This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft File: z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft (raw, json) Hash identifier: 4XrzQ/Ig/hS/N+h1bgKr1Y4NO2s0lywyBUl6g1paJ3s= Subject key identifier: 8F:4B:C2:42:64:E0:82:E9:10:82:44:1A:0C:B9:E6:1C:72:9C:DA:EA Authority key identifier: CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A Certificate issuer: /CN=A9149C62/serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft Manifest number: F2 Signing time: Sun 25 Jan 2026 04:39:36 +0000 Manifest this update: Sun 25 Jan 2026 04:39:35 +0000 Manifest next update: Sun 01 Feb 2026 04:39:35 +0000 Files and hashes: 1: z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl (hash: 1pqQ1YD026TXpuZCnEkCVHhu5TprQofav0JD/SCAfAE=) 2: D7A7F3FEE18711F0A8B43181426F56BC.roa (hash: vYKoPSfFLuXVy0A8zTQtYmFtyImPKcp/50daoXBvX1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149C62, serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A Validity Not Before: Jan 25 04:39:35 2026 GMT Not After : Feb 1 04:39:35 2026 GMT Subject: CN=69759e88-2dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d5:bf:ce:83:5e:ba:d3:f3:8e:85:74:c1:3e: db:e4:ca:0a:00:61:88:bc:ff:5b:69:3f:68:d1:32: f8:6d:ac:6a:e8:08:8c:2a:93:6a:9c:31:bd:77:72: 2f:af:8e:bc:6f:79:69:8d:13:a9:26:8d:93:30:5d: 88:83:90:a4:a5:99:4e:6f:65:3d:e4:c3:1b:9a:db: 42:38:88:41:17:d9:f3:aa:59:63:e6:cf:6f:05:6b: 82:cd:ed:e4:8b:b9:a3:41:d9:0b:3d:85:2c:f1:3b: 4b:a3:23:f8:c5:10:73:93:8f:8d:b1:dc:e5:f9:8a: 3c:7e:0f:a0:fe:35:1b:7c:cb:a8:7b:3d:07:47:cc: 65:57:76:db:82:68:28:8b:92:0c:9d:fd:a9:e4:17: d4:80:d3:5f:57:cb:2e:65:e8:e0:03:b5:63:eb:59: 48:f3:eb:a8:58:86:1d:50:f7:39:6a:a0:06:1e:e3: 2b:9d:e9:34:46:53:98:fc:9d:c1:ca:f7:f1:50:dd: 16:a4:89:82:95:63:16:59:a7:a2:3c:d7:a7:70:d9: ba:1d:a8:55:e7:bf:d1:53:a7:e7:d2:02:5e:a8:34: b5:b8:bb:bb:c4:38:5b:32:5c:c4:d3:cd:78:e2:f2: 67:26:b0:29:2f:71:00:e5:2e:f4:cb:cf:e6:c6:00: 3f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4B:C2:42:64:E0:82:E9:10:82:44:1A:0C:B9:E6:1C:72:9C:DA:EA X509v3 Authority Key Identifier: keyid:CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:71:6e:60:a5:7c:2b:74:05:b7:93:67:b1:73:6b:e8:32:08: b8:92:49:87:3d:e4:cb:9b:5b:22:7c:51:6d:98:d8:f5:72:8e: da:9e:aa:9c:5c:78:3b:7c:29:25:f6:e0:b3:2a:33:b0:66:13: 6c:0e:82:19:c3:4c:b1:93:f6:e6:55:06:93:14:11:e4:f0:d7: 38:9c:ee:79:db:ba:14:5f:4e:52:15:ae:3b:9c:c8:e0:30:e6: ad:6d:e8:e4:12:11:52:0f:d5:90:94:d1:a9:69:98:74:30:69: 6d:ba:37:4a:32:61:aa:6f:7a:bc:00:1a:75:c8:8f:2e:99:f8: b7:11:e3:14:38:28:86:78:45:99:75:4d:37:5d:9d:fd:ee:75: 24:89:cc:c5:c4:aa:63:93:2b:99:80:1d:66:ba:fb:01:67:c1: 9a:d8:d1:c5:d9:05:62:ac:54:48:ca:8b:b9:b1:c4:bc:2a:cd: 95:da:2a:94:3d:0a:ad:92:2f:ff:33:6e:f9:e3:7c:cf:9f:64: ea:16:34:28:44:95:dd:4f:fb:e2:26:44:cc:e7:72:69:47:59: 77:46:cf:1e:6c:2f:47:9d:93:c1:eb:73:db:17:ae:bc:7e:d6: 3d:13:35:d8:32:7d:3a:f5:fc:6b:d0:62:f8:b3:aa:9d:06:19: e9:ef:df:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDNjIxMTAvBgNVBAUTKENGODA0QTZGM0Q4NkExOTcxM0E0RTg4NkQ1OTdCNERD NjQ0NTY4NkEwHhcNMjYwMTI1MDQzOTM1WhcNMjYwMjAxMDQzOTM1WjAYMRYwFAYD VQQDDA02OTc1OWU4OC0yZGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh9W/zoNeutPzjoV0wT7b5MoKAGGIvP9baT9o0TL4baxq6AiMKpNqnDG9d3Iv r468b3lpjROpJo2TMF2Ig5CkpZlOb2U95MMbmttCOIhBF9nzqllj5s9vBWuCze3k i7mjQdkLPYUs8TtLoyP4xRBzk4+Nsdzl+Yo8fg+g/jUbfMuoez0HR8xlV3bbgmgo i5IMnf2p5BfUgNNfV8suZejgA7Vj61lI8+uoWIYdUPc5aqAGHuMrnek0RlOY/J3B yvfxUN0WpImClWMWWaeiPNencNm6HahV57/RU6fn0gJeqDS1uLu7xDhbMlzE0814 4vJnJrApL3EA5S70y8/mxgA/PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9LwkJk 4ILpEIJEGgy55hxynNrqMB8GA1UdIwQYMBaAFM+ASm89hqGXE6TohtWXtNxkRWhq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUM2Mi84NEY0NkI2ODk4 MTUxMUVGQTRCRDNENTdDNEY5QUUwMi96NEJLYnoyR29aY1RwT2lHMVplMDNHUkZh R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o0QktiejJHb1pjVHBPaUcxWmUwM0dSRmFHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUM2Mi84NEY0NkI2ODk4MTUxMUVGQTRCRDNENTdDNEY5QUUwMi96NEJLYnoyR29a Y1RwT2lHMVplMDNHUkZhR28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7cW5gpXwrdAW3k2exc2voMgi4kkmHPeTLm1sifFFtmNj1co7anqqc XHg7fCkl9uCzKjOwZhNsDoIZw0yxk/bmVQaTFBHk8Nc4nO5527oUX05SFa47nMjg MOatbejkEhFSD9WQlNGpaZh0MGltujdKMmGqb3q8ABp1yI8umfi3EeMUOCiGeEWZ dU03XZ397nUkiczFxKpjkyuZgB1muvsBZ8Ga2NHF2QVirFRIyou5scS8Ks2V2iqU PQqtki//M27543zPn2TqFjQoRJXdT/viJkTM53JpR1l3Rs8ebC9HnZPB63PbF668 ftY9EzXYMn069fxr0GL4s6qdBhnp79+u -----END CERTIFICATE-----Generated at Sun Jan 25 10:41:23 2026 by rpki-client