This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft File: PQqIwMyj7oZ3zRffPuht5x38ESk.mft (raw, json) Hash identifier: zcymld5pl4cEqTH/rSbgEH8tS0zph/xIvfGbIcvoUAc= Subject key identifier: 1A:C7:26:03:A3:31:B9:9A:8A:3C:92:DC:19:F5:4C:90:B1:D2:E7:F7 Authority key identifier: 3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29 Certificate issuer: /CN=A91607DE/serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129 Certificate serial: 03C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft Manifest number: 03C3 Signing time: Sat 24 Jan 2026 23:49:35 +0000 Manifest this update: Sat 24 Jan 2026 23:49:35 +0000 Manifest next update: Sat 31 Jan 2026 23:49:35 +0000 Files and hashes: 1: PQqIwMyj7oZ3zRffPuht5x38ESk.crl (hash: Bcwfs7CHWWgOLsFU+ZRSJ+QxO2aTb8/zkkmVS+2lnSM=) 2: FD398FA0BB5D11ECA62F8674C4F9AE02.roa (hash: OZN4xQkAGlo2J7xAsq7WK/TKxkfRBmTruJ0GM4QH81c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 968 (0x3c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91607DE, serialNumber=3D0A88C0CCA3EE8677CD17DF3EE86DE71DFC1129 Validity Not Before: Jan 24 23:49:35 2026 GMT Not After : Jan 31 23:49:35 2026 GMT Subject: CN=69755a8f-f7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:69:57:68:dd:11:0c:93:87:f5:e5:77:be:32: 7c:75:e9:61:9b:87:4d:d8:97:6d:fc:72:23:e0:02: df:f5:fa:34:8a:dc:d9:6a:53:75:f7:b0:a3:3d:b4: 62:91:a5:2d:12:0e:87:cb:94:f8:f4:e6:5f:e8:de: 61:37:ef:1d:78:35:0f:09:3c:5f:58:61:21:52:c6: 8c:35:50:60:02:91:d7:58:1d:67:35:a7:2c:b5:29: 67:59:7f:b1:98:d6:36:a7:29:52:82:dc:a4:00:53: 89:5b:8e:d4:1c:5d:b1:8d:4b:6d:fa:c7:40:0c:dd: ed:82:7e:a8:97:89:c1:31:e1:12:0f:89:62:fa:61: 53:fa:da:c3:29:12:78:79:76:2b:92:84:b1:b0:f0: b0:a6:e9:f7:a5:18:1d:73:97:84:68:96:e9:a7:df: 99:5d:f2:6f:34:7b:aa:31:12:76:1b:03:d4:4b:a5: 17:e4:a6:cb:7c:3b:6a:f7:73:b5:aa:bd:c7:11:89: 49:11:5e:6b:f1:fb:d2:51:5e:15:ee:c7:a3:a9:f2: d0:c7:1e:bc:80:95:5d:12:dc:13:9e:82:8f:dc:36: 27:de:fb:4c:ea:8e:e4:21:6e:74:dc:d6:12:7e:50: 20:c1:ba:eb:d1:48:4d:2f:71:d7:b0:0a:e2:19:c5: ac:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C7:26:03:A3:31:B9:9A:8A:3C:92:DC:19:F5:4C:90:B1:D2:E7:F7 X509v3 Authority Key Identifier: keyid:3D:0A:88:C0:CC:A3:EE:86:77:CD:17:DF:3E:E8:6D:E7:1D:FC:11:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQqIwMyj7oZ3zRffPuht5x38ESk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91607DE/C76814C6BB5A11EC908AC96EC4F9AE02/PQqIwMyj7oZ3zRffPuht5x38ESk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:bb:bc:df:b9:ee:94:03:f5:a6:d2:11:ae:e6:19:aa:f2:3c: 41:96:66:d8:9f:e0:8c:20:32:3a:45:b8:c9:8d:ce:91:21:36: 70:ff:5c:2b:c7:08:a4:ec:b0:3b:97:83:fc:55:b6:a3:d8:d8: 12:50:20:55:fb:fa:02:5e:96:2a:ea:d8:4c:e4:07:d9:b4:0d: 2d:25:67:1c:62:d9:09:c8:db:0a:cd:95:d9:e7:c9:9c:ed:88: 39:f1:e6:b0:c3:f3:ba:31:2d:66:03:ae:88:13:fa:d1:41:db: 3e:63:06:21:9c:ef:2d:d7:45:f2:56:d3:b3:20:bd:6e:bd:18: af:d6:6e:05:9a:5e:3d:70:5b:6d:0b:a0:a8:54:c0:99:4d:74: 46:09:2f:39:8c:0a:08:2e:e2:bb:54:df:e7:e4:41:4c:9c:1c: e0:a8:83:cb:7d:ca:04:fc:39:79:fa:33:fc:97:3b:2a:8c:64: 48:ea:01:74:c5:b5:70:6a:26:d6:3f:21:bd:a9:0d:43:5d:13: 3c:73:78:1c:d3:57:4f:22:91:bc:23:56:ca:73:47:2f:b9:dd: ed:79:a9:31:77:70:6a:fa:b1:c1:9e:58:f7:ec:11:4e:3e:34: 76:36:ca:b1:ac:fd:95:e4:11:36:d2:b9:45:f0:e2:da:d8:fc: 26:c2:5a:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA3REUxMTAvBgNVBAUTKDNEMEE4OEMwQ0NBM0VFODY3N0NEMTdERjNFRTg2REU3 MURGQzExMjkwHhcNMjYwMTI0MjM0OTM1WhcNMjYwMTMxMjM0OTM1WjAYMRYwFAYD VQQDDA02OTc1NWE4Zi1mN2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmlXaN0RDJOH9eV3vjJ8delhm4dN2Jdt/HIj4ALf9fo0itzZalN197CjPbRi kaUtEg6Hy5T49OZf6N5hN+8deDUPCTxfWGEhUsaMNVBgApHXWB1nNacstSlnWX+x mNY2pylSgtykAFOJW47UHF2xjUtt+sdADN3tgn6ol4nBMeESD4li+mFT+trDKRJ4 eXYrkoSxsPCwpun3pRgdc5eEaJbpp9+ZXfJvNHuqMRJ2GwPUS6UX5KbLfDtq93O1 qr3HEYlJEV5r8fvSUV4V7sejqfLQxx68gJVdEtwTnoKP3DYn3vtM6o7kIW503NYS flAgwbrr0UhNL3HXsAriGcWs/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBrHJgOj MbmaijyS3Bn1TJCx0uf3MB8GA1UdIwQYMBaAFD0KiMDMo+6Gd80X3z7obecd/BEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDdERS9DNzY4MTRDNkJC NUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdvWjN6UmZmUHVodDV4MzhF U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BRcUl3TXlqN29aM3pSZmZQdWh0NXgzOEVTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDdERS9DNzY4MTRDNkJCNUExMUVDOTA4QUM5NkVDNEY5QUUwMi9QUXFJd015ajdv WjN6UmZmUHVodDV4MzhFU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2u7zfue6UA/Wm0hGu5hmq8jxBlmbYn+CMIDI6RbjJjc6RITZw/1wr xwik7LA7l4P8Vbaj2NgSUCBV+/oCXpYq6thM5AfZtA0tJWccYtkJyNsKzZXZ58mc 7Yg58eaww/O6MS1mA66IE/rRQds+YwYhnO8t10XyVtOzIL1uvRiv1m4Fml49cFtt C6CoVMCZTXRGCS85jAoILuK7VN/n5EFMnBzgqIPLfcoE/Dl5+jP8lzsqjGRI6gF0 xbVwaibWPyG9qQ1DXRM8c3gc01dPIpG8I1bKc0cvud3teakxd3Bq+rHBnlj37BFO PjR2NsqxrP2V5BE20rlF8OLa2Pwmwlqb -----END CERTIFICATE-----Generated at Sun Jan 25 23:39:25 2026 by rpki-client