This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft
File: PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft (raw, json)
Hash identifier: i3XnEsbJ7c5MzAucwzpnISPrMUmcTIUJmGMoJwVY3TU=
Subject key identifier: 02:66:00:8A:78:E3:6F:E4:D1:23:32:D7:ED:DC:E8:E2:08:8C:EB:E8
Authority key identifier: 3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14
Certificate issuer: /CN=A91A92FE/serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714
Certificate serial: 13C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft
Manifest number: 13BE
Signing time: Sat 24 Jan 2026 16:41:16 +0000
Manifest this update: Sat 24 Jan 2026 16:41:16 +0000
Manifest next update: Sat 31 Jan 2026 16:41:16 +0000
Files and hashes: 1: PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl (hash: 7U5W796rWFdwAmdmnj6NtVxJ9DlmOt2jMnU5xXYzvls=)
2: 2789A9EEE38B11EBB246E13FC4F9AE02.roa (hash: cVw4oQcu4jILJ7GW153O1ZXHHSwLOkKZrLSzT1rC+6w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl
rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:41:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5065 (0x13c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A92FE, serialNumber=3D43EDFE64F614E11306A87F1EF24F282E7E3714
Validity
Not Before: Jan 24 16:41:16 2026 GMT
Not After : Jan 31 16:41:16 2026 GMT
Subject: CN=6974f62c-a4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3c:3c:4b:26:b5:28:42:de:8a:fd:1a:62:c5:
21:1d:1f:10:02:93:37:a0:a9:9b:7b:14:7f:f5:af:
fa:4c:ec:db:81:27:70:12:0c:ef:fb:90:33:80:c7:
5b:84:e6:e5:98:f6:37:3e:63:f5:75:03:66:b0:ab:
1e:db:56:df:89:53:34:32:fd:97:3a:2c:94:a8:03:
4d:bd:12:f8:74:db:db:bf:57:1b:7a:de:35:6f:d1:
e5:7e:8f:34:f0:e1:e2:17:bd:c9:bc:78:e8:c0:f3:
ce:bd:0f:a5:d0:b4:03:84:ab:b0:6d:45:b3:fa:10:
06:89:95:c4:53:14:e1:6c:d9:8e:cc:c5:ce:bc:3a:
6b:45:be:53:ab:d1:f8:a3:b4:07:27:4b:55:4d:36:
93:c4:52:86:7e:25:7d:df:d3:f4:55:46:02:c2:8d:
81:54:7e:07:b1:33:29:93:85:6a:a8:d8:ba:38:01:
c9:0a:7b:f4:f0:0b:d8:0b:28:cf:65:f7:44:4b:19:
fa:5e:34:b8:46:f7:e7:1e:af:09:38:15:c8:a9:26:
ab:0a:de:69:c4:88:fd:b3:9c:d1:8d:33:24:3e:c4:
c1:1e:d3:57:89:fd:35:d9:eb:28:db:8b:2d:92:70:
6e:46:b3:bf:ea:74:f4:c8:ce:d3:9c:80:c3:5d:4e:
bf:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:66:00:8A:78:E3:6F:E4:D1:23:32:D7:ED:DC:E8:E2:08:8C:EB:E8
X509v3 Authority Key Identifier:
keyid:3D:43:ED:FE:64:F6:14:E1:13:06:A8:7F:1E:F2:4F:28:2E:7E:37:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUPt_mT2FOETBqh_HvJPKC5-NxQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92FE/71817F6CA5BE11E8A40C6F1EC4F9AE02/PUPt_mT2FOETBqh_HvJPKC5-NxQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:5f:66:f7:aa:eb:b0:d6:d7:e0:19:2f:ad:87:76:e6:cd:5e:
89:23:9f:94:63:de:97:0b:e0:ce:6c:b4:d0:6a:34:67:19:df:
44:bb:df:ea:b8:48:90:58:5c:43:71:c2:58:b6:d2:58:49:34:
57:cb:ce:37:59:05:88:b3:b5:08:58:3a:01:3d:88:d7:64:35:
de:10:32:e2:41:48:40:4c:31:ce:72:4e:80:b1:6e:ba:9c:da:
6b:56:04:18:4e:4e:8a:6d:69:68:46:e9:9b:9c:e7:bf:0e:5e:
47:ec:bc:eb:ac:96:8b:85:5e:ba:9d:93:c0:5a:40:9c:4a:1a:
eb:e6:21:ab:19:dd:db:35:0b:75:f5:df:9c:99:70:5b:d8:10:
36:cd:a2:d4:9d:29:54:27:c8:10:45:42:cf:67:51:01:05:6d:
61:b6:81:b5:78:74:ea:0e:3d:09:23:24:29:88:ef:e5:51:62:
a2:01:53:02:05:3a:dc:bf:29:23:4f:ae:4c:b4:bc:7f:18:ac:
9e:33:9d:f6:ab:3c:7f:c0:eb:ef:8f:60:8b:9a:ad:4d:c5:de:
99:82:8b:90:8d:c0:df:ca:2c:d1:41:8f:3e:73:4f:66:ad:48:
73:10:fc:d5:9c:1d:79:76:43:47:34:b6:97:72:b0:56:fa:6b:
64:45:b8:69
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICE8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkyRkUxMTAvBgNVBAUTKDNENDNFREZFNjRGNjE0RTExMzA2QTg3RjFFRjI0RjI4
MkU3RTM3MTQwHhcNMjYwMTI0MTY0MTE2WhcNMjYwMTMxMTY0MTE2WjAYMRYwFAYD
VQQDDA02OTc0ZjYyYy1hNGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtTw8Sya1KELeiv0aYsUhHR8QApM3oKmbexR/9a/6TOzbgSdwEgzv+5AzgMdb
hOblmPY3PmP1dQNmsKse21bfiVM0Mv2XOiyUqANNvRL4dNvbv1cbet41b9Hlfo80
8OHiF73JvHjowPPOvQ+l0LQDhKuwbUWz+hAGiZXEUxThbNmOzMXOvDprRb5Tq9H4
o7QHJ0tVTTaTxFKGfiV939P0VUYCwo2BVH4HsTMpk4VqqNi6OAHJCnv08AvYCyjP
ZfdESxn6XjS4RvfnHq8JOBXIqSarCt5pxIj9s5zRjTMkPsTBHtNXif012eso24st
knBuRrO/6nT0yM7TnIDDXU6/ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJmAIp4
42/k0SMy1+3c6OIIjOvoMB8GA1UdIwQYMBaAFD1D7f5k9hThEwaofx7yTygufjcU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTJGRS83MTgxN0Y2Q0E1
QkUxMUU4QTQwQzZGMUVDNEY5QUUwMi9QVVB0X21UMkZPRVRCcWhfSHZKUEtDNS1O
eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BVUHRfbVQyRk9FVEJxaF9IdkpQS0M1LU54US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTJGRS83MTgxN0Y2Q0E1QkUxMUU4QTQwQzZGMUVDNEY5QUUwMi9QVVB0X21UMkZP
RVRCcWhfSHZKUEtDNS1OeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA4X2b3quuw1tfgGS+th3bmzV6JI5+UY96XC+DObLTQajRnGd9Eu9/q
uEiQWFxDccJYttJYSTRXy843WQWIs7UIWDoBPYjXZDXeEDLiQUhATDHOck6AsW66
nNprVgQYTk6KbWloRumbnOe/Dl5H7LzrrJaLhV66nZPAWkCcShrr5iGrGd3bNQt1
9d+cmXBb2BA2zaLUnSlUJ8gQRULPZ1EBBW1htoG1eHTqDj0JIyQpiO/lUWKiAVMC
BTrcvykjT65MtLx/GKyeM532qzx/wOvvj2CLmq1Nxd6ZgouQjcDfyizRQY8+c09m
rUhzEPzVnB15dkNHNLaXcrBW+mtkRbhp
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:55:05 2026 by rpki-client