This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft File: PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft (raw, json) Hash identifier: zaCLFtOa+a2r733/wStobRkQilgGyLvTtyh+WVOwZeI= Subject key identifier: C9:5A:3F:6E:0F:0E:E0:B6:36:87:4B:56:20:EF:79:77:B5:F6:02:6B Authority key identifier: 3E:03:FD:15:98:00:99:B5:BF:50:21:E9:0B:E1:F4:A7:7E:00:C7:9C Certificate issuer: /CN=A91538E7/serialNumber=3E03FD15980099B5BF5021E90BE1F4A77E00C79C Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgP9FZgAmbW_UCHpC-H0p34Ax5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft Manifest number: 088B Signing time: Sat 24 Jan 2026 20:17:15 +0000 Manifest this update: Sat 24 Jan 2026 20:17:15 +0000 Manifest next update: Sat 31 Jan 2026 20:17:15 +0000 Files and hashes: 1: PgP9FZgAmbW_UCHpC-H0p34Ax5w.crl (hash: bzq5HIbVMi/DuReBoi3ixTFT/RDp9829ldZw7VEAgyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.crl rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgP9FZgAmbW_UCHpC-H0p34Ax5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91538E7, serialNumber=3E03FD15980099B5BF5021E90BE1F4A77E00C79C Validity Not Before: Jan 24 20:17:15 2026 GMT Not After : Jan 31 20:17:15 2026 GMT Subject: CN=697528cb-d900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:54:91:09:23:b8:e4:d2:c6:31:8a:77:a3:8d: dd:de:4e:41:20:cb:44:60:79:c7:20:71:94:cb:83: de:1c:dc:fa:9f:fd:00:fb:9a:e5:67:b5:2b:f9:0f: 83:c3:21:20:33:bd:a2:77:35:31:72:ec:a7:6b:51: 91:55:ac:9b:74:a8:64:ad:d2:8f:dd:1f:7c:3c:60: a8:d9:09:0a:9e:a5:2b:f7:c9:55:ae:d0:73:c3:3b: 1f:0a:f3:f7:05:61:d5:78:96:92:67:4d:67:66:12: e7:95:7c:9e:78:a2:12:66:94:3f:84:09:6f:70:e2: 4e:62:f4:c2:3f:f6:d9:03:c7:ba:78:48:35:93:78: ed:80:3e:2f:c5:cc:82:d0:4c:21:5e:29:bd:3a:d5: 03:c5:a3:a9:3b:b0:47:df:91:8a:79:0a:03:ae:e4: 59:f3:55:3f:41:47:ce:e3:7d:78:f4:e4:1a:9c:00: 3d:20:f9:73:9a:33:ac:60:44:4b:56:57:cd:1a:da: 32:23:a9:32:b9:a4:8d:df:c0:a5:84:9c:5b:96:a7: d2:e3:79:59:48:65:35:31:2e:f7:c4:6a:0f:0e:42: c3:b2:17:a5:b7:cf:03:de:65:db:89:93:03:88:4c: 2e:01:03:b0:f1:c9:d3:29:6d:81:08:20:42:f2:5b: 02:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5A:3F:6E:0F:0E:E0:B6:36:87:4B:56:20:EF:79:77:B5:F6:02:6B X509v3 Authority Key Identifier: keyid:3E:03:FD:15:98:00:99:B5:BF:50:21:E9:0B:E1:F4:A7:7E:00:C7:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PgP9FZgAmbW_UCHpC-H0p34Ax5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/BF404A5A026711EB8E1C301AC4F9AE02/PgP9FZgAmbW_UCHpC-H0p34Ax5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:d7:f8:25:f3:6d:55:8b:74:21:82:c4:47:33:ed:e4:8c:9a: 31:0b:1c:d5:7f:7f:35:25:26:22:2f:0e:ac:08:61:03:d5:23: 1c:7b:86:0e:4d:e6:78:11:ea:ec:01:01:d0:33:d5:2e:e4:3f: 6c:87:83:e4:37:00:f1:d9:2f:0b:17:27:9e:0a:9c:d7:8b:d7: dd:06:1a:f3:89:51:03:11:30:6c:f4:fc:c5:e8:4d:cf:16:8b: a9:11:e6:ca:2c:bf:9c:3f:45:85:4c:04:1d:d1:06:bc:bc:51: 9f:12:8b:b5:1a:a9:7a:6a:e7:2b:c8:18:8d:a7:58:57:c1:9e: f4:8b:04:e0:f5:6a:d0:b9:64:73:42:8b:f5:13:76:fc:c8:84: a6:47:3d:76:b7:a7:8f:e6:36:21:7f:d4:be:49:92:f1:d4:99: 8a:99:78:92:7d:99:e5:6e:ef:cb:4e:a4:a5:4e:0f:9b:bc:da: 10:0e:19:54:d8:e8:f7:77:be:fd:5c:42:35:30:af:6e:50:90: 31:f2:2b:99:79:c2:44:4b:ad:ec:54:86:49:07:3a:d6:1b:be: ef:d0:bb:00:d7:09:00:09:9a:85:fd:c4:aa:09:ca:e1:46:78: 50:39:2e:d9:3c:08:94:08:2c:f6:ae:08:27:0d:74:2f:ab:5b: 65:06:a3:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzhFNzExMC8GA1UEBRMoM0UwM0ZEMTU5ODAwOTlCNUJGNTAyMUU5MEJFMUY0QTc3 RTAwQzc5QzAeFw0yNjAxMjQyMDE3MTVaFw0yNjAxMzEyMDE3MTVaMBgxFjAUBgNV BAMMDTY5NzUyOGNiLWQ5MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmVJEJI7jk0sYxinejjd3eTkEgy0RgeccgcZTLg94c3Pqf/QD7muVntSv5D4PD ISAzvaJ3NTFy7KdrUZFVrJt0qGSt0o/dH3w8YKjZCQqepSv3yVWu0HPDOx8K8/cF YdV4lpJnTWdmEueVfJ54ohJmlD+ECW9w4k5i9MI/9tkDx7p4SDWTeO2APi/FzILQ TCFeKb061QPFo6k7sEffkYp5CgOu5FnzVT9BR87jfXj05BqcAD0g+XOaM6xgREtW V80a2jIjqTK5pI3fwKWEnFuWp9LjeVlIZTUxLvfEag8OQsOyF6W3zwPeZduJkwOI TC4BA7DxydMpbYEIIELyWwKDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyVo/bg8O 4LY2h0tWIO95d7X2AmswHwYDVR0jBBgwFoAUPgP9FZgAmbW/UCHpC+H0p34Ax5ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOEU3L0JGNDA0QTVBMDI2 NzExRUI4RTFDMzAxQUM0RjlBRTAyL1BnUDlGWmdBbWJXX1VDSHBDLUgwcDM0QXg1 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUGdQOUZaZ0FtYldfVUNIcEMtSDBwMzRBeDV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz OEU3L0JGNDA0QTVBMDI2NzExRUI4RTFDMzAxQUM0RjlBRTAyL1BnUDlGWmdBbWJX X1VDSHBDLUgwcDM0QXg1dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJHX+CXzbVWLdCGCxEcz7eSMmjELHNV/fzUlJiIvDqwIYQPVIxx7hg5N 5ngR6uwBAdAz1S7kP2yHg+Q3APHZLwsXJ54KnNeL190GGvOJUQMRMGz0/MXoTc8W i6kR5sosv5w/RYVMBB3RBry8UZ8Si7UaqXpq5yvIGI2nWFfBnvSLBOD1atC5ZHNC i/UTdvzIhKZHPXa3p4/mNiF/1L5JkvHUmYqZeJJ9meVu78tOpKVOD5u82hAOGVTY 6Pd3vv1cQjUwr25QkDHyK5l5wkRLrexUhkkHOtYbvu/QuwDXCQAJmoX9xKoJyuFG eFA5Ltk8CJQILPauCCcNdC+rW2UGo/I= -----END CERTIFICATE-----Generated at Sun Jan 25 09:32:09 2026 by rpki-client