This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft File: Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft (raw, json) Hash identifier: qFiVifnfWzW1Y63JSLInz0kBJJ3O8b0qa58CoDh8EgE= Subject key identifier: 23:16:A6:B0:A5:50:33:84:2B:BD:FB:15:B7:1E:6D:10:DB:E3:7B:2A Authority key identifier: 67:4B:8D:06:01:34:EC:3D:18:68:D0:54:0F:7C:D8:4F:14:B9:C9:59 Certificate issuer: /CN=A91253B9/serialNumber=674B8D060134EC3D1868D0540F7CD84F14B9C959 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft Manifest number: 1C Signing time: Sun 25 Jan 2026 06:55:51 +0000 Manifest this update: Sun 25 Jan 2026 06:55:50 +0000 Manifest next update: Sun 01 Feb 2026 06:55:50 +0000 Files and hashes: 1: Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl (hash: XDRydG33LA4lbVvYZ2Zua3DifwszHX8+KDhKOAc+xHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91253B9, serialNumber=674B8D060134EC3D1868D0540F7CD84F14B9C959 Validity Not Before: Jan 25 06:55:50 2026 GMT Not After : Feb 1 06:55:50 2026 GMT Subject: CN=6975be77-7df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:75:ae:03:26:6b:63:f1:31:46:f8:d4:73:12: fa:51:db:de:84:70:23:1a:4e:ef:64:73:42:28:4f: e5:5f:84:77:0f:08:9c:a1:f3:5d:50:63:21:a2:8d: 41:85:69:ca:d0:72:cb:23:33:13:5b:42:ab:5b:78: 77:c7:06:eb:4e:c2:b5:0d:cc:75:8c:6f:88:d6:25: 66:84:a1:0d:bc:81:54:f6:76:d4:ba:13:ee:19:7c: 89:0a:69:18:5c:74:77:7d:f4:7b:9d:fd:30:b0:81: 9b:3e:89:09:94:c4:3d:4d:3a:9a:61:14:14:f8:10: 08:b4:f9:27:5c:15:6e:40:07:70:8f:35:2e:e8:a9: c0:1f:c4:d7:0d:a3:c3:5b:58:14:f6:12:b4:7a:10: 5d:36:2d:56:79:4d:86:a8:f9:90:cb:ca:fa:1b:05: f5:cf:2a:1c:b8:24:c7:78:59:d2:81:bc:b2:78:db: dc:ef:05:45:88:60:df:cf:90:00:73:db:c8:35:0b: 6f:06:8b:4c:7a:ab:30:5e:a9:9b:b8:02:ee:ac:ce: d4:32:d0:a2:9c:ae:82:0e:a3:42:b7:2d:b5:5d:bf: db:95:f4:14:35:fe:c9:32:f2:19:1a:35:6e:ea:76: 96:07:a4:7e:19:3b:59:6e:f7:6d:96:d1:d0:37:1a: 0e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:16:A6:B0:A5:50:33:84:2B:BD:FB:15:B7:1E:6D:10:DB:E3:7B:2A X509v3 Authority Key Identifier: keyid:67:4B:8D:06:01:34:EC:3D:18:68:D0:54:0F:7C:D8:4F:14:B9:C9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:df:4a:bc:9a:a7:8a:ee:97:41:8a:13:6c:7d:19:ad:12:03: 36:e1:92:25:95:22:75:58:dc:3a:c1:69:e8:94:e8:d1:fe:68: 60:aa:ac:c4:a7:fe:79:0c:95:a3:64:75:fa:81:6d:3e:a4:a7: 23:4c:72:41:c1:21:8f:2a:fd:c0:c4:34:95:b0:2a:2b:37:01: 91:1b:d8:fd:d5:3b:75:77:cf:05:f9:90:88:1c:d4:c2:ae:9e: 3e:30:54:98:3e:97:81:23:da:a9:35:ff:78:b1:c2:16:b5:52: d0:f1:30:96:80:fd:04:62:a1:99:ae:8b:44:e0:fe:86:2c:78: 06:b8:61:fd:d3:95:12:89:5b:28:3e:ce:4f:9a:32:8a:f5:bc: 9f:60:c8:11:86:9d:03:cb:3b:c3:d1:96:d4:12:58:27:e0:4d: 3e:9f:37:4c:15:02:de:56:f2:be:62:36:c7:11:0e:f8:22:91: 51:50:7a:a4:b4:b0:fb:81:23:16:ae:33:b8:7d:ed:24:07:da: ba:82:7e:3b:fe:1e:85:25:97:ca:d2:59:1c:a9:e6:08:48:f7: dc:c2:75:1f:28:4e:41:3d:2e:20:6d:7a:d6:a3:0e:54:df:ce: 38:8d:3b:0a:e6:fb:c7:13:89:19:11:77:cd:c6:07:ac:fc:2b: 1f:e3:c5:37 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTNCOTExMC8GA1UEBRMoNjc0QjhEMDYwMTM0RUMzRDE4NjhEMDU0MEY3Q0Q4NEYx NEI5Qzk1OTAeFw0yNjAxMjUwNjU1NTBaFw0yNjAyMDEwNjU1NTBaMBgxFjAUBgNV BAMMDTY5NzViZTc3LTdkZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhda4DJmtj8TFG+NRzEvpR296EcCMaTu9kc0IoT+VfhHcPCJyh811QYyGijUGF acrQcssjMxNbQqtbeHfHButOwrUNzHWMb4jWJWaEoQ28gVT2dtS6E+4ZfIkKaRhc dHd99Hud/TCwgZs+iQmUxD1NOpphFBT4EAi0+SdcFW5AB3CPNS7oqcAfxNcNo8Nb WBT2ErR6EF02LVZ5TYao+ZDLyvobBfXPKhy4JMd4WdKBvLJ429zvBUWIYN/PkABz 28g1C28Gi0x6qzBeqZu4Au6sztQy0KKcroIOo0K3LbVdv9uV9BQ1/sky8hkaNW7q dpYHpH4ZO1lu922W0dA3Gg7HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIxamsKVQ M4QrvfsVtx5tENvjeyowHwYDVR0jBBgwFoAUZ0uNBgE07D0YaNBUD3zYTxS5yVkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1M0I5LzlFQUZGQjgwRDFE MDExRjA5NDhERDM0MUM0RjlBRTAyL1owdU5CZ0UwN0QwWWFOQlVEM3pZVHhTNXlW ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjB1TkJnRTA3RDBZYU5CVUQzellUeFM1eVZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 M0I5LzlFQUZGQjgwRDFEMDExRjA5NDhERDM0MUM0RjlBRTAyL1owdU5CZ0UwN0Qw WWFOQlVEM3pZVHhTNXlWay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACzfSryap4rul0GKE2x9Ga0SAzbhkiWVInVY3DrBaeiU6NH+aGCqrMSn /nkMlaNkdfqBbT6kpyNMckHBIY8q/cDENJWwKis3AZEb2P3VO3V3zwX5kIgc1MKu nj4wVJg+l4Ej2qk1/3ixwha1UtDxMJaA/QRioZmui0Tg/oYseAa4Yf3TlRKJWyg+ zk+aMor1vJ9gyBGGnQPLO8PRltQSWCfgTT6fN0wVAt5W8r5iNscRDvgikVFQeqS0 sPuBIxauM7h97SQH2rqCfjv+HoUll8rSWRyp5ghI99zCdR8oTkE9LiBtetajDlTf zjiNOwrm+8cTiRkRd83GB6z8Kx/jxTc= -----END CERTIFICATE-----Generated at Sun Jan 25 09:32:35 2026 by rpki-client