This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft File: PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft (raw, json) Hash identifier: 5VMbpMP5ytYAOvTgj9gVMhsGM/QEUqsP6brae+oQ3UM= Subject key identifier: 23:AE:BC:27:AE:AB:FC:39:CD:18:FE:BE:A3:75:A0:DE:6A:C2:DE:65 Authority key identifier: 3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2 Certificate issuer: /CN=A914E6AA/serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2 Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft Manifest number: 0ABE Signing time: Sat 24 Jan 2026 21:50:28 +0000 Manifest this update: Sat 24 Jan 2026 21:50:28 +0000 Manifest next update: Sat 31 Jan 2026 21:50:28 +0000 Files and hashes: 1: PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl (hash: FtNhoySAl6tybnqd0KbZU7J6Df2qFp3qU659mKq4suE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=3D51EDC43A3999B1371CE5C04142083FE287D0F2 Validity Not Before: Jan 24 21:50:28 2026 GMT Not After : Jan 31 21:50:28 2026 GMT Subject: CN=69753ea4-730b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e1:9e:29:f7:ea:ce:5f:68:ab:5b:c1:77:76: 70:b0:42:93:ed:8b:f3:cf:51:c2:9e:d7:ff:85:2e: 86:e9:63:ff:6f:1a:80:72:1f:b6:fc:03:3a:03:9c: 53:0d:66:d3:15:ec:00:f1:08:81:2d:f9:f5:7e:d3: 37:57:50:b6:31:f3:49:17:b3:5f:f7:c7:49:26:d7: 95:2b:52:94:2a:39:82:c3:ee:14:d0:c1:14:a6:2e: 13:b1:62:fb:b7:86:70:12:b1:69:40:4f:0d:6a:13: c6:92:6f:a2:b9:97:97:5e:bd:7b:49:8d:2e:8a:f0: a6:24:26:79:a7:2b:db:45:71:77:ed:0c:34:35:1a: 72:6b:73:76:e9:48:34:88:63:74:29:83:69:36:92: 99:d0:72:62:f1:e1:98:1b:76:91:54:87:c8:85:4e: 90:eb:20:24:6a:a0:6b:84:53:0d:81:80:71:4a:c3: aa:52:87:c4:44:53:e4:e3:eb:69:ba:db:79:1e:06: e0:26:9f:7f:55:bd:be:2c:51:7a:7f:94:ca:15:97: da:4a:03:6d:13:c5:53:e2:28:e3:82:01:e9:cc:bc: 8f:e0:15:93:fb:50:d2:0d:4a:05:79:88:6b:03:b5: 87:0d:29:59:28:67:57:0c:ac:f2:70:77:12:82:45: 3b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:AE:BC:27:AE:AB:FC:39:CD:18:FE:BE:A3:75:A0:DE:6A:C2:DE:65 X509v3 Authority Key Identifier: keyid:3D:51:ED:C4:3A:39:99:B1:37:1C:E5:C0:41:42:08:3F:E2:87:D0:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVHtxDo5mbE3HOXAQUIIP-KH0PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/PVHtxDo5mbE3HOXAQUIIP-KH0PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:2a:7b:40:42:18:e5:d2:df:ac:a2:37:58:10:72:a1:9c:98: 84:26:8e:23:89:8f:05:a9:06:1d:f1:be:fd:05:8d:a4:06:48: f1:6c:5e:ac:57:ad:41:77:a6:03:89:ec:7d:87:41:9c:c8:e2: 32:2b:64:ad:50:1c:23:30:c4:44:1f:8f:14:37:66:08:3c:72: 3e:33:cf:24:4d:9e:15:e4:2f:a0:ef:27:af:b4:ce:d0:59:ea: 5a:4f:07:09:9b:c8:a4:80:7e:b8:04:24:96:5a:3d:46:15:b4: 82:0a:32:cb:71:62:f4:68:5e:54:3f:dc:2d:32:be:b9:12:79: cf:89:8f:31:56:8c:cb:e9:48:ce:c9:df:5d:cb:41:32:eb:28: 2f:ae:08:b4:9b:eb:29:2d:28:a7:88:36:9c:c2:5e:46:73:ec: a1:be:63:b9:13:3b:07:2c:69:72:ea:95:42:fe:0c:a7:3a:8d: 84:a0:38:d1:1a:34:1c:ca:bb:63:ff:66:3b:97:96:bb:56:03: df:c5:e1:56:9b:bf:b4:07:19:81:a7:0a:26:94:48:51:64:71: 7e:a6:2d:3f:c6:65:e2:8b:df:57:8b:44:99:4d:7e:ff:cc:46: 55:09:d9:48:05:e6:ff:01:36:b2:45:10:bf:ec:9d:4e:1a:bb: 0d:92:94:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKDNENTFFREM0M0EzOTk5QjEzNzFDRTVDMDQxNDIwODNG RTI4N0QwRjIwHhcNMjYwMTI0MjE1MDI4WhcNMjYwMTMxMjE1MDI4WjAYMRYwFAYD VQQDDA02OTc1M2VhNC03MzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+GeKffqzl9oq1vBd3ZwsEKT7Yvzz1HCntf/hS6G6WP/bxqAch+2/AM6A5xT DWbTFewA8QiBLfn1ftM3V1C2MfNJF7Nf98dJJteVK1KUKjmCw+4U0MEUpi4TsWL7 t4ZwErFpQE8NahPGkm+iuZeXXr17SY0uivCmJCZ5pyvbRXF37Qw0NRpya3N26Ug0 iGN0KYNpNpKZ0HJi8eGYG3aRVIfIhU6Q6yAkaqBrhFMNgYBxSsOqUofERFPk4+tp utt5HgbgJp9/Vb2+LFF6f5TKFZfaSgNtE8VT4ijjggHpzLyP4BWT+1DSDUoFeYhr A7WHDSlZKGdXDKzycHcSgkU7LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOuvCeu q/w5zRj+vqN1oN5qwt5lMB8GA1UdIwQYMBaAFD1R7cQ6OZmxNxzlwEFCCD/ih9Dy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9QVkh0eERvNW1iRTNIT1hBUVVJSVAtS0gw UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BWSHR4RG81bWJFM0hPWEFRVUlJUC1LSDBQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9QVkh0eERvNW1i RTNIT1hBUVVJSVAtS0gwUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANKntAQhjl0t+sojdYEHKhnJiEJo4jiY8FqQYd8b79BY2kBkjxbF6s V61Bd6YDiex9h0GcyOIyK2StUBwjMMREH48UN2YIPHI+M88kTZ4V5C+g7yevtM7Q WepaTwcJm8ikgH64BCSWWj1GFbSCCjLLcWL0aF5UP9wtMr65EnnPiY8xVozL6UjO yd9dy0Ey6ygvrgi0m+spLSiniDacwl5Gc+yhvmO5EzsHLGly6pVC/gynOo2EoDjR GjQcyrtj/2Y7l5a7VgPfxeFWm7+0BxmBpwomlEhRZHF+pi0/xmXii99Xi0SZTX7/ zEZVCdlIBeb/ATayRRC/7J1OGrsNkpSc -----END CERTIFICATE-----Generated at Sun Jan 25 06:05:21 2026 by rpki-client