This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft File: PB_di6MB3OPbPwvMJchpTOG83H0.mft (raw, json) Hash identifier: BirbpMv01BOlPrK58JVz89X4vISsPWYVHad7K1TI/Nc= Subject key identifier: CA:01:62:5A:BA:BF:DD:71:AF:FC:A6:63:AF:22:65:6E:9A:2D:3E:E6 Authority key identifier: 3C:1F:DD:8B:A3:01:DC:E3:DB:3F:0B:CC:25:C8:69:4C:E1:BC:DC:7D Certificate issuer: /CN=A91A08FD/serialNumber=3C1FDD8BA301DCE3DB3F0BCC25C8694CE1BCDC7D Certificate serial: 0DFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft Manifest number: 0DF2 Signing time: Sat 24 Jan 2026 17:30:42 +0000 Manifest this update: Sat 24 Jan 2026 17:30:42 +0000 Manifest next update: Sat 31 Jan 2026 17:30:42 +0000 Files and hashes: 1: PB_di6MB3OPbPwvMJchpTOG83H0.crl (hash: UE6bVjKbCGRIwiX1YnNy7UbQRjrAyfIEYjYmt0aFfTw=) 2: 3802A98EC8AC11E9877DCE2FC4F9AE02.roa (hash: 5AhgINS9PwniKFtC6UdMhxxWx5F0pu9QmvKHh6K5mSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.crl rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3580 (0xdfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A08FD, serialNumber=3C1FDD8BA301DCE3DB3F0BCC25C8694CE1BCDC7D Validity Not Before: Jan 24 17:30:42 2026 GMT Not After : Jan 31 17:30:42 2026 GMT Subject: CN=697501c2-a814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e6:f3:bf:c9:e0:61:a0:5e:e5:7d:d7:c8:4e: c5:36:bb:a8:c2:8b:2a:50:56:0b:73:b7:1d:b0:1b: 0e:57:c0:87:cc:cf:3d:9e:7b:cf:d5:7e:c0:0a:01: c9:7d:89:fd:e7:29:1e:3c:fe:cb:c3:18:51:a2:67: 16:a4:ee:f4:79:d4:e9:c5:36:ee:71:b4:c1:4a:09: 2d:39:c4:77:9a:f5:7f:02:94:a4:0c:ae:3b:7c:ae: 8b:8a:9d:2f:14:4f:52:f9:68:4e:dd:33:56:42:e6: 44:4b:42:d4:33:e4:f1:67:90:bd:12:74:94:65:eb: 6e:dd:68:21:f1:16:4c:7f:d1:48:f6:cf:43:e8:9e: df:1c:a0:4c:8b:d4:0c:73:ff:28:d7:9d:56:f7:19: 95:fb:b4:33:db:06:27:54:90:3c:86:6e:25:74:bc: 6a:91:bb:83:be:38:6f:52:01:db:fa:f3:56:9b:c8: 42:8b:79:39:dc:6c:4b:60:d7:26:9c:08:90:fd:57: 7e:64:ed:90:2d:16:64:c5:9d:e6:37:84:ee:b5:0e: 78:00:f5:00:e9:27:b3:44:51:81:da:00:b7:67:d1: 15:e8:b1:99:08:93:fc:3f:28:d0:cf:32:f2:d7:bd: 0b:ac:01:d6:d5:63:45:f1:bd:5d:2f:07:0f:9c:1a: 6a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:01:62:5A:BA:BF:DD:71:AF:FC:A6:63:AF:22:65:6E:9A:2D:3E:E6 X509v3 Authority Key Identifier: keyid:3C:1F:DD:8B:A3:01:DC:E3:DB:3F:0B:CC:25:C8:69:4C:E1:BC:DC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:62:ab:e6:5d:2c:e4:9a:f9:e2:7b:4f:17:b1:4d:70:4b:b5: 61:02:08:0e:77:1d:56:1f:4d:e7:28:cc:cc:a5:8c:ba:57:93: e3:e5:df:52:a2:5a:5e:77:2b:29:53:36:c3:b3:1e:9c:b9:e5: 32:6c:5f:11:5e:f5:4d:6e:b0:2c:eb:1d:7c:de:e6:17:12:d5: 06:71:88:5e:43:45:5f:13:ab:25:8d:63:f3:cf:ad:a2:69:ea: ed:e9:3f:61:47:50:18:ee:9e:cb:dd:11:0d:df:9f:e9:2f:f9: c3:7a:ad:59:a0:18:1c:85:21:09:c0:b0:ed:6a:37:46:c3:59: 66:e6:f6:8f:37:c9:c1:0f:fa:f1:84:17:d2:c5:07:05:e4:ac: 31:f1:40:3a:af:14:b3:83:54:d2:7d:07:a4:c2:8a:1d:47:63: fb:44:05:9e:e5:76:30:07:6e:d2:fd:ec:35:9d:df:7a:c0:b0: 5e:4b:00:fe:4e:0b:a9:da:03:6f:84:10:ce:f0:82:bf:77:42: e6:e5:f6:f9:2b:a3:bc:25:90:26:cd:7d:b0:dd:8e:67:3c:71: 7e:dc:9f:32:47:e0:fb:f4:bf:7e:d2:9c:1c:02:27:eb:37:62: 91:63:64:3a:7d:f2:dd:cd:ea:c5:31:37:48:14:2c:1d:fc:30: e5:23:fe:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4RkQxMTAvBgNVBAUTKDNDMUZERDhCQTMwMURDRTNEQjNGMEJDQzI1Qzg2OTRD RTFCQ0RDN0QwHhcNMjYwMTI0MTczMDQyWhcNMjYwMTMxMTczMDQyWjAYMRYwFAYD VQQDDA02OTc1MDFjMi1hODE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+bzv8ngYaBe5X3XyE7FNruowosqUFYLc7cdsBsOV8CHzM89nnvP1X7ACgHJ fYn95ykePP7LwxhRomcWpO70edTpxTbucbTBSgktOcR3mvV/ApSkDK47fK6Lip0v FE9S+WhO3TNWQuZES0LUM+TxZ5C9EnSUZetu3Wgh8RZMf9FI9s9D6J7fHKBMi9QM c/8o151W9xmV+7Qz2wYnVJA8hm4ldLxqkbuDvjhvUgHb+vNWm8hCi3k53GxLYNcm nAiQ/Vd+ZO2QLRZkxZ3mN4TutQ54APUA6SezRFGB2gC3Z9EV6LGZCJP8PyjQzzLy 170LrAHW1WNF8b1dLwcPnBpqNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoBYlq6 v91xr/ymY68iZW6aLT7mMB8GA1UdIwQYMBaAFDwf3YujAdzj2z8LzCXIaUzhvNx9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDhGRC85RjQyRUFEOEM4 QUIxMUU5ODI5RDI4MkZDNEY5QUUwMi9QQl9kaTZNQjNPUGJQd3ZNSmNocFRPRzgz SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BCX2RpNk1CM09QYlB3dk1KY2hwVE9HODNIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDhGRC85RjQyRUFEOEM4QUIxMUU5ODI5RDI4MkZDNEY5QUUwMi9QQl9kaTZNQjNP UGJQd3ZNSmNocFRPRzgzSDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvYqvmXSzkmvnie08XsU1wS7VhAggOdx1WH03nKMzMpYy6V5Pj5d9S olpedyspUzbDsx6cueUybF8RXvVNbrAs6x183uYXEtUGcYheQ0VfE6sljWPzz62i aert6T9hR1AY7p7L3REN35/pL/nDeq1ZoBgchSEJwLDtajdGw1lm5vaPN8nBD/rx hBfSxQcF5Kwx8UA6rxSzg1TSfQekwoodR2P7RAWe5XYwB27S/ew1nd96wLBeSwD+ Tgup2gNvhBDO8IK/d0Lm5fb5K6O8JZAmzX2w3Y5nPHF+3J8yR+D79L9+0pwcAifr N2KRY2Q6ffLdzerFMTdIFCwd/DDlI/5Z -----END CERTIFICATE-----Generated at Sun Jan 25 13:50:24 2026 by rpki-client