This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft File: pGM3j5KTiRbgseQTrw8MinPCH08.mft (raw, json) Hash identifier: tAZGdJwJTCnaaIOjRadYe2CXdn5fcbiIm/H+5w2CG0E= Subject key identifier: E7:8B:35:8D:A8:FB:05:B4:3A:4C:53:64:7D:72:EE:B6:A9:0E:7D:4B Authority key identifier: A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F Certificate issuer: /CN=A917C3A7/serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F Certificate serial: 04CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft Manifest number: 04CF Signing time: Sat 24 Jan 2026 23:03:23 +0000 Manifest this update: Sat 24 Jan 2026 23:03:22 +0000 Manifest next update: Sat 31 Jan 2026 23:03:22 +0000 Files and hashes: 1: pGM3j5KTiRbgseQTrw8MinPCH08.crl (hash: ioDZJmIvF0WOhDZODlT8CNux0FVvcYmcGPEKokimCDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1231 (0x4cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C3A7, serialNumber=A463378F92938916E0B1E413AF0F0C8A73C21F4F Validity Not Before: Jan 24 23:03:22 2026 GMT Not After : Jan 31 23:03:22 2026 GMT Subject: CN=69754fbb-d0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5b:2d:a5:be:fe:91:4f:11:39:06:38:f9:e7: b3:1d:09:21:fe:f0:25:93:91:50:80:b6:dd:90:e7: 2e:1d:4a:a3:49:b9:ed:41:43:46:0b:ec:49:41:6a: 9c:17:a3:fe:5c:ef:4d:99:26:42:0f:8e:b3:de:a2: 52:65:8e:e4:bb:f6:2f:17:af:4e:9f:dc:9c:6a:1d: f2:f7:1b:12:3e:61:1a:19:a4:4a:b7:8c:f7:86:f4: 6c:87:8a:5e:e4:3d:b4:0d:e2:1b:b7:c2:c0:40:1f: 4a:e3:66:92:3f:a9:16:07:be:33:c5:7b:50:5b:47: f2:fa:b6:95:99:48:3a:28:45:3d:82:49:04:b1:fb: 99:2a:b2:ad:01:59:00:2c:ff:05:1c:b5:85:d4:37: 81:6d:0d:66:c0:e6:1a:19:0c:35:6d:33:52:e8:d1: 73:bc:8c:0e:26:5d:21:df:f0:77:6a:17:c8:5c:d1: a9:b7:a0:64:c0:cf:3e:c4:e0:94:f9:8c:0e:a8:e6: ec:25:17:f2:5a:35:16:f6:ad:e1:16:ea:49:af:e3: d6:03:65:0b:fa:b9:76:5f:cd:44:d4:8b:4e:29:c3: 38:43:27:ab:c8:c4:09:28:0d:44:23:97:14:64:e4: a4:0d:88:75:8a:dc:4f:00:1a:10:a9:30:6a:b8:30: 9f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:8B:35:8D:A8:FB:05:B4:3A:4C:53:64:7D:72:EE:B6:A9:0E:7D:4B X509v3 Authority Key Identifier: keyid:A4:63:37:8F:92:93:89:16:E0:B1:E4:13:AF:0F:0C:8A:73:C2:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGM3j5KTiRbgseQTrw8MinPCH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C3A7/E41FF0A6532811EC8352D245C4F9AE02/pGM3j5KTiRbgseQTrw8MinPCH08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:04:86:83:24:79:4d:39:e1:3d:10:ee:66:37:d0:2d:55:f6: dc:53:22:c2:e5:45:d5:f7:13:28:22:4b:7b:40:f1:2a:ca:80: 2a:f6:6c:14:47:0f:75:48:32:0c:fd:9d:65:fd:1e:05:05:52: d4:a3:02:d2:d8:2b:45:1b:75:64:8b:60:57:f7:e0:90:1b:27: 4a:3e:3f:4c:66:b5:50:9a:e8:8e:c2:de:b4:67:f3:f7:53:bb: 73:43:40:94:e5:5b:9c:fb:d6:a5:75:f4:14:7c:da:94:90:0a: 7f:95:46:53:72:8f:0c:22:0f:27:23:c0:3f:f3:dc:97:fc:27: ab:ce:f8:46:d8:f9:c8:28:11:c0:07:d3:bd:4e:c0:94:44:4b: 3e:f6:ab:df:d3:f0:83:6c:e7:b5:f2:2b:ec:5e:7b:2a:78:b6: 00:ee:6c:37:c8:3e:d2:e4:91:28:82:21:a5:59:1d:ac:71:9f: ee:c1:fb:56:3b:1b:ec:71:98:83:41:4e:25:33:4b:61:a4:d2: 4c:c3:eb:24:ed:73:52:ca:9c:00:0f:9a:a0:84:f8:81:07:a7: cc:9c:eb:57:8b:ae:b9:62:16:ec:cb:95:de:b4:51:22:9d:e7: 1a:3d:8e:7d:f7:0b:7c:1e:f6:e7:a5:ac:1a:e3:92:b6:1c:b6: 5c:f1:09:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx N0MzQTcxMTAvBgNVBAUTKEE0NjMzNzhGOTI5Mzg5MTZFMEIxRTQxM0FGMEYwQzhB NzNDMjFGNEYwHhcNMjYwMTI0MjMwMzIyWhcNMjYwMTMxMjMwMzIyWjAYMRYwFAYD VQQDDA02OTc1NGZiYi1kMGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Vstpb7+kU8ROQY4+eezHQkh/vAlk5FQgLbdkOcuHUqjSbntQUNGC+xJQWqc F6P+XO9NmSZCD46z3qJSZY7ku/YvF69On9ycah3y9xsSPmEaGaRKt4z3hvRsh4pe 5D20DeIbt8LAQB9K42aSP6kWB74zxXtQW0fy+raVmUg6KEU9gkkEsfuZKrKtAVkA LP8FHLWF1DeBbQ1mwOYaGQw1bTNS6NFzvIwOJl0h3/B3ahfIXNGpt6BkwM8+xOCU +YwOqObsJRfyWjUW9q3hFupJr+PWA2UL+rl2X81E1ItOKcM4QyeryMQJKA1EI5cU ZOSkDYh1itxPABoQqTBquDCfYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOeLNY2o +wW0OkxTZH1y7rapDn1LMB8GA1UdIwQYMBaAFKRjN4+Sk4kW4LHkE68PDIpzwh9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzNBNy9FNDFGRjBBNjUz MjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlSYmdzZVFUcnc4TWluUENI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BHTTNqNUtUaVJiZ3NlUVRydzhNaW5QQ0gwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzNBNy9FNDFGRjBBNjUzMjgxMUVDODM1MkQyNDVDNEY5QUUwMi9wR00zajVLVGlS YmdzZVFUcnc4TWluUENIMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2BIaDJHlNOeE9EO5mN9AtVfbcUyLC5UXV9xMoIkt7QPEqyoAq9mwU Rw91SDIM/Z1l/R4FBVLUowLS2CtFG3Vki2BX9+CQGydKPj9MZrVQmuiOwt60Z/P3 U7tzQ0CU5Vuc+9aldfQUfNqUkAp/lUZTco8MIg8nI8A/89yX/CerzvhG2PnIKBHA B9O9TsCUREs+9qvf0/CDbOe18ivsXnsqeLYA7mw3yD7S5JEogiGlWR2scZ/uwftW OxvscZiDQU4lM0thpNJMw+sk7XNSypwAD5qghPiBB6fMnOtXi665Yhbsy5XetFEi necaPY599wt8Hvbnpawa45K2HLZc8Qkq -----END CERTIFICATE-----Generated at Sun Jan 25 18:43:36 2026 by rpki-client