This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft File: pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft (raw, json) Hash identifier: 8evyTBy6feuj+ZfekB80XwpeQ0S9KqWgAPjxE5UFIF8= Subject key identifier: DC:52:CA:F5:70:13:51:48:D2:F3:C6:8C:D0:9A:79:EC:89:22:05:72 Authority key identifier: A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3 Certificate issuer: /CN=A91DA736/serialNumber=A5AFA90890BF929181C031F0B8EDB194E3E169E3 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft Manifest number: 58 Signing time: Sun 25 Jan 2026 06:15:34 +0000 Manifest this update: Sun 25 Jan 2026 06:15:34 +0000 Manifest next update: Sun 01 Feb 2026 06:15:34 +0000 Files and hashes: 1: pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl (hash: HcRfesHA/iWMl2JbZO0UlCrGQIlpKesGJOy6e3e4wOE=) 2: 065E09BC732F11F09E8D4450C4F9AE02.roa (hash: fRjTeZ6sOZhL7w9XnHnzng0sCHnh1L73Q9iqK1QuMso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA736, serialNumber=A5AFA90890BF929181C031F0B8EDB194E3E169E3 Validity Not Before: Jan 25 06:15:34 2026 GMT Not After : Feb 1 06:15:34 2026 GMT Subject: CN=6975b506-e132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b9:00:39:d8:2b:f3:c2:83:df:d6:99:c1:01: d6:69:5a:4f:76:f6:8d:88:b6:05:ce:7b:41:7f:25: cc:c0:6e:ff:e8:9f:90:2b:37:12:86:cd:d2:9b:5b: 50:24:68:dd:6f:13:a7:b3:2f:87:a9:7f:bd:a5:55: bb:4a:6d:75:23:69:5f:ad:6d:fc:a3:e0:12:ea:88: 4c:26:d3:36:41:26:c7:69:0c:0e:24:e3:a3:37:46: ca:83:c5:95:05:e3:1e:02:62:95:04:fe:4b:b3:08: a7:b3:0a:8a:62:f6:ed:c2:76:df:3f:ed:8e:49:1c: 57:c8:4b:37:d0:14:2d:07:9f:c4:37:91:a0:d8:cc: 3d:9e:3f:82:a4:48:c4:65:0d:04:b3:29:f3:04:ee: e3:25:bc:b4:53:28:68:e2:52:a4:d5:51:6f:45:c2: a8:03:4c:07:2e:11:15:82:0f:9c:40:44:a7:ef:c5: 85:46:a9:b4:b7:9d:17:99:04:20:75:e4:34:c4:48: 44:b6:9d:c7:12:85:cd:2f:2a:71:fc:4f:93:70:57: 1c:50:2b:b4:16:79:cb:f0:a1:a7:af:27:42:76:9a: 82:bd:35:0b:2b:13:f4:b3:62:e6:0f:94:f5:0f:76: d4:2a:d6:05:f8:a2:a3:28:d4:19:af:64:89:36:c9: 1a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:52:CA:F5:70:13:51:48:D2:F3:C6:8C:D0:9A:79:EC:89:22:05:72 X509v3 Authority Key Identifier: keyid:A5:AF:A9:08:90:BF:92:91:81:C0:31:F0:B8:ED:B1:94:E3:E1:69:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pa-pCJC_kpGBwDHwuO2xlOPhaeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA736/5A6D8B5C732711F0B152646FC4F9AE02/pa-pCJC_kpGBwDHwuO2xlOPhaeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:e0:d4:0b:c0:af:c3:72:5b:26:d9:8e:36:39:0c:13:20:9b: ff:87:c0:b2:8e:e4:21:e8:4e:89:c1:ad:c6:13:56:16:fd:8f: 3b:3d:43:73:0c:d4:2f:e5:a9:c5:92:5e:7e:03:e6:23:56:30: d9:54:b2:f4:c7:b7:6a:25:e4:5c:30:d7:21:bf:f2:7a:a6:10: 37:98:73:e7:ba:3c:38:bb:3b:92:51:dd:87:21:22:ca:19:22: c0:97:13:50:0d:1f:dd:8a:21:b0:50:57:60:38:29:8e:47:26: c8:4e:66:fb:7c:0f:49:79:fd:1a:f5:5b:2a:28:ff:5b:99:e4: 66:e2:1e:da:67:3b:8e:59:50:a5:3d:16:e2:66:b9:a1:25:2a: aa:79:d4:5f:a9:c0:f4:ce:c2:7c:55:c1:8c:24:0f:96:e5:f3: 65:cc:c5:3b:90:78:2c:6e:09:ec:48:ac:30:22:fe:65:eb:bc: c8:7f:3f:5c:d9:d2:11:2d:44:b4:01:6a:db:e8:ee:3e:4e:22: 30:65:af:49:3a:4a:df:1d:9c:d9:d9:eb:e5:d9:11:3e:b9:9c: c2:bf:03:2b:ce:da:96:b6:e9:0f:ad:49:1d:c3:37:85:c1:21: 35:6a:ad:14:31:dd:a2:12:09:f9:78:fb:fb:c8:a9:62:82:db: 96:74:ca:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QTczNjExMC8GA1UEBRMoQTVBRkE5MDg5MEJGOTI5MTgxQzAzMUYwQjhFREIxOTRF M0UxNjlFMzAeFw0yNjAxMjUwNjE1MzRaFw0yNjAyMDEwNjE1MzRaMBgxFjAUBgNV BAMMDTY5NzViNTA2LWUxMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7uQA52CvzwoPf1pnBAdZpWk929o2ItgXOe0F/JczAbv/on5ArNxKGzdKbW1Ak aN1vE6ezL4epf72lVbtKbXUjaV+tbfyj4BLqiEwm0zZBJsdpDA4k46M3RsqDxZUF 4x4CYpUE/kuzCKezCopi9u3Cdt8/7Y5JHFfISzfQFC0Hn8Q3kaDYzD2eP4KkSMRl DQSzKfME7uMlvLRTKGjiUqTVUW9FwqgDTAcuERWCD5xARKfvxYVGqbS3nReZBCB1 5DTESES2nccShc0vKnH8T5NwVxxQK7QWecvwoaevJ0J2moK9NQsrE/SzYuYPlPUP dtQq1gX4oqMo1BmvZIk2yRqHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3FLK9XAT UUjS88aM0Jp57IkiBXIwHwYDVR0jBBgwFoAUpa+pCJC/kpGBwDHwuO2xlOPhaeMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBNzM2LzVBNkQ4QjVDNzMy NzExRjBCMTUyNjQ2RkM0RjlBRTAyL3BhLXBDSkNfa3BHQndESHd1TzJ4bE9QaGFl TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGEtcENKQ19rcEdCd0RId3VPMnhsT1BoYWVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB NzM2LzVBNkQ4QjVDNzMyNzExRjBCMTUyNjQ2RkM0RjlBRTAyL3BhLXBDSkNfa3BH QndESHd1TzJ4bE9QaGFlTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMvg1AvAr8NyWybZjjY5DBMgm/+HwLKO5CHoTonBrcYTVhb9jzs9Q3MM 1C/lqcWSXn4D5iNWMNlUsvTHt2ol5Fww1yG/8nqmEDeYc+e6PDi7O5JR3YchIsoZ IsCXE1ANH92KIbBQV2A4KY5HJshOZvt8D0l5/Rr1Wyoo/1uZ5GbiHtpnO45ZUKU9 FuJmuaElKqp51F+pwPTOwnxVwYwkD5bl82XMxTuQeCxuCexIrDAi/mXrvMh/P1zZ 0hEtRLQBatvo7j5OIjBlr0k6St8dnNnZ6+XZET65nMK/AyvO2pa26Q+tSR3DN4XB ITVqrRQx3aISCfl4+/vIqWKC25Z0ygA= -----END CERTIFICATE-----Generated at Sun Jan 25 15:25:30 2026 by rpki-client