This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft File: pC2IwS1kcYPHe_xK74KM8pRLnsY.mft (raw, json) Hash identifier: 97YxRWcBxmm/LyCavi6+NLaZlECAMy/h7obRoEOna2s= Subject key identifier: 4B:9B:D5:DC:90:99:1E:3C:C4:C6:12:A3:0F:BB:F0:BB:66:8C:DB:4C Authority key identifier: A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6 Certificate issuer: /CN=A916C756/serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6 Certificate serial: 0257 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft Manifest number: 0257 Signing time: Thu 01 Jan 2026 01:09:18 +0000 Manifest this update: Thu 01 Jan 2026 01:09:17 +0000 Manifest next update: Thu 08 Jan 2026 01:09:17 +0000 Files and hashes: 1: pC2IwS1kcYPHe_xK74KM8pRLnsY.crl (hash: uu10/tZiM9OX8VVuI5xhpVQ3hTf81IF9Ri4p5ZeoiP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 01:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C756, serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6 Validity Not Before: Jan 1 01:09:17 2026 GMT Not After : Jan 8 01:09:17 2026 GMT Subject: CN=6955c93e-0928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:22:f6:7a:87:74:0f:66:5c:f2:ca:c0:a9:60: 20:61:e6:ca:d1:04:22:33:3d:19:8d:3f:a4:f3:69: a3:8a:c6:3e:cc:94:66:5c:cb:e3:a0:6e:c8:ba:25: a2:f2:85:e4:2c:0e:2d:44:1e:a0:6d:f4:b9:90:d3: 4f:43:86:70:15:e8:a8:7c:6d:9d:0e:ba:6c:6f:28: dd:be:c1:dd:ee:45:8a:2e:55:05:a2:61:f2:49:6f: 84:12:55:dd:ee:af:2b:e1:bb:fb:f5:19:3f:d2:36: b4:47:fd:11:1d:f9:e2:0c:ed:b2:84:a0:7c:f2:07: b3:74:8e:e7:58:06:e2:df:e8:a6:0d:e8:5f:da:78: 2d:33:b0:f7:d7:bc:8c:e3:c0:97:74:8d:f1:80:d1: f9:47:45:c0:f1:9b:d9:07:ce:34:f0:d3:3f:fa:e6: ea:5c:19:37:ba:0c:46:e7:a4:64:ec:3e:f4:cf:63: 09:b9:b4:07:18:8e:ad:21:f1:61:77:6b:ea:34:6a: 5f:d6:70:c7:7c:33:dc:7a:41:f1:ab:ab:8e:fb:e8: 95:28:35:22:80:8a:ac:b4:aa:cd:aa:53:fd:43:09: e0:9f:45:3e:0f:dc:3c:ec:4a:f3:ea:f3:fc:9c:5d: 2e:c3:8f:b7:85:d9:bd:2c:96:d3:32:90:a2:ee:7e: 71:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9B:D5:DC:90:99:1E:3C:C4:C6:12:A3:0F:BB:F0:BB:66:8C:DB:4C X509v3 Authority Key Identifier: keyid:A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:07:0d:ac:71:f0:19:9e:cc:32:1c:17:7c:60:cf:76:ba:9d: 39:52:df:a6:6d:ee:72:5f:17:98:e6:12:c6:1a:29:e6:87:cb: 7c:96:3e:70:3d:6c:0a:3f:71:5d:cc:3a:6a:74:33:6e:05:40: 96:9b:d9:30:9c:bb:a9:ab:dc:2b:8c:e0:c0:77:c7:d7:0d:4a: 6f:04:a7:7b:da:95:44:31:dd:f6:d2:c0:11:79:bb:38:3e:92: 10:75:40:3f:f5:e8:e4:d3:9b:d5:dd:02:57:43:e9:fc:be:b8: 4d:e4:ab:f7:12:35:b1:f1:c6:5a:ae:09:fa:99:31:fd:34:e7: 2f:5f:31:ba:b8:15:df:a4:db:52:c1:88:51:32:3e:2f:b9:b4: f6:a4:2a:0b:69:29:3c:1f:88:f3:ac:4c:b3:91:47:10:37:0f: 4d:3c:6e:e1:7e:79:39:d6:4b:2c:60:c9:66:db:25:07:39:17: 39:6f:cc:13:94:43:3a:f8:f5:61:5e:7b:0f:41:58:1e:6b:d2: 4a:0a:ff:64:66:a0:5b:e6:ab:fd:43:8b:98:df:e7:db:c2:b6: cc:6f:f0:1d:d3:7c:10:18:ec:e8:57:c4:8f:c4:2f:f1:84:08: 0a:c6:38:ca:8e:b6:cb:54:53:51:45:36:5f:f5:22:b3:e1:11: 47:32:42:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM3NTYxMTAvBgNVBAUTKEE0MkQ4OEMxMkQ2NDcxODNDNzdCRkM0QUVGODI4Q0Yy OTQ0QjlFQzYwHhcNMjYwMTAxMDEwOTE3WhcNMjYwMTA4MDEwOTE3WjAYMRYwFAYD VQQDDA02OTU1YzkzZS0wOTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCL2eod0D2Zc8srAqWAgYebK0QQiMz0ZjT+k82mjisY+zJRmXMvjoG7IuiWi 8oXkLA4tRB6gbfS5kNNPQ4ZwFeiofG2dDrpsbyjdvsHd7kWKLlUFomHySW+EElXd 7q8r4bv79Rk/0ja0R/0RHfniDO2yhKB88gezdI7nWAbi3+imDehf2ngtM7D317yM 48CXdI3xgNH5R0XA8ZvZB8408NM/+ubqXBk3ugxG56Rk7D70z2MJubQHGI6tIfFh d2vqNGpf1nDHfDPcekHxq6uO++iVKDUigIqstKrNqlP9Qwngn0U+D9w87Erz6vP8 nF0uw4+3hdm9LJbTMpCi7n5x+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEub1dyQ mR48xMYSow+78LtmjNtMMB8GA1UdIwQYMBaAFKQtiMEtZHGDx3v8Su+CjPKUS57G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qzc1Ni8zMzc0NTQ2RTRC NjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZUEhlX3hLNzRLTThwUkxu c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BDMkl3UzFrY1lQSGVfeEs3NEtNOHBSTG5zWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qzc1Ni8zMzc0NTQ2RTRCNjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZ UEhlX3hLNzRLTThwUkxuc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5Bw2scfAZnswyHBd8YM92up05Ut+mbe5yXxeY5hLGGinmh8t8lj5w PWwKP3FdzDpqdDNuBUCWm9kwnLupq9wrjODAd8fXDUpvBKd72pVEMd320sARebs4 PpIQdUA/9ejk05vV3QJXQ+n8vrhN5Kv3EjWx8cZargn6mTH9NOcvXzG6uBXfpNtS wYhRMj4vubT2pCoLaSk8H4jzrEyzkUcQNw9NPG7hfnk51kssYMlm2yUHORc5b8wT lEM6+PVhXnsPQVgea9JKCv9kZqBb5qv9Q4uY3+fbwrbMb/Ad03wQGOzoV8SPxC/x hAgKxjjKjrbLVFNRRTZf9SKz4RFHMkLB -----END CERTIFICATE-----Generated at Thu Jan 1 14:25:08 2026 by rpki-client