This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft File: PnOyvhMDe-dEOR06iZzdICuC920.mft (raw, json) Hash identifier: nNxgkWmEsrcvK5i9kmzG+ia+dz/mUg6mAEAkvdw1F5k= Subject key identifier: 00:CC:67:60:4F:F2:E4:7F:62:CD:0E:7B:8C:25:65:03:9D:1A:95:4F Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D Certificate issuer: /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Certificate serial: 0542 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft Manifest number: 052A Signing time: Sat 10 Jan 2026 22:50:26 +0000 Manifest this update: Sat 10 Jan 2026 22:50:25 +0000 Manifest next update: Sat 17 Jan 2026 22:50:25 +0000 Files and hashes: 1: PnOyvhMDe-dEOR06iZzdICuC920.crl (hash: maxI6OiG1ZPzDlN+W4aFVmiKOykeIxKGtK6lth+xo5Q=) 2: EFFA034837D111EC9337B812C4F9AE02.roa (hash: eOzDGtd2FPhdJliCdckHnz758nq276hv9KBB5yuJrEs=) 3: 9C581C28B07511EF9D153813C4F9AE02.roa (hash: USbezzx4u+HcyowHtZXvIGxC9833a2cIPADsDabhgHE=) 4: FE76F7D8EC4A11EFA7845862C4F9AE02.roa (hash: ffe9csoIa+aK1Zbhj8RuxgnC6GGLQDbgoCQkHm0MFNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 22:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1346 (0x542) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D0C, serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D Validity Not Before: Jan 10 22:50:25 2026 GMT Not After : Jan 17 22:50:25 2026 GMT Subject: CN=6962d7b1-2e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:4c:04:54:50:86:fa:5f:39:7c:79:73:b7:68: 93:97:69:76:b9:6e:0b:44:5e:e0:69:14:4d:f3:4d: dd:de:04:71:27:f7:2e:e3:9b:9f:bb:42:0c:cb:44: 1b:d2:20:41:26:36:69:22:61:b5:48:61:38:5a:24: 9c:fd:8e:36:4c:38:c6:91:a6:2f:73:fd:0c:a0:fe: 9d:30:2c:bc:93:c8:40:df:70:7f:54:f7:16:ed:9c: 31:ac:e3:ba:09:34:b0:e3:5b:6d:39:23:58:1f:60: 60:57:98:a4:cf:c6:bd:a3:2f:7a:c9:97:d6:de:0f: b6:4f:cb:a4:28:ab:e2:ea:c3:d3:56:b0:d2:dc:a0: bb:be:c8:ec:c0:9b:42:03:da:29:2a:ec:6d:af:5e: 2e:6f:33:30:42:c1:c8:fd:e2:9f:68:8f:40:aa:52: b0:ad:9d:99:7b:c1:1d:1b:07:3f:b8:1d:9b:71:95: f4:34:72:d2:55:84:e8:16:6e:71:7b:8e:94:cc:1c: 0a:de:5e:40:7c:67:dd:b5:94:e1:f9:86:6b:7b:5a: 62:f1:d6:79:97:20:3b:52:77:22:ff:1d:9f:37:5d: 26:e3:25:78:62:76:fe:15:b1:ce:9f:f8:87:ab:91: 54:01:20:37:2c:1f:4c:4a:07:e3:c5:2d:db:3b:fd: 4d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CC:67:60:4F:F2:E4:7F:62:CD:0E:7B:8C:25:65:03:9D:1A:95:4F X509v3 Authority Key Identifier: keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:51:f6:45:68:67:8f:5d:d6:35:05:74:47:82:53:f1:02:69: 7f:5c:56:28:fe:f5:60:2d:b7:cc:75:7e:df:da:d0:c3:d7:89: 33:1a:72:09:48:96:cc:8b:68:5b:df:72:af:b8:85:24:1b:f4: 75:51:ff:73:8c:44:d8:4a:7b:a2:91:da:eb:51:af:c3:03:44: 18:c5:b8:0a:29:70:7c:b3:b4:b6:31:dd:0d:26:a2:fd:81:32: b1:fd:40:45:16:07:24:77:22:8b:b0:0c:cf:25:99:2a:92:2c: d3:d4:16:fc:9c:30:2b:81:c0:c9:28:14:17:4b:6f:e0:82:9c: 55:93:1d:85:5a:e0:1a:ef:2d:76:d4:b2:bf:9c:72:9c:91:48: 21:ee:67:60:d7:a5:73:72:95:94:40:01:95:0c:81:4d:82:0a: ca:ae:dc:0f:ea:46:ae:d8:f5:e4:c2:a3:01:a5:57:59:b0:29: 5d:e6:a0:b9:21:6d:13:f3:c3:8a:40:65:08:72:dd:f3:57:9d: 01:29:1a:27:a4:61:3a:b9:eb:c9:fa:0f:38:36:ad:44:db:35: ad:69:57:c1:4d:33:3f:66:2f:e0:f4:a4:31:74:13:aa:2f:9e: dc:fd:25:16:df:97:fb:51:84:d2:ad:7c:ed:6d:8f:58:38:fa: 18:dd:2d:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVEMEMxMTAvBgNVBAUTKDNFNzNCMkJFMTMwMzdCRTc0NDM5MUQzQTg5OUNERDIw MkI4MkY3NkQwHhcNMjYwMTEwMjI1MDI1WhcNMjYwMTE3MjI1MDI1WjAYMRYwFAYD VQQDDA02OTYyZDdiMS0yZTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8EwEVFCG+l85fHlzt2iTl2l2uW4LRF7gaRRN803d3gRxJ/cu45ufu0IMy0Qb 0iBBJjZpImG1SGE4WiSc/Y42TDjGkaYvc/0MoP6dMCy8k8hA33B/VPcW7ZwxrOO6 CTSw41ttOSNYH2BgV5ikz8a9oy96yZfW3g+2T8ukKKvi6sPTVrDS3KC7vsjswJtC A9opKuxtr14ubzMwQsHI/eKfaI9AqlKwrZ2Ze8EdGwc/uB2bcZX0NHLSVYToFm5x e46UzBwK3l5AfGfdtZTh+YZre1pi8dZ5lyA7Unci/x2fN10m4yV4Ynb+FbHOn/iH q5FUASA3LB9MSgfjxS3bO/1N5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADMZ2BP 8uR/Ys0Oe4wlZQOdGpVPMB8GA1UdIwQYMBaAFD5zsr4TA3vnRDkdOomc3SArgvdt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQwQy84OTFCNEVDQTMy MzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUtZEVPUjA2aVp6ZElDdUM5 MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BuT3l2aE1EZS1kRU9SMDZpWnpkSUN1QzkyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQwQy84OTFCNEVDQTMyMzYxMUVDODk4Mzg3NTZDNEY5QUUwMi9Qbk95dmhNRGUt ZEVPUjA2aVp6ZElDdUM5MjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVUfZFaGePXdY1BXRHglPxAml/XFYo/vVgLbfMdX7f2tDD14kzGnIJ SJbMi2hb33KvuIUkG/R1Uf9zjETYSnuikdrrUa/DA0QYxbgKKXB8s7S2Md0NJqL9 gTKx/UBFFgckdyKLsAzPJZkqkizT1Bb8nDArgcDJKBQXS2/ggpxVkx2FWuAa7y12 1LK/nHKckUgh7mdg16VzcpWUQAGVDIFNggrKrtwP6kau2PXkwqMBpVdZsCld5qC5 IW0T88OKQGUIct3zV50BKRonpGE6uevJ+g84Nq1E2zWtaVfBTTM/Zi/g9KQxdBOq L57c/SUW35f7UYTSrXztbY9YOPoY3S1g -----END CERTIFICATE-----Generated at Mon Jan 12 05:57:39 2026 by rpki-client