This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft File: ppcA540MgSrS4sEUyCxlWgrNRH8.mft (raw, json) Hash identifier: yQJeWpEZpLBBOBZCwleQc+yKfXP21coUwWTNSJSQuno= Subject key identifier: 79:17:05:1C:C5:CC:A0:74:E1:8D:F9:E3:81:E1:07:18:56:B9:36:BC Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Certificate serial: 036A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft Manifest number: 031B Signing time: Sun 25 Jan 2026 00:40:34 +0000 Manifest this update: Sun 25 Jan 2026 00:40:33 +0000 Manifest next update: Sun 01 Feb 2026 00:40:33 +0000 Files and hashes: 1: ppcA540MgSrS4sEUyCxlWgrNRH8.crl (hash: pOi1u0FR2eI376MnALrFerhkDnnU6D+eYe11MvlaL88=) 2: 29F2A6202EF711F08A285219C4F9AE02.roa (hash: BDQ/cIT9onHOd5JfvUTITTE8/WzzYdypmVwFJRuUaNk=) 3: 2395AD02E44911EFB4261C43C4F9AE02.roa (hash: yVwnO56nbUbnCX/cr4Z5ZK8KQTm634H9qAQ3mEA0k1k=) 4: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (hash: QBFNp4MmnEBSv9rQ1ZErIYUdcQY3it7GFZoZDBAM4/Q=) 5: 20978DD270E411F08F40242AC4F9AE02.roa (hash: Xywp8ZPlZw5lHn8S1gza1fHTHQ7Q5agAOBQDfYDUkqA=) 6: A55DE586ED6311EDB69EB62AC4F9AE02.roa (hash: ZKyZxyNBz5zb2OW/liXlXub2chKOr5/WEo8h6rjJk8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:40:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 874 (0x36a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Validity Not Before: Jan 25 00:40:33 2026 GMT Not After : Feb 1 00:40:33 2026 GMT Subject: CN=69756682-9133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7d:ac:eb:12:d4:02:5f:95:42:49:1a:18:a0: 58:e1:d0:64:a9:17:25:c9:9f:12:03:b0:d5:a1:49: 39:cf:ea:60:b5:36:eb:1a:06:e2:f7:e2:0b:79:7c: 9c:30:97:de:cb:80:03:04:67:78:01:5b:18:6f:7b: d3:ff:df:67:a5:71:a5:a3:af:e4:41:0c:8c:1c:f9: 20:82:8d:40:03:a9:47:aa:45:2d:81:c4:a4:53:16: ff:15:e2:c7:14:05:e6:c9:b1:a9:62:05:59:cd:f2: 8d:b8:03:2a:b2:b9:e8:fb:2b:ab:c0:03:e7:e8:b5: ab:c3:00:bd:3b:3c:67:53:7b:4d:8d:28:bf:5a:90: 2f:87:8b:6c:19:4d:16:86:d7:7b:88:fa:10:52:b1: f0:c3:62:8d:1a:3e:d0:f4:a7:8d:b3:11:ea:fa:ec: f2:3a:e2:cc:32:f5:a1:11:9e:25:4f:bc:43:18:15: 9e:bd:e7:d4:5a:ae:6b:c7:5f:1d:df:5b:8e:9f:b5: a7:38:41:d9:03:50:10:44:ab:fc:78:6c:b2:9e:63: 4d:40:4c:ce:b3:ec:88:11:be:23:2b:e9:ae:ec:b4: 78:db:b2:5d:20:3c:dd:1b:78:e4:8d:cf:18:bb:2b: 80:8c:43:4c:19:5f:1e:f6:3b:63:c0:9c:58:93:6a: 6c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:17:05:1C:C5:CC:A0:74:E1:8D:F9:E3:81:E1:07:18:56:B9:36:BC X509v3 Authority Key Identifier: keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f9:65:e9:c9:3a:5e:e5:f3:28:77:a8:9d:b7:0d:51:b3:cf: f9:0c:b6:ac:9e:b7:91:17:82:1e:3f:9f:6c:e4:0f:01:3a:87: c4:ec:f8:bd:7a:e7:75:a2:e1:b8:03:ba:7b:ce:61:1a:b1:2a: 8e:68:10:dd:10:ab:5a:9c:16:a5:48:4b:b5:cd:84:c8:74:a2: f5:fb:32:0c:1c:73:2a:f0:82:e5:cb:e2:50:36:c3:28:6e:50: d0:79:86:7c:ed:ad:ca:96:21:0f:56:2d:20:22:3e:e6:06:00: 54:ce:72:9c:45:23:1a:72:66:30:7d:86:5c:48:75:e3:7c:e7: aa:c5:a5:84:9f:13:dc:01:49:5d:de:c9:af:7a:2d:5d:e7:e2: 4b:da:b3:7e:1b:6f:67:45:d5:3a:fb:14:05:de:60:5e:27:8e: 74:03:bc:20:d1:5f:4a:18:51:28:e8:78:fd:40:5f:46:78:79: 93:3f:7e:4b:bb:2e:fe:c2:a8:2c:38:94:f6:6c:0d:ce:09:cd: 3d:43:cf:c1:5e:ef:99:6b:9e:e7:ed:ed:b9:22:b1:f6:d0:79: 23:11:0f:d0:f9:dd:31:9e:ef:b4:fd:4c:a9:6f:f1:94:f2:a4: 6a:c3:0c:c6:9c:fd:35:a9:ef:7e:8f:ad:15:14:b4:38:b0:e2: 3c:a3:b1:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB MEFDRDQ0N0YwHhcNMjYwMTI1MDA0MDMzWhcNMjYwMjAxMDA0MDMzWjAYMRYwFAYD VQQDDA02OTc1NjY4Mi05MTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz32s6xLUAl+VQkkaGKBY4dBkqRclyZ8SA7DVoUk5z+pgtTbrGgbi9+ILeXyc MJfey4ADBGd4AVsYb3vT/99npXGlo6/kQQyMHPkggo1AA6lHqkUtgcSkUxb/FeLH FAXmybGpYgVZzfKNuAMqsrno+yurwAPn6LWrwwC9OzxnU3tNjSi/WpAvh4tsGU0W htd7iPoQUrHww2KNGj7Q9KeNsxHq+uzyOuLMMvWhEZ4lT7xDGBWevefUWq5rx18d 31uOn7WnOEHZA1AQRKv8eGyynmNNQEzOs+yIEb4jK+mu7LR427JdIDzdG3jkjc8Y uyuAjENMGV8e9jtjwJxYk2psPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkXBRzF zKB04Y3544HhBxhWuTa8MB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjJCOC8zRjQ0Q0JBRTJGNEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdT clM0c0VVeUN4bFdnck5SSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd+WXpyTpe5fMod6idtw1Rs8/5DLasnreRF4IeP59s5A8BOofE7Pi9 eud1ouG4A7p7zmEasSqOaBDdEKtanBalSEu1zYTIdKL1+zIMHHMq8ILly+JQNsMo blDQeYZ87a3KliEPVi0gIj7mBgBUznKcRSMacmYwfYZcSHXjfOeqxaWEnxPcAUld 3smvei1d5+JL2rN+G29nRdU6+xQF3mBeJ450A7wg0V9KGFEo6Hj9QF9GeHmTP35L uy7+wqgsOJT2bA3OCc09Q8/BXu+Za57n7e25IrH20HkjEQ/Q+d0xnu+0/Uypb/GU 8qRqwwzGnP01qe9+j60VFLQ4sOI8o7El -----END CERTIFICATE-----Generated at Sun Jan 25 12:19:09 2026 by rpki-client