This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft File: S_PofKK5q1lZdiDQT8BUEY1-09k.mft (raw, json) Hash identifier: BeYZFr1RVajHHKatrzxAvCYvTjeOKiSxpkaPqlAq2Tk= Subject key identifier: 56:91:CD:30:BB:4C:24:F2:0B:6C:D4:B9:B9:C5:56:36:7B:5D:9A:6F Authority key identifier: 4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 Certificate issuer: /CN=A9191B71/serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9 Certificate serial: 03AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft Manifest number: 03A3 Signing time: Sat 10 Jan 2026 23:55:43 +0000 Manifest this update: Sat 10 Jan 2026 23:55:42 +0000 Manifest next update: Sat 17 Jan 2026 23:55:42 +0000 Files and hashes: 1: S_PofKK5q1lZdiDQT8BUEY1-09k.crl (hash: m+OM3uIkfsx11JCJglsRob6nSd5QQE04ccBFTAxf2qc=) 2: 5734DF38D56811EF89A7D332C4F9AE02.roa (hash: yEbc6F9bHI0IpI/Ljg73yL3b8qnvoYUzAxWD62rFx2U=) 3: 5A48B534C6C811ECA5A9AB33C4F9AE02.roa (hash: b/WM2XRqJxBELFgBognptBOHT/qHpjt428YJO43uOQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 23:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 939 (0x3ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191B71, serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9 Validity Not Before: Jan 10 23:55:42 2026 GMT Not After : Jan 17 23:55:42 2026 GMT Subject: CN=6962e6fe-bf42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b7:ee:87:86:2d:e8:7e:9a:54:dc:88:ca:d3: 4d:b3:9b:26:1d:d2:bf:e8:f9:48:f5:e5:95:39:66: 5f:f5:a3:3f:8a:21:eb:36:7a:d2:5d:4b:b2:e7:f6: e9:db:ee:4b:f4:48:02:67:4c:48:9c:7f:4f:af:1a: 70:1e:a2:71:fc:8f:14:9b:f7:c3:7f:22:cd:f3:46: c6:f5:63:45:f1:bb:e3:5b:3c:a3:69:b1:b8:2a:5c: 6b:54:b1:52:2e:6a:1f:07:03:32:87:05:f1:07:69: 9c:ce:65:1a:22:5c:ae:25:46:80:6f:26:98:b1:04: b1:9c:82:c2:48:76:e4:40:7e:12:b7:d7:0d:45:9c: 84:75:08:e2:79:7a:f3:c7:74:86:55:83:10:83:a7: 91:ed:a9:d1:3f:38:ee:83:75:a9:7d:57:28:fc:5d: ae:5c:af:96:14:19:f2:e9:28:ac:e1:31:bd:d1:78: 6f:a8:9a:43:36:16:64:ce:a4:71:ce:7e:10:ef:bd: c5:45:83:2f:e3:9e:f8:dd:f9:89:0a:bd:ef:23:79: 3f:44:9b:ed:e2:69:36:7d:7e:25:96:62:ca:c1:c1: aa:f7:5e:a4:56:5d:a2:4b:41:e4:0e:19:55:86:d0: 0f:81:a8:2d:3f:49:bb:22:af:8d:a1:77:4c:f0:94: 17:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:91:CD:30:BB:4C:24:F2:0B:6C:D4:B9:B9:C5:56:36:7B:5D:9A:6F X509v3 Authority Key Identifier: keyid:4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:b1:00:c7:80:60:5a:80:c3:55:70:18:70:c0:d6:55:2b:8c: 7d:c3:c5:fb:11:1f:ab:d1:72:22:f7:e5:75:d8:b0:b7:d8:2a: d7:41:02:6a:86:30:43:9f:1c:d1:ec:2d:1b:23:b8:5a:5a:62: d5:26:b2:ae:22:18:6a:05:ee:d8:0a:e6:39:0b:52:a8:6b:36: 55:53:07:ec:8c:96:52:b7:69:4d:bf:be:7e:f7:8d:53:9f:b1: 02:74:e2:ca:d8:df:e8:a9:6e:69:96:cc:1a:50:be:60:84:7c: 5d:8b:e1:5c:be:73:08:78:5f:6d:4e:8c:60:47:e2:02:5c:71: 8d:e5:ed:41:e7:9e:17:b0:0a:71:d0:ca:31:59:db:d3:b3:16: a7:4a:43:8d:4e:0b:86:98:c6:17:1c:ac:56:41:e4:67:2b:6f: a0:36:5d:c2:d9:d5:4e:a2:30:52:80:40:03:ae:10:ec:59:f3: 0d:16:b5:95:4d:8f:67:93:6f:14:51:2d:86:ff:c5:c2:fb:db: 85:54:23:f8:f0:f9:5d:29:5e:46:5f:e3:7b:8b:7c:37:32:a6: 01:8d:87:66:a6:81:30:2c:41:ed:b0:e8:e6:3b:b9:c4:f4:7f: bc:7c:9e:fc:47:ed:7d:e2:69:fa:f9:71:7b:6c:79:ad:7d:40: 0d:09:e8:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFCNzExMTAvBgNVBAUTKDRCRjNFODdDQTJCOUFCNTk1OTc2MjBEMDRGQzA1NDEx OEQ3RUQzRDkwHhcNMjYwMTEwMjM1NTQyWhcNMjYwMTE3MjM1NTQyWjAYMRYwFAYD VQQDDA02OTYyZTZmZS1iZjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27fuh4Yt6H6aVNyIytNNs5smHdK/6PlI9eWVOWZf9aM/iiHrNnrSXUuy5/bp 2+5L9EgCZ0xInH9PrxpwHqJx/I8Um/fDfyLN80bG9WNF8bvjWzyjabG4KlxrVLFS LmofBwMyhwXxB2mczmUaIlyuJUaAbyaYsQSxnILCSHbkQH4St9cNRZyEdQjieXrz x3SGVYMQg6eR7anRPzjug3WpfVco/F2uXK+WFBny6Sis4TG90XhvqJpDNhZkzqRx zn4Q773FRYMv45743fmJCr3vI3k/RJvt4mk2fX4llmLKwcGq916kVl2iS0HkDhlV htAPgagtP0m7Iq+NoXdM8JQXywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFaRzTC7 TCTyC2zUubnFVjZ7XZpvMB8GA1UdIwQYMBaAFEvz6HyiuatZWXYg0E/AVBGNftPZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUI3MS9CODQ5QkExMkM2 MDQxMUVDQjkwNjkxNUNDNEY5QUUwMi9TX1BvZktLNXExbFpkaURRVDhCVUVZMS0w OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NfUG9mS0s1cTFsWmRpRFFUOEJVRVkxLTA5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUI3MS9CODQ5QkExMkM2MDQxMUVDQjkwNjkxNUNDNEY5QUUwMi9TX1BvZktLNXEx bFpkaURRVDhCVUVZMS0wOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXsQDHgGBagMNVcBhwwNZVK4x9w8X7ER+r0XIi9+V12LC32CrXQQJq hjBDnxzR7C0bI7haWmLVJrKuIhhqBe7YCuY5C1KoazZVUwfsjJZSt2lNv75+941T n7ECdOLK2N/oqW5plswaUL5ghHxdi+FcvnMIeF9tToxgR+ICXHGN5e1B554XsApx 0MoxWdvTsxanSkONTguGmMYXHKxWQeRnK2+gNl3C2dVOojBSgEADrhDsWfMNFrWV TY9nk28UUS2G/8XC+9uFVCP48PldKV5GX+N7i3w3MqYBjYdmpoEwLEHtsOjmO7nE 9H+8fJ78R+194mn6+XF7bHmtfUANCeh2 -----END CERTIFICATE-----Generated at Mon Jan 12 13:09:14 2026 by rpki-client