This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft File: PG7AmwlfpfUTYVEIpUR8rLcasaE.mft (raw, json) Hash identifier: yBa1KQKxC+TtxBwjnGuL6Xfxa3GI80fw2Wzpe3cuN9o= Subject key identifier: 78:37:29:4E:59:3A:95:C6:71:F6:47:C9:2A:27:FC:28:3D:7C:69:04 Authority key identifier: 3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1 Certificate issuer: /CN=A917E4BA/serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1 Certificate serial: 0B32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft Manifest number: 0B2B Signing time: Sat 10 Jan 2026 18:47:51 +0000 Manifest this update: Sat 10 Jan 2026 18:47:51 +0000 Manifest next update: Sat 17 Jan 2026 18:47:51 +0000 Files and hashes: 1: PG7AmwlfpfUTYVEIpUR8rLcasaE.crl (hash: +uWNmCQ0YvQx1z4kYAl6MmmgP0AbEoLAXhKXw9DhKUE=) 2: 66F91334ED4911ED9A90391BC4F9AE02.roa (hash: 20mwh4S1N9cV75zDwMEBAcXWu2kbD0NO7KHg8fUiIBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 18:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2866 (0xb32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E4BA, serialNumber=3C6EC09B095FA5F513615108A5447CACB71AB1A1 Validity Not Before: Jan 10 18:47:51 2026 GMT Not After : Jan 17 18:47:51 2026 GMT Subject: CN=69629ed7-d5e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e8:56:7a:fa:cb:8f:7f:c2:03:d0:13:93:c9: 2e:07:87:48:90:c7:b6:5d:fc:6e:18:c0:91:0e:da: 5e:15:b2:ce:f5:8a:5e:df:6d:d1:88:b6:2a:93:dc: 49:1d:5d:5a:21:fe:36:a0:ea:61:20:fe:e0:48:0e: 83:81:65:1d:ed:9b:5f:fe:41:f3:2a:36:59:a1:cf: a8:07:ac:33:7f:be:3e:8d:80:e4:d8:f9:84:bc:8e: d6:86:cd:18:b1:26:a8:17:e4:2e:48:fe:73:48:6d: 3c:ac:27:3a:e3:4b:27:44:31:2d:44:e4:28:79:38: 0d:e0:29:7b:2e:1e:0b:30:d5:c4:cc:97:48:d4:df: 22:fc:f6:f5:88:2e:74:39:18:7f:a9:38:de:aa:17: 57:3e:28:ac:71:89:be:47:bd:f7:fc:4c:f5:ad:84: f9:9d:3c:4c:d7:1d:cb:35:f2:1a:08:c9:3b:93:11: 69:96:23:66:cf:6d:23:93:5d:4a:81:a4:09:02:c5: 18:3c:6e:69:ce:73:8a:47:05:41:2c:11:04:d2:6f: 02:3f:e9:48:de:b0:c4:e2:9f:89:f1:eb:09:a3:3a: 47:7a:7d:3c:c3:e4:2a:45:53:b5:82:ea:c8:f6:b1: 47:39:58:58:3d:c8:b2:97:9f:65:20:c2:5e:6d:0a: 86:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:37:29:4E:59:3A:95:C6:71:F6:47:C9:2A:27:FC:28:3D:7C:69:04 X509v3 Authority Key Identifier: keyid:3C:6E:C0:9B:09:5F:A5:F5:13:61:51:08:A5:44:7C:AC:B7:1A:B1:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PG7AmwlfpfUTYVEIpUR8rLcasaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/C952AC9E52DC11EA82601B0FC4F9AE02/PG7AmwlfpfUTYVEIpUR8rLcasaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:27:9e:80:05:6d:44:ce:03:66:65:e1:68:bb:31:26:05:7c: a8:c7:db:88:a5:ab:55:4d:66:d2:91:cd:2e:75:80:bd:b9:b3: 31:2c:f6:f8:50:9e:4b:0a:33:0c:de:8a:e6:6f:f8:5d:6e:93: c9:fa:27:4c:06:d0:da:54:a0:fe:c8:cb:aa:df:6d:18:18:87: 26:1d:06:ca:b6:04:7b:91:c3:85:1f:34:d1:8a:87:e5:68:ae: f0:97:47:a4:8b:b9:76:9a:14:ad:1b:bd:da:67:45:4b:a8:da: ee:ed:94:91:8f:48:ef:10:d8:eb:39:f4:0f:09:73:a9:7b:ee: 3c:f9:74:62:59:d2:33:ba:92:92:be:5b:cf:c9:5d:2a:f4:ac: ad:ba:db:64:74:25:d6:2d:ef:89:7c:14:64:d1:9d:ad:4f:7f: 98:d4:3e:70:1d:29:72:fb:f1:1e:4b:91:96:5c:49:1d:52:62: 41:9e:78:a1:d9:89:23:b8:26:9a:23:c3:df:3c:fc:b4:1e:74: 68:b5:fe:f3:55:3a:5e:25:4d:d3:c4:cc:39:5d:f7:f1:04:d0: ad:8e:0a:fd:5d:4e:09:47:8c:5c:a3:7a:f1:a9:de:2e:63:5d: ae:8a:ed:2d:55:72:7e:fe:aa:52:ac:c4:2b:63:29:16:04:27: fb:9c:0d:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0QkExMTAvBgNVBAUTKDNDNkVDMDlCMDk1RkE1RjUxMzYxNTEwOEE1NDQ3Q0FD QjcxQUIxQTEwHhcNMjYwMTEwMTg0NzUxWhcNMjYwMTE3MTg0NzUxWjAYMRYwFAYD VQQDDA02OTYyOWVkNy1kNWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7OhWevrLj3/CA9ATk8kuB4dIkMe2XfxuGMCRDtpeFbLO9Ype323RiLYqk9xJ HV1aIf42oOphIP7gSA6DgWUd7Ztf/kHzKjZZoc+oB6wzf74+jYDk2PmEvI7Whs0Y sSaoF+QuSP5zSG08rCc640snRDEtROQoeTgN4Cl7Lh4LMNXEzJdI1N8i/Pb1iC50 ORh/qTjeqhdXPiiscYm+R733/Ez1rYT5nTxM1x3LNfIaCMk7kxFpliNmz20jk11K gaQJAsUYPG5pznOKRwVBLBEE0m8CP+lI3rDE4p+J8esJozpHen08w+QqRVO1gurI 9rFHOVhYPciyl59lIMJebQqGyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHg3KU5Z OpXGcfZHySon/Cg9fGkEMB8GA1UdIwQYMBaAFDxuwJsJX6X1E2FRCKVEfKy3GrGh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTRCQS9DOTUyQUM5RTUy REMxMUVBODI2MDFCMEZDNEY5QUUwMi9QRzdBbXdsZnBmVVRZVkVJcFVSOHJMY2Fz YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BHN0Ftd2xmcGZVVFlWRUlwVVI4ckxjYXNhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTRCQS9DOTUyQUM5RTUyREMxMUVBODI2MDFCMEZDNEY5QUUwMi9QRzdBbXdsZnBm VVRZVkVJcFVSOHJMY2FzYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnJ56ABW1EzgNmZeFouzEmBXyox9uIpatVTWbSkc0udYC9ubMxLPb4 UJ5LCjMM3ormb/hdbpPJ+idMBtDaVKD+yMuq320YGIcmHQbKtgR7kcOFHzTRiofl aK7wl0eki7l2mhStG73aZ0VLqNru7ZSRj0jvENjrOfQPCXOpe+48+XRiWdIzupKS vlvPyV0q9KytuttkdCXWLe+JfBRk0Z2tT3+Y1D5wHSly+/EeS5GWXEkdUmJBnnih 2YkjuCaaI8PfPPy0HnRotf7zVTpeJU3TxMw5XffxBNCtjgr9XU4JR4xco3rxqd4u Y12uiu0tVXJ+/qpSrMQrYykWBCf7nA3e -----END CERTIFICATE-----Generated at Mon Jan 12 10:58:37 2026 by rpki-client