This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft File: ZaHSWvtmp255SpZv8ztrBgx_gN8.mft (raw, json) Hash identifier: 5QXqQTNjBtx32sEozlWqd+2GpNPxV+u4KmEjfOw4MA0= Subject key identifier: 88:EF:10:D4:93:CC:6E:C6:63:D9:D0:C6:9C:79:01:03:3D:4E:24:74 Authority key identifier: 65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF Certificate issuer: /CN=A9142187/serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft Manifest number: 20 Signing time: Fri 23 Jan 2026 06:50:22 +0000 Manifest this update: Fri 23 Jan 2026 06:50:21 +0000 Manifest next update: Fri 30 Jan 2026 06:50:21 +0000 Files and hashes: 1: ZaHSWvtmp255SpZv8ztrBgx_gN8.crl (hash: QyFYjbmHaQSer+Pe5QAAN/s28u4gtIDHjMTUDyh/ahQ=) 2: 357523A6CB1411F08DA0B25FC4F9AE02.roa (hash: DrxUkGgbXC+hFErU1Q5gF25VKeHWYD3GDyiKccqOvbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142187, serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF Validity Not Before: Jan 23 06:50:21 2026 GMT Not After : Jan 30 06:50:21 2026 GMT Subject: CN=69731a2e-55a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:aa:1c:de:22:ff:f1:1c:52:29:a9:ec:9e:4d: d0:29:54:df:cb:e2:d6:8e:27:a4:89:8f:60:aa:2c: 86:1f:c5:41:68:8c:f4:63:63:0f:f2:d1:db:42:b1: 2e:9e:a7:ad:40:1c:a1:43:42:b1:e9:30:d6:96:db: 1f:57:32:b8:12:c4:2f:e7:95:5a:73:7b:b5:7f:96: a1:e5:da:c7:3f:94:a2:0b:6e:fc:99:b6:8c:01:94: 56:c7:9e:43:57:81:14:28:ee:38:67:0f:3a:73:2c: cd:2a:d8:39:a1:13:9d:7f:40:1f:6f:2c:72:dd:1d: ec:d2:10:e6:d1:98:29:79:da:67:33:1d:6d:3b:18: 00:c0:f4:f8:84:cd:07:8b:ef:a4:7d:dd:4b:4c:f9: 4a:05:dd:ed:64:1c:f0:95:64:35:4b:d0:79:09:1d: 3b:f0:9c:ac:bb:6e:34:82:d9:7d:99:31:49:a1:31: cf:a2:06:7d:24:58:d1:51:4b:66:54:cb:4e:5f:84: a8:be:d6:91:ba:ed:42:0a:2d:fa:88:f1:8c:97:87: 4e:cd:30:30:41:69:5c:f3:50:c7:e3:0b:53:f8:50: e6:bb:b0:4a:43:28:46:36:da:8e:00:9d:e5:26:2d: 43:c8:59:5b:0b:23:2c:65:65:71:2f:a3:bb:06:0b: e4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EF:10:D4:93:CC:6E:C6:63:D9:D0:C6:9C:79:01:03:3D:4E:24:74 X509v3 Authority Key Identifier: keyid:65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:b3:66:f7:af:d4:d1:7f:ef:4b:21:24:ec:10:59:46:53:bf: 1b:cf:a5:3e:e8:fa:20:f6:13:eb:22:49:76:03:80:99:96:03: 5c:ac:5d:99:96:7e:ec:78:cb:c7:ed:6b:d3:a7:46:39:2f:68: 7f:2e:95:d2:28:bc:1d:c9:47:85:45:f0:91:4a:bb:7d:5e:4b: e3:74:d8:12:ac:21:49:31:b0:5c:f0:59:f9:56:af:d7:4c:78: e5:43:08:6d:17:4b:30:3e:87:43:02:72:1c:cd:64:88:b1:b9: af:01:94:c8:29:5c:8f:63:14:3b:71:dd:9e:1a:bd:a9:93:41: 0e:90:cb:3a:31:8d:c0:47:eb:d1:df:69:97:63:d3:9d:aa:b9: d7:21:c0:39:d8:35:78:54:d0:a7:00:38:7b:3e:e6:5f:f4:2e: 93:92:91:d9:84:9e:78:0e:13:9c:bd:a0:90:bd:37:46:06:e4: 07:c6:aa:7e:e2:d5:b3:2a:0b:32:0f:ae:95:db:01:7a:92:58: e5:fd:42:66:8e:8b:99:a8:5a:4e:09:3d:37:24:61:5c:c2:41: 37:c3:08:11:6b:2b:9c:92:35:e7:47:d3:83:7f:07:7f:73:e9: 37:66:08:db:0e:91:f6:2b:86:4a:69:fd:44:33:33:cd:9b:b9: 3e:74:ab:40 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjE4NzExMC8GA1UEBRMoNjVBMUQyNUFGQjY2QTc2RTc5NEE5NjZGRjMzQjZCMDYw QzdGODBERjAeFw0yNjAxMjMwNjUwMjFaFw0yNjAxMzAwNjUwMjFaMBgxFjAUBgNV BAMMDTY5NzMxYTJlLTU1YTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/qhzeIv/xHFIpqeyeTdApVN/L4taOJ6SJj2CqLIYfxUFojPRjYw/y0dtCsS6e p61AHKFDQrHpMNaW2x9XMrgSxC/nlVpze7V/lqHl2sc/lKILbvyZtowBlFbHnkNX gRQo7jhnDzpzLM0q2DmhE51/QB9vLHLdHezSEObRmCl52mczHW07GADA9PiEzQeL 76R93UtM+UoF3e1kHPCVZDVL0HkJHTvwnKy7bjSC2X2ZMUmhMc+iBn0kWNFRS2ZU y05fhKi+1pG67UIKLfqI8YyXh07NMDBBaVzzUMfjC1P4UOa7sEpDKEY22o4AneUm LUPIWVsLIyxlZXEvo7sGC+QfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiO8Q1JPM bsZj2dDGnHkBAz1OJHQwHwYDVR0jBBgwFoAUZaHSWvtmp255SpZv8ztrBgx/gN8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyMTg3LzM5MkMxODI2Q0E1 OTExRjBBNzNBODQ2QkM0RjlBRTAyL1phSFNXdnRtcDI1NVNwWnY4enRyQmd4X2dO OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmFIU1d2dG1wMjU1U3Badjh6dHJCZ3hfZ044LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy MTg3LzM5MkMxODI2Q0E1OTExRjBBNzNBODQ2QkM0RjlBRTAyL1phSFNXdnRtcDI1 NVNwWnY4enRyQmd4X2dOOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHmzZvev1NF/70shJOwQWUZTvxvPpT7o+iD2E+siSXYDgJmWA1ysXZmW fux4y8fta9OnRjkvaH8uldIovB3JR4VF8JFKu31eS+N02BKsIUkxsFzwWflWr9dM eOVDCG0XSzA+h0MCchzNZIixua8BlMgpXI9jFDtx3Z4avamTQQ6QyzoxjcBH69Hf aZdj052qudchwDnYNXhU0KcAOHs+5l/0LpOSkdmEnngOE5y9oJC9N0YG5AfGqn7i 1bMqCzIPrpXbAXqSWOX9QmaOi5moWk4JPTckYVzCQTfDCBFrK5ySNedH04N/B39z 6TdmCNsOkfYrhkpp/UQzM82buT50q0A= -----END CERTIFICATE-----Generated at Sun Jan 25 06:11:00 2026 by rpki-client