This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft File: ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft (raw, json) Hash identifier: MSqgjbk0FHKiorgFn328jsYU6xzz+50YSWRXIgPMPw4= Subject key identifier: B4:90:B2:68:0E:DB:86:C6:57:DF:E6:14:AF:55:80:AB:B0:DC:8D:1A Authority key identifier: 66:73:0B:B9:A4:0B:35:CF:E5:9B:11:85:F6:22:DB:D0:90:0C:6D:90 Certificate issuer: /CN=A91100B2/serialNumber=66730BB9A40B35CFE59B1185F622DBD0900C6D90 Certificate serial: 0A83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft Manifest number: 1230 Signing time: Sat 24 Jan 2026 19:03:24 +0000 Manifest this update: Sat 24 Jan 2026 19:03:24 +0000 Manifest next update: Sat 31 Jan 2026 19:03:24 +0000 Files and hashes: 1: ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl (hash: otWFK/QF+Vd0o4PJK+PRa/ce4Rba5IpVH3mDHIZRfKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:03:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2691 (0xa83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91100B2, serialNumber=66730BB9A40B35CFE59B1185F622DBD0900C6D90 Validity Not Before: Jan 24 19:03:24 2026 GMT Not After : Jan 31 19:03:24 2026 GMT Subject: CN=6975177c-02ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:31:35:c0:4b:84:6d:3a:1d:98:6f:4e:b0:8d: e1:1e:7b:54:a6:5f:b2:4f:b0:62:0a:47:07:1b:5b: ca:04:52:72:fa:58:35:2f:4d:15:b9:38:c8:5d:b4: b5:29:21:bd:c3:f6:a4:4f:60:e0:61:be:23:c5:19: da:f3:11:3a:27:9b:bd:2b:e4:24:c0:e0:6b:53:ef: 98:c7:a4:62:39:a0:29:23:bc:76:4a:40:7e:8e:44: 10:b7:14:f2:2e:c2:df:43:59:00:31:81:d2:d9:80: 15:37:e4:05:fa:49:e2:5d:50:18:54:68:4e:0b:94: da:b7:3f:d4:24:9b:7c:eb:a8:55:92:3a:9b:23:01: 80:43:d4:4a:58:0f:63:e4:c8:20:df:c0:28:d9:1c: 58:2d:08:4c:6d:de:20:84:ed:08:b2:ca:97:1f:88: 2c:af:0f:fa:bc:ea:26:e8:c0:d3:a8:1a:62:9c:7a: ce:6c:92:bb:3d:cd:2d:1d:93:be:0f:04:52:bf:ea: 36:3b:47:0d:64:ff:78:1f:b5:80:c5:a3:f9:63:8e: 81:57:d2:16:b7:48:80:aa:c9:72:46:ba:b9:d5:8d: 03:34:85:e7:fc:d2:7f:c4:65:5c:e1:c1:5b:f3:3b: 8d:78:40:fc:56:86:43:3c:16:a9:d5:3d:7d:0a:ae: a4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:90:B2:68:0E:DB:86:C6:57:DF:E6:14:AF:55:80:AB:B0:DC:8D:1A X509v3 Authority Key Identifier: keyid:66:73:0B:B9:A4:0B:35:CF:E5:9B:11:85:F6:22:DB:D0:90:0C:6D:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:a3:e3:51:6d:ad:19:01:93:b1:c2:b1:e4:61:1d:fe:d3:41: 14:f9:6d:4e:5c:c5:eb:e8:ed:d8:7e:8e:cd:37:42:aa:5e:2b: 23:f8:9f:2c:e3:64:0c:89:c2:b7:16:dd:2f:55:1f:29:61:9d: 25:0e:92:db:5e:99:de:e8:d5:62:37:2b:72:d2:8e:56:8c:24: a4:09:50:d2:fb:f4:20:a8:c1:1d:78:6d:b0:6d:3c:43:a7:f8: 7e:a8:12:85:ff:68:8f:a1:48:51:a0:e2:28:f6:16:d5:29:e8: c0:3c:4b:1c:79:55:83:03:8e:84:b9:91:34:8d:6f:bc:2a:d8: 83:12:fb:16:a8:2c:f9:39:79:7b:61:01:f7:0c:32:58:77:e3: 33:4b:81:17:59:94:b1:cf:67:49:55:3a:58:45:78:fc:7e:20: b8:14:44:13:f0:5c:ef:59:a8:fc:36:14:57:ac:b1:a1:43:8d: 35:a6:8e:af:7a:58:d5:a8:2f:28:34:6e:9c:33:72:8a:3e:f3: 1e:25:52:54:bb:82:9c:b4:8d:a5:3e:7f:47:6d:3c:7c:4d:a8: 20:12:8c:95:ed:bc:92:8f:d7:70:28:a8:30:53:1e:dc:96:7d: 78:16:73:f7:c8:c2:56:0f:40:81:ed:18:92:db:e9:c6:d4:c7: af:a3:49:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAwQjIxMTAvBgNVBAUTKDY2NzMwQkI5QTQwQjM1Q0ZFNTlCMTE4NUY2MjJEQkQw OTAwQzZEOTAwHhcNMjYwMTI0MTkwMzI0WhcNMjYwMTMxMTkwMzI0WjAYMRYwFAYD VQQDDA02OTc1MTc3Yy0wMmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTE1wEuEbTodmG9OsI3hHntUpl+yT7BiCkcHG1vKBFJy+lg1L00VuTjIXbS1 KSG9w/akT2DgYb4jxRna8xE6J5u9K+QkwOBrU++Yx6RiOaApI7x2SkB+jkQQtxTy LsLfQ1kAMYHS2YAVN+QF+kniXVAYVGhOC5Tatz/UJJt866hVkjqbIwGAQ9RKWA9j 5Mgg38Ao2RxYLQhMbd4ghO0IssqXH4gsrw/6vOom6MDTqBpinHrObJK7Pc0tHZO+ DwRSv+o2O0cNZP94H7WAxaP5Y46BV9IWt0iAqslyRrq51Y0DNIXn/NJ/xGVc4cFb 8zuNeED8VoZDPBap1T19Cq6kvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSQsmgO 24bGV9/mFK9VgKuw3I0aMB8GA1UdIwQYMBaAFGZzC7mkCzXP5ZsRhfYi29CQDG2Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDBCMi8wQUY2RUIyQTcz RTgxMUVBODg1MUY4N0NDNEY5QUUwMi9abk1MdWFRTE5jX2xteEdGOWlMYjBKQU1i WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1puTUx1YVFMTmNfbG14R0Y5aUxiMEpBTWJaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDBCMi8wQUY2RUIyQTczRTgxMUVBODg1MUY4N0NDNEY5QUUwMi9abk1MdWFRTE5j X2xteEdGOWlMYjBKQU1iWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAo+NRba0ZAZOxwrHkYR3+00EU+W1OXMXr6O3Yfo7NN0KqXisj+J8s 42QMicK3Ft0vVR8pYZ0lDpLbXpne6NViNyty0o5WjCSkCVDS+/QgqMEdeG2wbTxD p/h+qBKF/2iPoUhRoOIo9hbVKejAPEsceVWDA46EuZE0jW+8KtiDEvsWqCz5OXl7 YQH3DDJYd+MzS4EXWZSxz2dJVTpYRXj8fiC4FEQT8FzvWaj8NhRXrLGhQ401po6v eljVqC8oNG6cM3KKPvMeJVJUu4KctI2lPn9HbTx8TaggEoyV7bySj9dwKKgwUx7c ln14FnP3yMJWD0CB7RiS2+nG1Mevo0m7 -----END CERTIFICATE-----Generated at Sun Jan 25 06:09:11 2026 by rpki-client