This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft File: pfBl_MntoR3KTQ38bXyZB1KY1_8.mft (raw, json) Hash identifier: ptz99WMBPe7UE+5PCdkCa3Q5MtunF9/NWZLFTyCcNYQ= Subject key identifier: E1:19:09:4B:67:6D:AE:1E:92:47:B9:07:E7:A9:10:65:9D:71:66:EC Authority key identifier: A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF Certificate issuer: /CN=A9174685/serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Certificate serial: 0990 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft Manifest number: 097A Signing time: Thu 08 Jan 2026 19:33:35 +0000 Manifest this update: Thu 08 Jan 2026 19:33:34 +0000 Manifest next update: Thu 15 Jan 2026 19:33:34 +0000 Files and hashes: 1: pfBl_MntoR3KTQ38bXyZB1KY1_8.crl (hash: Qdyten8qC/XgGJhd9SuQsHCqLCRJmLmvZ4+fctc6g9A=) 2: 31B2B528217811EEBACF3324C4F9AE02.roa (hash: qYcH8o+mgIEkOx3pGeKtDuFDXODm4W8utEiDwxXgwKU=) 3: 8BBD25F4EAE311EF95C23D4DC4F9AE02.roa (hash: JxYPfmW8Tav5SjQHIMJfNEwgSNWW1t6Utgf2ZPhePRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Jan 2026 19:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2448 (0x990) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174685, serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Validity Not Before: Jan 8 19:33:34 2026 GMT Not After : Jan 15 19:33:34 2026 GMT Subject: CN=6960068f-5871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d5:88:58:69:51:c9:c6:e3:79:78:b8:2b:5b: d4:1f:6e:bb:b5:f3:81:f0:66:ab:a2:ba:1d:25:ba: ae:0d:05:5f:c5:c7:cb:6e:12:d7:74:c9:d4:a5:66: 6c:94:aa:de:3d:af:d5:ef:44:32:5d:33:c6:32:01: c3:a9:21:3c:20:5e:52:6c:7e:6f:7e:a4:07:ab:56: d3:eb:d3:2e:c3:6f:b3:97:32:0f:df:10:19:ce:c4: 24:e0:6e:1c:c9:7b:28:27:5c:c8:13:68:01:6a:12: 19:b1:bc:2d:23:b0:2a:7a:bb:0c:d2:26:94:1b:87: 61:bf:91:ec:59:86:91:81:45:41:d0:12:82:a8:6b: a1:e3:f5:16:34:16:e8:49:d4:4e:e5:6e:26:86:b0: 3e:3e:1d:de:60:f6:9f:4b:8e:da:a0:25:54:47:32: b5:5b:00:15:8f:df:e2:e9:ac:57:ad:3b:6d:32:cd: 6e:5e:0d:3e:c3:e9:60:50:df:3d:7b:76:59:c9:aa: 8d:b2:24:1b:14:b7:0b:97:50:3a:60:16:14:b6:e2: b1:10:55:9a:21:5e:15:01:52:22:ce:46:5e:18:2b: 8a:44:39:f0:7d:47:46:38:fe:ae:9c:7a:c0:e2:2f: 8f:3c:dc:b5:9f:86:30:f2:8d:66:0b:24:55:e9:41: cb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:19:09:4B:67:6D:AE:1E:92:47:B9:07:E7:A9:10:65:9D:71:66:EC X509v3 Authority Key Identifier: keyid:A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:79:d4:4a:89:50:76:35:2b:ea:24:5e:ae:b4:7a:42:54:f4: f2:70:46:8c:53:07:8c:e8:9d:df:16:e4:bb:e5:7d:19:b1:6e: 98:c0:4f:b6:ad:ff:5e:62:a2:2b:e9:c2:98:cd:52:50:1f:25: e4:db:32:85:14:32:71:57:11:8f:57:46:af:94:08:0f:bd:55: 79:37:1e:80:ae:04:cb:5e:15:fc:c9:dc:7b:f8:d0:c8:df:3a: 0c:f5:75:6e:3d:a8:74:51:68:79:0f:7a:47:ae:61:6b:a1:18: 1d:4f:c2:33:89:de:9c:ca:5e:75:f9:9d:9e:a9:4c:4a:c8:23: 95:ca:95:16:10:af:d9:99:1c:cc:97:1b:c6:2b:c7:5e:8d:ab: cc:10:11:67:07:af:79:9b:ee:7e:61:1c:f6:47:81:74:5a:af: 18:20:ae:a0:cb:da:11:ff:ce:65:4b:5e:1a:b7:e8:39:44:c1: c4:18:76:00:df:ee:59:58:43:34:4c:f0:f4:eb:ea:07:92:b1: a0:14:d3:a2:bb:3f:1e:a1:09:ce:b2:d5:02:8b:42:3c:9c:55: 9b:bf:17:02:de:29:0b:f7:59:73:f7:a5:08:81:ca:67:de:d4: 0a:01:2e:29:e7:90:82:20:00:21:8d:fe:33:fa:a8:7a:0b:84: 3f:0f:65:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ2ODUxMTAvBgNVBAUTKEE1RjA2NUZDQzlFREExMURDQTREMERGQzZEN0M5OTA3 NTI5OEQ3RkYwHhcNMjYwMTA4MTkzMzM0WhcNMjYwMTE1MTkzMzM0WjAYMRYwFAYD VQQDDA02OTYwMDY4Zi01ODcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9WIWGlRycbjeXi4K1vUH267tfOB8GarorodJbquDQVfxcfLbhLXdMnUpWZs lKrePa/V70QyXTPGMgHDqSE8IF5SbH5vfqQHq1bT69Muw2+zlzIP3xAZzsQk4G4c yXsoJ1zIE2gBahIZsbwtI7AqersM0iaUG4dhv5HsWYaRgUVB0BKCqGuh4/UWNBbo SdRO5W4mhrA+Ph3eYPafS47aoCVURzK1WwAVj9/i6axXrTttMs1uXg0+w+lgUN89 e3ZZyaqNsiQbFLcLl1A6YBYUtuKxEFWaIV4VAVIizkZeGCuKRDnwfUdGOP6unHrA 4i+PPNy1n4Yw8o1mCyRV6UHL3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOEZCUtn ba4ekke5B+epEGWdcWbsMB8GA1UdIwQYMBaAFKXwZfzJ7aEdyk0N/G18mQdSmNf/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDY4NS8yRDE1OTE4MkE5 NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9SM0tUUTM4Ylh5WkIxS1kx XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BmQmxfTW50b1IzS1RRMzhiWHlaQjFLWTFfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDY4NS8yRDE1OTE4MkE5NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9S M0tUUTM4Ylh5WkIxS1kxXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxedRKiVB2NSvqJF6utHpCVPTycEaMUweM6J3fFuS75X0ZsW6YwE+2 rf9eYqIr6cKYzVJQHyXk2zKFFDJxVxGPV0avlAgPvVV5Nx6ArgTLXhX8ydx7+NDI 3zoM9XVuPah0UWh5D3pHrmFroRgdT8Izid6cyl51+Z2eqUxKyCOVypUWEK/ZmRzM lxvGK8dejavMEBFnB695m+5+YRz2R4F0Wq8YIK6gy9oR/85lS14at+g5RMHEGHYA 3+5ZWEM0TPD06+oHkrGgFNOiuz8eoQnOstUCi0I8nFWbvxcC3ikL91lz96UIgcpn 3tQKAS4p55CCIAAhjf4z+qh6C4Q/D2Us -----END CERTIFICATE-----Generated at Fri Jan 9 08:03:38 2026 by rpki-client