This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft File: PNmBJcGXpVFDEgG3kG1QS7iySt4.mft (raw, json) Hash identifier: 6TOWJLIk7DgG8JO60NwPM/Q0oTuZaniQnDq/9GVeimc= Subject key identifier: 51:73:36:29:13:9A:F6:6F:D9:B2:E4:79:17:BC:26:3C:0B:B9:48:0B Authority key identifier: 3C:D9:81:25:C1:97:A5:51:43:12:01:B7:90:6D:50:4B:B8:B2:4A:DE Certificate issuer: /CN=A918BB6D/serialNumber=3CD98125C197A551431201B7906D504BB8B24ADE Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft Manifest number: 0D Signing time: Sun 25 Jan 2026 07:05:03 +0000 Manifest this update: Sun 25 Jan 2026 07:05:03 +0000 Manifest next update: Sun 01 Feb 2026 07:05:03 +0000 Files and hashes: 1: PNmBJcGXpVFDEgG3kG1QS7iySt4.crl (hash: CM7/f5+oG++5YYuxKA2eMJ8uYQmxV5mkJJoFrpw3pck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.crl rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BB6D, serialNumber=3CD98125C197A551431201B7906D504BB8B24ADE Validity Not Before: Jan 25 07:05:03 2026 GMT Not After : Feb 1 07:05:03 2026 GMT Subject: CN=6975c09f-e448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b7:ce:e9:bf:76:bb:10:77:84:8a:02:ca:1b: 53:00:b6:e3:24:9c:71:6a:24:b9:93:57:86:63:79: 29:c6:84:69:4c:10:61:84:8b:8a:3c:f1:df:91:8e: 1d:c2:a9:d8:6b:66:d6:90:0e:63:ba:ff:2a:a7:b7: fa:75:2a:01:b6:06:b3:5a:7e:ad:56:97:c5:a8:70: 05:ec:ee:2c:41:83:28:f7:54:62:be:1a:87:da:c5: ca:c1:f8:93:56:5b:c2:08:33:01:7c:6b:17:b2:0b: 12:9a:bf:92:77:8a:d2:b8:5f:63:26:2b:d1:a8:07: bc:22:bd:fe:0b:f5:fb:0b:fd:be:e9:ba:d5:c8:6e: 01:e2:bf:7e:8f:9d:94:2c:e3:1e:cc:17:1d:16:77: 95:39:48:fb:b9:ab:bd:6a:bc:ca:ab:d1:ae:ca:80: 61:ad:38:c6:b4:ca:35:03:5b:64:1f:35:d7:7e:bb: bc:56:aa:7c:14:67:ba:97:3c:6c:c6:73:4c:02:2e: 1c:dd:eb:bc:3f:fd:78:3a:63:95:06:fd:9c:97:0f: 5d:d6:ba:5c:28:60:e4:f9:96:98:d8:30:74:fe:20: 15:33:38:b0:f8:a6:12:46:49:c2:0b:15:2c:e2:6d: 0a:a1:2b:ee:8f:e0:dc:65:9c:29:ff:1c:73:f9:44: 77:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:73:36:29:13:9A:F6:6F:D9:B2:E4:79:17:BC:26:3C:0B:B9:48:0B X509v3 Authority Key Identifier: keyid:3C:D9:81:25:C1:97:A5:51:43:12:01:B7:90:6D:50:4B:B8:B2:4A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PNmBJcGXpVFDEgG3kG1QS7iySt4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB6D/880D6CACE91B11F0A7541612736F56BC/PNmBJcGXpVFDEgG3kG1QS7iySt4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:dd:ac:60:67:e7:79:4d:17:4f:51:c6:4d:fd:cd:3a:af:a2: bd:8a:18:85:dc:91:35:a4:d6:03:5f:1c:e0:dd:0a:2a:13:1f: 40:fd:83:b4:86:78:ec:2a:fe:64:36:1b:ab:d7:19:9c:11:31: a7:1a:79:41:26:c7:c5:cf:ad:93:b4:14:f5:5c:49:03:00:4d: 19:97:97:20:af:bd:10:95:46:48:68:01:da:27:e7:db:7a:d2: ac:f0:eb:b3:af:91:01:c3:52:ca:f5:59:41:c5:24:8e:a9:df: 79:26:4a:a8:cf:58:85:1f:5b:4a:99:14:bb:68:ec:88:55:dd: f4:66:ea:97:f2:d7:27:ea:dd:fa:5c:bb:8b:1c:ce:40:6d:be: ba:c5:3d:ab:9b:2f:f0:f6:75:8f:67:12:b8:cc:5c:1c:43:8a: b9:69:e4:12:d6:72:71:21:f5:80:d8:9e:9e:0c:5e:5f:7e:84: ce:27:f7:50:fb:5a:2d:13:e1:04:95:45:68:14:b9:fe:f8:c5: ce:e5:d5:fc:c5:a9:47:7d:c5:b0:b3:14:f6:6a:ed:86:57:95: 0d:d7:bc:d4:20:ac:4a:4c:39:1a:38:29:3f:39:df:8e:ec:6c: 44:49:c3:7b:f4:e4:84:55:9c:50:31:af:bf:a5:6a:c4:1a:bd: a5:03:54:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE4 QkI2RDExMC8GA1UEBRMoM0NEOTgxMjVDMTk3QTU1MTQzMTIwMUI3OTA2RDUwNEJC OEIyNEFERTAeFw0yNjAxMjUwNzA1MDNaFw0yNjAyMDEwNzA1MDNaMBgxFjAUBgNV BAMMDTY5NzVjMDlmLWU0NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqt87pv3a7EHeEigLKG1MAtuMknHFqJLmTV4ZjeSnGhGlMEGGEi4o88d+Rjh3C qdhrZtaQDmO6/yqnt/p1KgG2BrNafq1Wl8WocAXs7ixBgyj3VGK+GofaxcrB+JNW W8IIMwF8axeyCxKav5J3itK4X2MmK9GoB7wivf4L9fsL/b7putXIbgHiv36PnZQs 4x7MFx0Wd5U5SPu5q71qvMqr0a7KgGGtOMa0yjUDW2QfNdd+u7xWqnwUZ7qXPGzG c0wCLhzd67w//Xg6Y5UG/ZyXD13WulwoYOT5lpjYMHT+IBUzOLD4phJGScILFSzi bQqhK+6P4NxlnCn/HHP5RHc7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUXM2KROa 9m/ZsuR5F7wmPAu5SAswHwYDVR0jBBgwFoAUPNmBJcGXpVFDEgG3kG1QS7iySt4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCQjZELzg4MEQ2Q0FDRTkx QjExRjBBNzU0MTYxMjczNkY1NkJDL1BObUJKY0dYcFZGREVnRzNrRzFRUzdpeVN0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUE5tQkpjR1hwVkZERWdHM2tHMVFTN2l5U3Q0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC QjZELzg4MEQ2Q0FDRTkxQjExRjBBNzU0MTYxMjczNkY1NkJDL1BObUJKY0dYcFZG REVnRzNrRzFRUzdpeVN0NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABLdrGBn53lNF09Rxk39zTqvor2KGIXckTWk1gNfHODdCioTH0D9g7SG eOwq/mQ2G6vXGZwRMacaeUEmx8XPrZO0FPVcSQMATRmXlyCvvRCVRkhoAdon59t6 0qzw67OvkQHDUsr1WUHFJI6p33kmSqjPWIUfW0qZFLto7IhV3fRm6pfy1yfq3fpc u4sczkBtvrrFPaubL/D2dY9nErjMXBxDirlp5BLWcnEh9YDYnp4MXl9+hM4n91D7 Wi0T4QSVRWgUuf74xc7l1fzFqUd9xbCzFPZq7YZXlQ3XvNQgrEpMORo4KT85347s bERJw3v05IRVnFAxr7+lasQavaUDVLA= -----END CERTIFICATE-----Generated at Sun Jan 25 09:41:20 2026 by rpki-client