e4:07:13:b0:0b:74:9a:d4:63:58:3c:4d: 24:3d:32:7e:4e:37:c7:ba:b0:7e:24:a2:4f:e5:7f: 96:e1:a0:66:f4:8e:32:48:35:e1:60:1d:94:8c:dc: f2:b4:3a:2d:74:c3:ad:01:13:1c:08:b4:5a:64:7b: c8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D3:E9:30:A9:93:B5:89:4E:7C:C7:90:EC:44:D1:70:A7:E1:4D:4F X509v3 Authority Key Identifier: keyid:3F:09:97:9D:88:8A:3D:A7:71:60:B3:C8:07:37:CC:36:00:C6:B8:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PwmXnYiKPadxYLPIBzfMNgDGuN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/A27FE6DC4C0911F09F38B628C4F9AE02/PwmXnYiKPadxYLPIBzfMNgDGuN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:67:ec:d1:1b:d7:4d:26:c4:05:b7:d9:7e:e3:34:94:ac:3b: 8f:b1:34:cb:26:eb:1f:73:2a:a2:b2:53:ce:67:0d:b4:51:97: e7:91:4d:d3:f9:4b:54:28:ed:6a:f4:49:ac:0f:d9:70:4a:b1: 97:fe:09:bd:08:19:96:ef:8f:a0:f9:76:9d:dc:0d:6c:73:ba: fc:b4:ba:52:0d:61:00:2d:77:26:50:9b:af:02:08:d1:3d:1c: fd:42:25:3e:1a:8b:12:93:5b:25:2c:a3:0e:6b:f1:7f:2b:c5: d3:b4:15:aa:98:82:a5:86:a0:49:d5:de:11:f7:f1:90:86:23: 6c:42:52:92:7e:eb:04:c9:0d:b3:9c:be:01:71:5a:4b:87:20: 0f:8f:0e:4f:ae:c3:00:a8:bb:af:7a:99:8c:e3:fd:56:a3:bf: 14:db:b0:30:93:c6:ea:56:6f:fe:be:d1:43:cc:e7:fc:9c:2d: db:78:fc:e2:52:e4:c2:e6:ca:c5:07:c3:b2:7c:9d:6d:97:33: ae:77:f0:d8:34:28:9e:89:d5:b5:a0:28:32:36:70:95:91:19: 18:de:38:c6:0a:04:f2:54:ef:21:cb:0c:36:82:f4:30:61:25: d9:61:a4:a9:a2:69:17:d9:28:c9:29:73:61:52:7d:9c:13:fa: 77:55:ff:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODlFNzExMC8GA1UEBRMoM0YwOTk3OUQ4ODhBM0RBNzcxNjBCM0M4MDczN0NDMzYw MEM2QjhERTAeFw0yNjAxMjUwNTU4NTdaFw0yNjAyMDEwNTU4NTdaMBgxFjAUBgNV BAMMDTY5NzViMTIxLTlhM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClQzzg+HGlIF98KgTZ/w1gi2/tqBdWTfI3LN7Z+PBZI5do87TXNO88jtffliKM rEh38FQeUt5DuvHV4YVRpYb6Np6WNXComs0xU/8z1dHimsXswXJWxZVbr3G/rMxj 0wyTE/v0t06qTHcDfI31LYrZznv/tqMgZ4X05lC5JxHnoUXqQd9sgi744umbP4D6 prHXhzfxpR7T2yup/wQObU8fA5SEVgSy2HoG4B8fsvogNo+mlf6QzPtOS5Y1HOOT hreTo916c+QHE7ALdJrUY1g8TSQ9Mn5ON8e6sH4kok/lf5bhoGb0jjJINeFgHZSM 3PK0Oi10w60BExwItFpke8hBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF9PpMKmT tYlOfMeQ7ETRcKfhTU8wHwYDVR0jBBgwFoAUPwmXnYiKPadxYLPIBzfMNgDGuN4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4OUU3L0EyN0ZFNkRDNEMw OTExRjA5RjM4QjYyOEM0RjlBRTAyL1B3bVhuWWlLUGFkeFlMUElCemZNTmdER3VO NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUHdtWG5ZaUtQYWR4WUxQSUJ6Zk1OZ0RHdU40LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 OUU3L0EyN0ZFNkRDNEMwOTExRjA5RjM4QjYyOEM0RjlBRTAyL1B3bVhuWWlLUGFk eFlMUElCemZNTmdER3VONC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADBn7NEb100mxAW32X7jNJSsO4+xNMsm6x9zKqKyU85nDbRRl+eRTdP5 S1Qo7Wr0SawP2XBKsZf+Cb0IGZbvj6D5dp3cDWxzuvy0ulINYQAtdyZQm68CCNE9 HP1CJT4aixKTWyUsow5r8X8rxdO0FaqYgqWGoEnV3hH38ZCGI2xCUpJ+6wTJDbOc vgFxWkuHIA+PDk+uwwCou696mYzj/VajvxTbsDCTxupWb/6+0UPM5/ycLdt4/OJS 5MLmysUHw7J8nW2XM6538Ng0KJ6J1bWgKDI2cJWRGRjeOMYKBPJU7yHLDDaC9DBh JdlhpKmiaRfZKMkpc2FSfZwT+ndV/3g= -----END CERTIFICATE-----Generated at Sun Jan 25 09:25:09 2026 by rpki-client