This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft File: Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft (raw, json) Hash identifier: U/eg1JlbazhURewtfJ0KeCqX6egJoOEnZuwG/N9YSlE= Subject key identifier: 18:E6:5B:84:6B:BD:CC:EC:A3:C1:C2:BD:CA:C3:BD:3E:7E:0A:37:93 Authority key identifier: 66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E Certificate issuer: /CN=A9121B73/serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Certificate serial: 24C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft Manifest number: 24A0 Signing time: Sat 24 Jan 2026 15:37:46 +0000 Manifest this update: Sat 24 Jan 2026 15:37:45 +0000 Manifest next update: Sat 31 Jan 2026 15:37:45 +0000 Files and hashes: 1: Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl (hash: soaEwfWXCW/e2HmvEMRaGfOk0AH6PrIfGYJD1hlGRMc=) 2: 9A20324CDD6011EB9935406BC4F9AE02.roa (hash: Jn0BrvewJ0VHEBEPQp+4AkXwLJvrQBlbc50TDzwhQxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9408 (0x24c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121B73, serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Validity Not Before: Jan 24 15:37:45 2026 GMT Not After : Jan 31 15:37:45 2026 GMT Subject: CN=6974e74a-cedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6a:eb:b0:5c:b9:45:46:16:d3:6f:66:ed:33: 9f:61:6e:58:5f:e1:1b:c3:09:ac:1f:91:9a:a2:ac: 04:0d:f9:86:e1:72:e2:b2:4e:ae:8a:23:43:88:d0: ba:d2:b6:3a:0c:cf:68:4a:ee:c7:a8:59:5e:95:f1: 5e:24:04:16:ac:60:f2:92:04:8a:15:93:19:62:8f: 8c:72:ad:ca:08:9f:da:8f:9c:65:8b:d3:05:07:25: 6e:48:c0:b8:59:d9:7f:b5:7c:49:c8:72:10:f4:6b: 2d:c4:11:a6:7d:26:31:bb:c5:7b:79:fd:af:ff:4a: dc:31:8d:e3:58:af:0f:6b:7a:19:12:12:07:af:3f: 0a:79:96:ce:fc:4e:23:dd:98:d0:f6:9c:d6:b8:9d: 38:90:89:6a:d6:f5:4d:ce:57:ff:e2:01:82:08:fc: 9a:12:25:46:ed:d8:3f:d3:c1:98:f1:1d:47:16:80: 16:6a:c3:42:03:9c:f8:7a:5a:18:45:91:4f:fd:86: 8f:42:06:d5:f2:e3:b9:2c:1e:c7:b4:5f:93:f2:c9: 1b:4e:bf:41:b6:79:32:c0:c8:74:b5:2f:e8:8e:dc: dc:f6:d2:2d:4b:2c:cc:e2:bc:fe:26:cd:f6:fc:0d: 6b:28:33:4e:7c:91:39:7e:b5:b1:86:f2:75:9f:45: fd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E6:5B:84:6B:BD:CC:EC:A3:C1:C2:BD:CA:C3:BD:3E:7E:0A:37:93 X509v3 Authority Key Identifier: keyid:66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a4:47:37:a4:c9:d3:1d:90:1b:37:29:9b:42:0d:19:df:0c: 03:a0:08:18:a9:74:31:f3:e2:12:d2:ce:24:3d:24:78:12:e4: 10:30:29:e8:3d:c9:f2:11:50:06:46:18:71:c4:d8:99:47:24: 38:1b:1f:42:d1:66:a5:7b:da:5a:ca:4a:d3:58:8e:14:6b:86: 4d:2b:59:3f:2b:a9:8e:50:b7:16:62:ec:2e:27:09:27:fc:46: 6c:98:55:8a:ed:70:a8:85:80:d8:06:1f:32:e4:a5:4d:51:2d: f1:68:0c:fc:6b:66:fc:d6:66:69:e8:c5:7c:ff:25:3c:1f:1b: f7:05:5f:3a:e4:f9:08:36:5b:f4:55:53:19:30:f8:96:2d:0b: 31:e8:0a:5e:b6:08:7b:b7:d3:13:bb:6e:a2:36:b7:71:e7:0d: 8e:09:ac:57:9d:a2:29:62:15:ed:06:c0:00:9d:7c:1f:3a:f6: 21:c2:7a:2c:4b:bc:52:e0:82:d3:62:c0:85:66:08:4d:2d:2f: 70:87:87:c3:8b:84:12:df:e3:f6:ee:9c:24:0e:e7:57:7b:ba: a2:75:3f:39:76:6d:08:3a:c5:35:c0:e9:dd:c0:fd:4f:f2:cc: af:d0:b4:a4:4f:a9:5e:57:c8:15:2e:7e:b3:48:ce:73:cf:e3: a8:79:2d:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFCNzMxMTAvBgNVBAUTKDY2Q0U2RDA3OEM4ODkzMEZBQzgwMTA4OUMzRTRDNEEz MzM4MjkwMUUwHhcNMjYwMTI0MTUzNzQ1WhcNMjYwMTMxMTUzNzQ1WjAYMRYwFAYD VQQDDA02OTc0ZTc0YS1jZWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGrrsFy5RUYW029m7TOfYW5YX+EbwwmsH5GaoqwEDfmG4XLisk6uiiNDiNC6 0rY6DM9oSu7HqFlelfFeJAQWrGDykgSKFZMZYo+Mcq3KCJ/aj5xli9MFByVuSMC4 Wdl/tXxJyHIQ9GstxBGmfSYxu8V7ef2v/0rcMY3jWK8Pa3oZEhIHrz8KeZbO/E4j 3ZjQ9pzWuJ04kIlq1vVNzlf/4gGCCPyaEiVG7dg/08GY8R1HFoAWasNCA5z4eloY RZFP/YaPQgbV8uO5LB7HtF+T8skbTr9BtnkywMh0tS/ojtzc9tItSyzM4rz+Js32 /A1rKDNOfJE5frWxhvJ1n0X9TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjmW4Rr vczso8HCvcrDvT5+CjeTMB8GA1UdIwQYMBaAFGbObQeMiJMPrIAQicPkxKMzgpAe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUI3My8yQjc3RUYyQTVF REYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3LXNnQkNKdy1URW96T0Nr QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzNXRCNHlJa3ctc2dCQ0p3LVRFb3pPQ2tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUI3My8yQjc3RUYyQTVFREYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3 LXNnQkNKdy1URW96T0NrQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqpEc3pMnTHZAbNymbQg0Z3wwDoAgYqXQx8+IS0s4kPSR4EuQQMCno PcnyEVAGRhhxxNiZRyQ4Gx9C0Wale9paykrTWI4Ua4ZNK1k/K6mOULcWYuwuJwkn /EZsmFWK7XCohYDYBh8y5KVNUS3xaAz8a2b81mZp6MV8/yU8Hxv3BV865PkINlv0 VVMZMPiWLQsx6Apetgh7t9MTu26iNrdx5w2OCaxXnaIpYhXtBsAAnXwfOvYhwnos S7xS4ILTYsCFZghNLS9wh4fDi4QS3+P27pwkDudXe7qidT85dm0IOsU1wOndwP1P 8syv0LSkT6leV8gVLn6zSM5zz+OoeS0r -----END CERTIFICATE-----Generated at Sun Jan 25 15:57:14 2026 by rpki-client