This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft File: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft (raw, json) Hash identifier: 3vTu0vQ9AwqJ9ui8NznO6sxiiowLOGHHOCre8Pui330= Subject key identifier: B3:CC:7A:EB:2C:3C:12:D9:2D:63:95:6D:C9:95:B4:2E:3C:25:0A:F4 Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 Certificate issuer: /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft Manifest number: 0207 Signing time: Sun 25 Jan 2026 01:47:28 +0000 Manifest this update: Sun 25 Jan 2026 01:47:28 +0000 Manifest next update: Sun 01 Feb 2026 01:47:28 +0000 Files and hashes: 1: ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl (hash: 5Vxg71Wh27XM6/3kdaitqaOL3udNObw+2MGnKVIyzms=) 2: 63DC5AA6C67611EEB1126C70C4F9AE02.roa (hash: R4Ljm5NeP4Hir9hOIaavj4Ei4Fp/DK7rq1sAkkj7t6M=) 3: 118AB342249511EFBF275B73C4F9AE02.roa (hash: UBOFGSoa96Dj5GakGMm+C82OJl4KIG2NerG7i5z19VI=) 4: 6CE6E15ECEF311EEBCE7894DC4F9AE02.roa (hash: dEO++79BUk5ahAousLOU8sxWcE1quKezgUCE1Hu7wA4=) 5: 02D36C86F50211ED8A235C4EC4F9AE02.roa (hash: 6T5VqQ+edZ6pbmeIW8IszEM8XpwV+NQ6Abfc3d497aM=) 6: 6ABFFBC6F53811EDBAE7E351C4F9AE02.roa (hash: yx0ON/sLrcGZFA/S/wuCK9bR9AtwCeJiAtm+emoP2GY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:47:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121836, serialNumber=66B214D11C7F961A95C4256703428E93CBA72986 Validity Not Before: Jan 25 01:47:28 2026 GMT Not After : Feb 1 01:47:28 2026 GMT Subject: CN=69757630-012b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6b:ff:3c:9d:a8:82:bc:a7:9d:95:1b:bc:1e: 34:3b:f7:35:f0:cd:36:4e:8b:41:af:7b:56:5c:44: 5e:0c:9d:c4:af:47:c5:6a:71:34:ac:87:6d:c0:86: 3f:f4:55:25:f6:01:63:f9:8a:47:0a:d0:38:cb:36: 67:3b:5a:9b:cd:53:39:e5:02:c8:5f:0b:7e:94:90: 33:75:f8:f3:92:5c:da:ae:17:a6:ad:3f:72:f5:5f: 08:17:b0:be:65:a7:d4:27:ef:83:45:fd:48:e2:87: 3c:65:67:0e:41:52:ed:b9:9a:70:1f:43:2a:05:e6: 16:99:22:c7:35:18:f3:45:e9:69:4f:0a:ee:f4:2c: 5b:77:c0:e4:96:ca:72:1b:77:e7:de:8c:eb:7a:e2: bf:02:7a:93:e1:68:4e:7b:c4:06:aa:09:99:8e:e7: 79:4e:63:db:cd:45:ae:04:d4:29:dc:4f:3c:e9:5c: 68:67:0a:65:81:d5:5d:fa:da:58:e5:c7:5e:40:0a: 15:33:9f:53:91:04:64:f8:05:4b:9d:d2:42:3b:7b: b8:60:73:00:5b:da:7c:70:ad:c6:6b:cf:ce:66:36: 80:09:5b:e2:d8:83:2c:ff:75:d5:ff:71:0a:20:99: 28:2c:7b:22:25:8a:96:4f:e5:9a:39:af:e4:54:d6: 56:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CC:7A:EB:2C:3C:12:D9:2D:63:95:6D:C9:95:B4:2E:3C:25:0A:F4 X509v3 Authority Key Identifier: keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:cc:2b:ff:53:b7:19:5c:90:39:41:1c:44:a8:db:8e:d8:01: e7:8e:c2:a0:a3:97:a4:90:03:cf:3e:ab:ed:6d:5e:f1:71:76: 28:60:f8:b4:22:51:8c:2b:5f:80:65:ea:d6:87:ab:6e:50:de: f3:e0:65:27:c8:fc:bb:55:a6:0c:11:f1:e1:94:b9:ab:2e:35: 73:25:92:bc:35:c2:6f:cd:99:3d:13:26:20:c2:28:db:b6:12: 20:39:3d:39:64:49:69:fc:7b:57:9f:53:40:67:d2:f0:54:e7: 02:a0:32:ed:e6:01:57:23:7d:b5:80:dd:ff:f9:73:02:5d:c9: 4d:9e:31:73:e4:8d:57:2b:dc:c6:62:86:29:63:00:be:f5:31: 52:cb:23:22:d4:b6:2b:25:7d:15:e6:8c:ca:92:08:6a:ab:9e: d5:8f:b6:55:0e:0d:9d:d8:6c:c1:1a:e5:96:8d:2f:62:33:48: 96:25:9a:ec:49:57:58:1e:b7:67:05:be:7c:4b:e8:fb:bb:48: 01:a2:61:c3:21:ed:93:13:ca:b4:df:28:68:20:d4:12:f8:68: 6b:e6:4e:ee:98:04:2a:d7:74:db:f8:5b:80:a5:4b:87:5c:c9: f6:f3:2f:cd:e9:96:0c:5d:ba:c0:39:62:95:49:7e:99:03:9a: 0f:f4:e6:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4MzYxMTAvBgNVBAUTKDY2QjIxNEQxMUM3Rjk2MUE5NUM0MjU2NzAzNDI4RTkz Q0JBNzI5ODYwHhcNMjYwMTI1MDE0NzI4WhcNMjYwMjAxMDE0NzI4WjAYMRYwFAYD VQQDDA02OTc1NzYzMC0wMTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkmv/PJ2ogrynnZUbvB40O/c18M02TotBr3tWXEReDJ3Er0fFanE0rIdtwIY/ 9FUl9gFj+YpHCtA4yzZnO1qbzVM55QLIXwt+lJAzdfjzklzarhemrT9y9V8IF7C+ ZafUJ++DRf1I4oc8ZWcOQVLtuZpwH0MqBeYWmSLHNRjzRelpTwru9Cxbd8Dklspy G3fn3ozreuK/AnqT4WhOe8QGqgmZjud5TmPbzUWuBNQp3E886VxoZwplgdVd+tpY 5cdeQAoVM59TkQRk+AVLndJCO3u4YHMAW9p8cK3Ga8/OZjaACVvi2IMs/3XV/3EK IJkoLHsiJYqWT+WaOa/kVNZWQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLPMeuss PBLZLWOVbcmVtC48JQr0MB8GA1UdIwQYMBaAFGayFNEcf5YalcQlZwNCjpPLpymG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTgzNi9GMURCMUQ0NEY0 RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xocVZ4Q1ZuQTBLT2s4dW5L WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVUwUnhfbGhxVnhDVm5BMEtPazh1bktZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTgzNi9GMURCMUQ0NEY0RkIxMUVEOTM4Rjk0NDdDNEY5QUUwMi9acklVMFJ4X2xo cVZ4Q1ZuQTBLT2s4dW5LWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9zCv/U7cZXJA5QRxEqNuO2AHnjsKgo5ekkAPPPqvtbV7xcXYoYPi0 IlGMK1+AZerWh6tuUN7z4GUnyPy7VaYMEfHhlLmrLjVzJZK8NcJvzZk9EyYgwijb thIgOT05ZElp/HtXn1NAZ9LwVOcCoDLt5gFXI321gN3/+XMCXclNnjFz5I1XK9zG YoYpYwC+9TFSyyMi1LYrJX0V5ozKkghqq57Vj7ZVDg2d2GzBGuWWjS9iM0iWJZrs SVdYHrdnBb58S+j7u0gBomHDIe2TE8q03yhoINQS+Ghr5k7umAQq13Tb+FuApUuH XMn28y/N6ZYMXbrAOWKVSX6ZA5oP9Oag -----END CERTIFICATE-----Generated at Sun Jan 25 12:32:58 2026 by rpki-client