This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft File: zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft (raw, json) Hash identifier: u64UE6jc6PVgJxJf+spUn2e+0LhsNHIoJ99PXE3AJgk= Subject key identifier: D8:D7:A5:1E:22:25:5D:A1:C1:7F:7B:19:04:D3:0D:B7:6C:28:4D:79 Authority key identifier: CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94 Certificate issuer: /CN=A911E93B/serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft Manifest number: 2B Signing time: Fri 23 Jan 2026 06:42:35 +0000 Manifest this update: Fri 23 Jan 2026 06:42:35 +0000 Manifest next update: Fri 30 Jan 2026 06:42:35 +0000 Files and hashes: 1: zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl (hash: TZ5YSjhxDtXn+PCoaURzdsPp4Kp4dVMYqLF4IUx7ikY=) 2: DEED8FA0BF0111F0A0DE3D62C4F9AE02.roa (hash: 5yc3OYyI9+cxhlN6GhCXy6b613PoZglZSVW/o0s8JBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E93B, serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594 Validity Not Before: Jan 23 06:42:35 2026 GMT Not After : Jan 30 06:42:35 2026 GMT Subject: CN=6973185b-5f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:16:8c:9e:47:79:c7:d5:7b:80:d4:63:17:29: 24:c2:86:27:a6:6e:0e:29:d6:e3:68:19:24:b8:b9: d9:80:80:55:0e:80:6c:8f:87:7d:34:24:48:3b:9a: 12:0f:e8:99:13:c9:7f:4a:39:c8:64:33:06:98:b4: c5:06:45:db:b8:af:40:65:a6:4c:55:98:9a:b3:63: 57:90:c6:18:91:ed:c1:50:ba:69:b7:94:f9:1f:57: a7:0b:14:e5:f8:17:3a:a1:80:9f:71:52:5f:30:70: 30:2d:f9:81:18:c0:bc:3e:00:de:90:f2:46:48:d2: b9:1d:9f:f7:76:2c:00:54:7d:a0:7f:c5:01:dd:05: 6f:db:be:f3:ba:9b:0e:21:51:64:c8:c5:c5:54:e7: 4f:80:3b:a9:b9:e5:dd:db:4d:c8:39:25:f0:ee:2a: b0:36:14:59:65:22:a5:ac:80:29:52:28:9f:d4:f6: 96:98:9c:cb:62:4f:42:3d:f0:0b:93:4f:a5:1e:31: 88:ac:25:e5:72:8c:36:0c:5a:6c:fa:2b:f7:9a:50: 9f:42:91:a6:b0:b0:69:c5:cd:a8:8c:c2:f3:8a:96: d5:a4:81:dd:05:26:40:9c:17:77:16:59:58:b9:5f: 0e:3b:63:94:b6:8b:d2:55:d4:28:9a:7c:71:de:17: ff:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D7:A5:1E:22:25:5D:A1:C1:7F:7B:19:04:D3:0D:B7:6C:28:4D:79 X509v3 Authority Key Identifier: keyid:CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:39:c9:e0:23:88:38:a3:a3:4b:dd:e8:d4:59:94:47:3f:d1: c9:65:07:a4:eb:8e:c4:52:46:27:cf:2f:62:07:94:fd:6c:ea: 3b:e8:54:08:4f:64:2a:bb:45:a7:4c:6b:ff:c2:ea:c7:61:75: 75:f5:ca:0b:e4:5b:2b:44:1c:03:53:d4:00:ac:1d:a2:60:05: 12:11:cc:d7:3e:45:2b:2c:50:00:9e:b6:a0:18:b5:fc:20:8b: 3f:15:55:b1:4f:68:e9:c6:ff:94:d7:00:ca:34:2a:f4:35:86: 3d:27:fe:cf:6d:d4:53:c1:ed:69:24:31:8f:b3:18:50:43:c9: 95:5c:d2:a5:d3:69:98:06:d1:0e:b4:4b:40:18:cf:8c:5b:47: 80:a0:7d:39:0f:e0:98:fd:bf:fe:d9:2b:d2:d8:ad:12:11:d2: 8a:54:ef:96:77:eb:b4:3d:6d:3e:68:1b:cd:86:00:a2:6a:60: 88:8e:55:66:31:28:a4:52:00:60:52:db:60:1a:30:78:b7:77: 35:55:8a:94:a1:14:a4:fd:67:2a:4c:80:49:04:47:83:ea:98: 77:2d:aa:a6:97:4f:23:14:38:90:20:e7:82:6e:1b:d6:4e:bb: 52:75:e8:05:91:d7:6a:7e:d4:21:1c:43:c1:f2:37:94:fb:c7: 34:a9:55:40 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTkzQjExMC8GA1UEBRMoQ0RGNkU1NjU0NDM1QjNDODRERkExMEI5QkM4NzEwRTlF QkIwRDU5NDAeFw0yNjAxMjMwNjQyMzVaFw0yNjAxMzAwNjQyMzVaMBgxFjAUBgNV BAMMDTY5NzMxODViLTVmOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdFoyeR3nH1XuA1GMXKSTChiembg4p1uNoGSS4udmAgFUOgGyPh300JEg7mhIP 6JkTyX9KOchkMwaYtMUGRdu4r0BlpkxVmJqzY1eQxhiR7cFQumm3lPkfV6cLFOX4 FzqhgJ9xUl8wcDAt+YEYwLw+AN6Q8kZI0rkdn/d2LABUfaB/xQHdBW/bvvO6mw4h UWTIxcVU50+AO6m55d3bTcg5JfDuKrA2FFllIqWsgClSKJ/U9paYnMtiT0I98AuT T6UeMYisJeVyjDYMWmz6K/eaUJ9CkaawsGnFzaiMwvOKltWkgd0FJkCcF3cWWVi5 Xw47Y5S2i9JV1CiafHHeF//JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2NelHiIl XaHBf3sZBNMNt2woTXkwHwYDVR0jBBgwFoAUzfblZUQ1s8hN+hC5vIcQ6euw1ZQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFOTNCLzdEQkFEMUVFQkYw MDExRjBCQ0MxNUQ1REM0RjlBRTAyL3pmYmxaVVExczhoTi1oQzV2SWNRNmV1dzFa US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemZibFpVUTFzOGhOLWhDNXZJY1E2ZXV3MVpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF OTNCLzdEQkFEMUVFQkYwMDExRjBCQ0MxNUQ1REM0RjlBRTAyL3pmYmxaVVExczho Ti1oQzV2SWNRNmV1dzFaUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMs5yeAjiDijo0vd6NRZlEc/0cllB6TrjsRSRifPL2IHlP1s6jvoVAhP ZCq7RadMa//C6sdhdXX1ygvkWytEHANT1ACsHaJgBRIRzNc+RSssUACetqAYtfwg iz8VVbFPaOnG/5TXAMo0KvQ1hj0n/s9t1FPB7WkkMY+zGFBDyZVc0qXTaZgG0Q60 S0AYz4xbR4CgfTkP4Jj9v/7ZK9LYrRIR0opU75Z367Q9bT5oG82GAKJqYIiOVWYx KKRSAGBS22AaMHi3dzVVipShFKT9ZypMgEkER4PqmHctqqaXTyMUOJAg54JuG9ZO u1J16AWR12p+1CEcQ8HyN5T7xzSpVUA= -----END CERTIFICATE-----Generated at Sun Jan 25 04:33:41 2026 by rpki-client