This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft File: PcXSlD7UrPqSa3dnapi-yLPJea4.mft (raw, json) Hash identifier: O8h79WS8OIu3aAFScJuipiELjej79HZaW0aC14/sR5M= Subject key identifier: 2B:D4:13:12:2B:E8:22:F9:9A:F8:D7:95:88:68:F0:9D:36:5A:BF:40 Authority key identifier: 3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE Certificate issuer: /CN=A916AF8E/serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE Certificate serial: 07E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft Manifest number: 07E1 Signing time: Sat 24 Jan 2026 20:35:28 +0000 Manifest this update: Sat 24 Jan 2026 20:35:28 +0000 Manifest next update: Sat 31 Jan 2026 20:35:28 +0000 Files and hashes: 1: PcXSlD7UrPqSa3dnapi-yLPJea4.crl (hash: 20aNlWR4c37d197PeQu8TgoQPHwTt2jmmnUK31rR6bA=) 2: 499DE3FC1C1611EB8BD35065C4F9AE02.roa (hash: QnFh/0YdNLZr/ZfMn+21+lOUTuFHow1/2U5v+xOLivo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 20:35:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2025 (0x7e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AF8E, serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE Validity Not Before: Jan 24 20:35:28 2026 GMT Not After : Jan 31 20:35:28 2026 GMT Subject: CN=69752d10-d599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c0:17:4c:df:76:7e:5c:51:29:8b:7c:b8:6e: 67:a5:b2:74:91:ad:4a:0c:96:80:42:b3:7a:c6:d0: 11:37:66:fe:c8:17:c3:00:00:bc:2b:d0:b7:96:62: fc:18:13:b9:05:2c:d4:79:b6:a5:90:3c:0f:f5:86: 00:2d:01:26:09:7c:41:90:30:8b:59:3d:f6:41:d6: 4e:3d:29:22:8f:58:f6:16:00:83:c0:81:ce:9e:c8: cf:ce:9c:70:7b:3f:c3:e7:a7:b7:7b:0f:98:41:a0: 96:e8:dc:65:04:2c:53:9f:6d:08:dc:33:0e:4e:aa: d5:07:f7:3e:81:b8:65:63:6a:39:2d:63:dd:7f:2f: 7a:b2:c5:8d:28:40:51:e6:50:8c:31:90:b5:f4:87: 4d:9e:25:86:d7:e3:fd:9b:6b:b2:31:8a:44:c0:b7: 29:6e:48:cd:d7:bf:62:24:70:a4:5a:93:aa:11:04: e8:cc:52:de:0b:60:3d:e5:d2:fb:65:a6:dc:c7:99: 83:7f:b1:7b:21:37:9d:ec:bb:25:2a:1c:b3:b8:e5: 25:0c:00:1a:22:dd:0c:2f:82:75:98:22:66:9b:29: 50:0c:8a:66:2d:40:1c:25:db:7f:da:79:ed:ef:09: 66:b4:c4:52:4b:33:c1:61:dc:10:bd:45:21:09:5d: a3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D4:13:12:2B:E8:22:F9:9A:F8:D7:95:88:68:F0:9D:36:5A:BF:40 X509v3 Authority Key Identifier: keyid:3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:47:1e:6d:56:f5:f7:2b:10:25:a2:e9:18:02:a5:02:8c:48: 5e:d8:08:93:41:ce:cc:25:31:7d:04:8a:10:45:55:57:a9:1d: ae:6d:62:92:e6:85:39:6e:51:1f:42:f1:25:aa:64:cb:a6:3a: 07:de:dc:8b:0b:de:ea:91:76:05:d4:b6:03:ff:ad:cb:5a:ed: 73:62:f7:95:de:3f:00:53:94:c4:60:f8:bf:70:4d:3f:48:b0: 16:c6:bc:0a:97:96:05:98:37:ca:a3:52:c5:29:b1:d3:a1:e5: 50:0a:d7:da:a6:a0:75:d5:95:b7:f1:de:f8:52:a9:0f:f6:33: e1:8a:1e:3b:e7:68:ef:3a:92:65:1a:a2:13:cc:b1:2a:1b:6c: 9d:df:38:14:31:b4:3a:08:ac:d5:54:7e:24:23:0b:dc:1e:03: da:4f:55:8a:f4:bb:bc:6d:25:9d:62:2f:c7:a5:0a:ce:d0:97: df:89:8d:d8:13:73:ab:82:1e:f0:51:83:85:7d:2d:eb:08:ed: 7e:a2:9a:01:c0:d0:da:e7:23:67:39:63:d6:65:49:74:8a:77: a8:9f:07:03:47:db:93:3a:21:4c:df:f0:b3:d4:bf:c1:59:2a: 61:26:17:51:e1:a7:87:ce:46:e4:ec:1e:db:74:38:e9:01:4b: 45:c4:49:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFGOEUxMTAvBgNVBAUTKDNEQzVEMjk0M0VENEFDRkE5MjZCNzc2NzZBOThCRUM4 QjNDOTc5QUUwHhcNMjYwMTI0MjAzNTI4WhcNMjYwMTMxMjAzNTI4WjAYMRYwFAYD VQQDDA02OTc1MmQxMC1kNTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMAXTN92flxRKYt8uG5npbJ0ka1KDJaAQrN6xtARN2b+yBfDAAC8K9C3lmL8 GBO5BSzUebalkDwP9YYALQEmCXxBkDCLWT32QdZOPSkij1j2FgCDwIHOnsjPzpxw ez/D56e3ew+YQaCW6NxlBCxTn20I3DMOTqrVB/c+gbhlY2o5LWPdfy96ssWNKEBR 5lCMMZC19IdNniWG1+P9m2uyMYpEwLcpbkjN179iJHCkWpOqEQTozFLeC2A95dL7 Zabcx5mDf7F7ITed7LslKhyzuOUlDAAaIt0ML4J1mCJmmylQDIpmLUAcJdt/2nnt 7wlmtMRSSzPBYdwQvUUhCV2jbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvUExIr 6CL5mvjXlYho8J02Wr9AMB8GA1UdIwQYMBaAFD3F0pQ+1Kz6kmt3Z2qYvsizyXmu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUY4RS9EOTRBNzU5NDFD MTQxMUVCQjAzNkRDNjNDNEY5QUUwMi9QY1hTbEQ3VXJQcVNhM2RuYXBpLXlMUEpl YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BjWFNsRDdVclBxU2EzZG5hcGkteUxQSmVhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUY4RS9EOTRBNzU5NDFDMTQxMUVCQjAzNkRDNjNDNEY5QUUwMi9QY1hTbEQ3VXJQ cVNhM2RuYXBpLXlMUEplYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASRx5tVvX3KxAloukYAqUCjEhe2AiTQc7MJTF9BIoQRVVXqR2ubWKS 5oU5blEfQvElqmTLpjoH3tyLC97qkXYF1LYD/63LWu1zYveV3j8AU5TEYPi/cE0/ SLAWxrwKl5YFmDfKo1LFKbHToeVQCtfapqB11ZW38d74UqkP9jPhih4752jvOpJl GqITzLEqG2yd3zgUMbQ6CKzVVH4kIwvcHgPaT1WK9Lu8bSWdYi/HpQrO0JffiY3Y E3Orgh7wUYOFfS3rCO1+opoBwNDa5yNnOWPWZUl0ineonwcDR9uTOiFM3/Cz1L/B WSphJhdR4aeHzkbk7B7bdDjpAUtFxEmv -----END CERTIFICATE-----Generated at Sun Jan 25 07:28:38 2026 by rpki-client