This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft File: zQysDn6E4-geSHYXTiwhQIUJQmk.mft (raw, json) Hash identifier: XTXTcUHUaYB1P0KCAUKUAuTBzkS6GR9NKjgXduTSZKw= Subject key identifier: F8:C2:6F:C9:C3:1D:8D:1A:E4:BF:04:79:72:E7:06:44:87:36:C0:16 Authority key identifier: CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69 Certificate issuer: /CN=A914D249/serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269 Certificate serial: 0385 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft Manifest number: 037A Signing time: Sun 25 Jan 2026 00:05:18 +0000 Manifest this update: Sun 25 Jan 2026 00:05:17 +0000 Manifest next update: Sun 01 Feb 2026 00:05:17 +0000 Files and hashes: 1: zQysDn6E4-geSHYXTiwhQIUJQmk.crl (hash: 0MyzKyIsBOAk3pH3sSwNS9SkD8JJJFF9eitA3NY3dgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 901 (0x385) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D249, serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269 Validity Not Before: Jan 25 00:05:17 2026 GMT Not After : Feb 1 00:05:17 2026 GMT Subject: CN=69755e3e-23b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5a:24:c9:a7:76:c1:7b:5c:2e:e6:a8:77:e1: 39:7a:24:d8:29:4a:4c:8b:17:30:0a:8b:e0:a3:3d: 52:e4:71:f2:4a:21:09:32:70:35:3a:a3:de:a7:24: 78:16:91:a4:cb:05:07:1f:e9:d6:c4:3d:5f:6c:7b: 18:36:dd:63:92:a9:24:e4:a0:0a:c3:d2:f0:1d:a2: 7f:4a:c5:25:74:67:da:ea:3e:e3:be:4e:46:03:40: d3:a1:85:b9:95:f4:38:15:01:e7:41:90:02:4b:b6: b8:cf:32:1b:2e:b7:a4:d4:9e:35:75:22:21:89:25: 74:01:45:9d:f6:6d:88:76:a8:c7:85:4d:16:9e:16: 4d:c2:f5:b2:d0:0c:41:29:f1:8a:76:9d:4e:f2:74: 04:8b:9c:00:c4:66:2a:a3:ac:b4:b4:d5:6e:ae:8c: 97:2e:59:48:dc:7b:cf:a6:f9:00:40:1b:ab:d4:71: d9:09:9e:e1:bc:66:88:2e:1e:20:93:f2:47:62:9d: 3c:bd:6f:74:39:41:89:2c:cc:c2:4d:0f:2d:ed:c1: 4e:a7:1d:a9:a2:b7:d6:e8:15:f5:e4:5c:62:93:97: 37:1d:94:a8:11:66:0b:37:24:fa:a3:3c:fc:82:ec: f1:2c:c7:83:e2:e0:83:a9:85:75:6f:6b:f8:74:3b: f0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C2:6F:C9:C3:1D:8D:1A:E4:BF:04:79:72:E7:06:44:87:36:C0:16 X509v3 Authority Key Identifier: keyid:CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:5c:61:92:7f:80:4a:22:52:e3:04:32:90:b0:2f:a7:12:57: d6:f3:1e:a7:33:88:ae:a0:af:b8:8d:62:f7:0c:64:03:b9:65: ae:6a:99:5c:f0:a1:91:4a:25:1d:12:00:9c:5f:01:c0:34:f3: 06:68:e1:53:f6:9b:04:a5:1c:ce:79:45:3e:21:b8:94:1b:5f: 5b:2f:f4:b3:aa:68:81:41:4c:ba:3a:44:d2:6a:42:4c:da:ee: d1:3f:c4:1e:91:f1:fc:d2:9e:12:5c:78:00:fc:08:3f:1c:48: a8:db:40:63:1f:3d:25:44:47:b5:17:91:90:d7:60:cf:d9:69: 70:bc:ae:fa:37:96:ba:79:dd:70:b5:fb:d2:88:cd:1a:0e:fa: af:6f:9d:97:25:23:53:72:74:6f:10:5b:6a:44:5a:65:26:8c: 90:ad:43:d0:f1:56:ee:db:63:15:00:11:39:b0:48:53:6a:d7: cb:c8:89:a2:f3:09:6e:f5:d8:8e:e8:1b:0b:ea:64:d2:c6:55: c4:98:26:d9:ff:41:e9:38:58:a7:10:9f:47:1d:be:34:b4:94: 40:f5:ae:75:9b:cf:81:50:1a:a7:71:d5:cb:6f:b5:2f:8c:a6: 1e:9c:28:47:2f:c9:f5:50:7f:11:ab:32:d2:62:10:4b:1f:af: 3d:58:f6:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyNDkxMTAvBgNVBAUTKENEMENBQzBFN0U4NEUzRTgxRTQ4NzYxNzRFMkMyMTQw ODUwOTQyNjkwHhcNMjYwMTI1MDAwNTE3WhcNMjYwMjAxMDAwNTE3WjAYMRYwFAYD VQQDDA02OTc1NWUzZS0yM2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj1okyad2wXtcLuaod+E5eiTYKUpMixcwCovgoz1S5HHySiEJMnA1OqPepyR4 FpGkywUHH+nWxD1fbHsYNt1jkqkk5KAKw9LwHaJ/SsUldGfa6j7jvk5GA0DToYW5 lfQ4FQHnQZACS7a4zzIbLrek1J41dSIhiSV0AUWd9m2IdqjHhU0WnhZNwvWy0AxB KfGKdp1O8nQEi5wAxGYqo6y0tNVuroyXLllI3HvPpvkAQBur1HHZCZ7hvGaILh4g k/JHYp08vW90OUGJLMzCTQ8t7cFOpx2porfW6BX15Fxik5c3HZSoEWYLNyT6ozz8 guzxLMeD4uCDqYV1b2v4dDvwuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjCb8nD HY0a5L8EeXLnBkSHNsAWMB8GA1UdIwQYMBaAFM0MrA5+hOPoHkh2F04sIUCFCUJp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDI0OS83NkNFODQ1NkUw MjUxMUVDQjJGQjBFMjdDNEY5QUUwMi96UXlzRG42RTQtZ2VTSFlYVGl3aFFJVUpR bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pReXNEbjZFNC1nZVNIWVhUaXdoUUlVSlFtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDI0OS83NkNFODQ1NkUwMjUxMUVDQjJGQjBFMjdDNEY5QUUwMi96UXlzRG42RTQt Z2VTSFlYVGl3aFFJVUpRbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXXGGSf4BKIlLjBDKQsC+nElfW8x6nM4iuoK+4jWL3DGQDuWWuaplc 8KGRSiUdEgCcXwHANPMGaOFT9psEpRzOeUU+IbiUG19bL/SzqmiBQUy6OkTSakJM 2u7RP8QekfH80p4SXHgA/Ag/HEio20BjHz0lREe1F5GQ12DP2WlwvK76N5a6ed1w tfvSiM0aDvqvb52XJSNTcnRvEFtqRFplJoyQrUPQ8Vbu22MVABE5sEhTatfLyImi 8wlu9diO6BsL6mTSxlXEmCbZ/0HpOFinEJ9HHb40tJRA9a51m8+BUBqncdXLb7Uv jKYenChHL8n1UH8RqzLSYhBLH689WPbd -----END CERTIFICATE-----Generated at Sun Jan 25 04:37:00 2026 by rpki-client