This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft File: ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft (raw, json) Hash identifier: hv4w4kW75hV/fbgo6P0jlfsJSv320txUCTx4fN3l4rA= Subject key identifier: B1:FF:70:F3:C8:4C:82:66:F6:31:91:90:03:43:69:1B:68:FC:E8:1D Authority key identifier: 64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13 Certificate issuer: /CN=A911B5AC/serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft Manifest number: 2D Signing time: Sun 25 Jan 2026 01:05:50 +0000 Manifest this update: Sun 25 Jan 2026 01:05:49 +0000 Manifest next update: Sun 01 Feb 2026 01:05:49 +0000 Files and hashes: 1: ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl (hash: 6tYqGAoYVZYeymJmvPwIOL01WNe+mbR7BO2W7dzmwfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:05:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5AC, serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213 Validity Not Before: Jan 25 01:05:49 2026 GMT Not After : Feb 1 01:05:49 2026 GMT Subject: CN=69756c6e-08b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c7:f2:36:1d:87:38:76:7c:a7:06:1a:ad:bb: de:65:3e:fa:a7:3c:f4:df:24:cd:90:ac:8b:a9:3a: 96:cf:d6:3d:53:c8:3a:34:b5:2e:38:47:0c:02:85: 8b:ec:7a:4b:4a:4e:68:aa:93:5c:dc:a4:05:50:22: b1:65:b2:82:e4:f1:87:06:3f:2d:fc:9c:1d:82:37: f3:fa:8b:ff:0c:20:8d:a4:b1:cf:ff:57:11:a0:fa: b8:ae:94:0f:36:3a:4e:31:8e:9e:29:dc:42:5b:27: 43:b8:57:b3:ef:6b:cc:07:64:5f:42:4f:fc:62:f0: a0:f4:2d:e9:79:67:e3:49:8a:49:1f:9c:b0:39:0e: 1e:fd:d8:aa:02:bd:11:b5:53:c4:df:38:80:9d:07: 2f:01:18:b8:1d:74:5d:84:42:cc:1c:5f:d1:89:97: 3e:98:7f:9c:3d:19:7c:5a:db:ef:e2:f0:72:b4:3a: 6d:0e:11:d8:2c:c9:96:8d:86:89:c9:c2:3d:31:3f: 57:7e:71:49:29:7d:32:fc:d0:a2:fc:b4:b7:95:33: 1e:16:73:27:a7:45:c3:f9:6f:1d:2f:2d:22:00:fc: ec:6a:e0:54:d9:60:ee:88:22:34:18:41:53:a1:de: a3:39:a1:4c:9a:f0:db:0b:2c:d0:7e:80:5e:69:d9: c5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FF:70:F3:C8:4C:82:66:F6:31:91:90:03:43:69:1B:68:FC:E8:1D X509v3 Authority Key Identifier: keyid:64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:61:e1:92:0b:1c:c4:dd:50:c5:b1:77:47:c0:0c:ed:32:4b: 1f:4e:6a:1e:0d:d8:10:c8:78:c5:a8:fa:03:2c:d8:bb:03:47: 71:9c:d2:89:b6:6d:25:f4:1c:7b:4c:ff:11:0b:0a:d6:ad:1a: 70:64:f3:d4:76:84:b0:7e:3d:8f:3e:48:c5:23:87:bd:0a:62: a9:58:5c:59:80:77:53:ce:14:01:da:b7:cb:7b:44:7f:1d:90: 1f:4d:ac:c0:34:8f:fa:59:5e:a0:90:24:4b:94:1f:a4:6c:52: 88:68:40:3a:7e:04:06:11:b6:5a:c1:1c:78:7f:59:0b:4e:68: fe:63:51:df:57:a1:e7:12:59:a6:ff:5c:69:b4:f8:a1:d8:af: 54:72:b4:f2:b7:0c:9f:9f:1f:f6:71:e6:43:99:6f:2e:5b:6c: 3f:4d:db:2b:7d:05:88:b3:05:a7:6b:4e:3c:47:21:8b:87:ff: 47:50:9d:09:ee:c0:47:7f:0b:e1:1d:30:d4:88:ee:4b:21:0e: b0:b5:31:c2:06:18:b9:88:c4:e1:ed:32:91:74:35:d3:ba:94: e5:ed:41:d9:34:75:0e:6a:98:15:33:b9:0f:10:dc:d9:26:7d: e2:a2:e6:46:81:19:ef:f3:95:41:33:90:b2:08:20:a7:7b:8f: 51:14:dd:b5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjVBQzExMC8GA1UEBRMoNjQ1MTU1M0UwOURDMjRERERCQzU0MDczRTY2MjVCMUEx NkU3NTIxMzAeFw0yNjAxMjUwMTA1NDlaFw0yNjAyMDEwMTA1NDlaMBgxFjAUBgNV BAMMDTY5NzU2YzZlLTA4YjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChx/I2HYc4dnynBhqtu95lPvqnPPTfJM2QrIupOpbP1j1TyDo0tS44RwwChYvs ektKTmiqk1zcpAVQIrFlsoLk8YcGPy38nB2CN/P6i/8MII2ksc//VxGg+riulA82 Ok4xjp4p3EJbJ0O4V7Pva8wHZF9CT/xi8KD0Lel5Z+NJikkfnLA5Dh792KoCvRG1 U8TfOICdBy8BGLgddF2EQswcX9GJlz6Yf5w9GXxa2+/i8HK0Om0OEdgsyZaNhonJ wj0xP1d+cUkpfTL80KL8tLeVMx4WcyenRcP5bx0vLSIA/Oxq4FTZYO6IIjQYQVOh 3qM5oUya8NsLLNB+gF5p2cUJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsf9w88hM gmb2MZGQA0NpG2j86B0wHwYDVR0jBBgwFoAUZFFVPgncJN3bxUBz5mJbGhbnUhMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCNUFDL0JDMUY3REI2Qjky MTExRjBCRjREMzk0MEM0RjlBRTAyL1pGRlZQZ25jSk4zYnhVQno1bUpiR2hiblVo TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWkZGVlBnbmNKTjNieFVCejVtSmJHaGJuVWhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC NUFDL0JDMUY3REI2QjkyMTExRjBCRjREMzk0MEM0RjlBRTAyL1pGRlZQZ25jSk4z YnhVQno1bUpiR2hiblVoTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEph4ZILHMTdUMWxd0fADO0ySx9Oah4N2BDIeMWo+gMs2LsDR3Gc0om2 bSX0HHtM/xELCtatGnBk89R2hLB+PY8+SMUjh70KYqlYXFmAd1POFAHat8t7RH8d kB9NrMA0j/pZXqCQJEuUH6RsUohoQDp+BAYRtlrBHHh/WQtOaP5jUd9XoecSWab/ XGm0+KHYr1RytPK3DJ+fH/Zx5kOZby5bbD9N2yt9BYizBadrTjxHIYuH/0dQnQnu wEd/C+EdMNSI7kshDrC1McIGGLmIxOHtMpF0NdO6lOXtQdk0dQ5qmBUzuQ8Q3Nkm feKi5kaBGe/zlUEzkLIIIKd7j1EU3bU= -----END CERTIFICATE-----Generated at Mon Jan 26 08:01:56 2026 by rpki-client