This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft File: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft (raw, json) Hash identifier: WCaHYaS8fyLMtWpcoc6UVTnls8xR6TqSnaT8b3QvL4g= Subject key identifier: DC:C4:34:93:3E:D3:4C:DA:38:89:85:FE:D9:AF:3D:D1:33:48:DD:88 Authority key identifier: CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24 Certificate issuer: /CN=A9154D26/serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724 Certificate serial: 050E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft Manifest number: 0501 Signing time: Sat 24 Jan 2026 22:54:22 +0000 Manifest this update: Sat 24 Jan 2026 22:54:21 +0000 Manifest next update: Sat 31 Jan 2026 22:54:21 +0000 Files and hashes: 1: zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl (hash: Vrf5MUi/HQA+rPihD72ghcZOeQLzEN9m6JvrF8TWavs=) 2: AA5485827F3611ECBED94963C4F9AE02.roa (hash: L7q5MhSYBL7XAFYcbCU7483l92C9DWVyV5PtuFnvCCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 22:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1294 (0x50e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154D26, serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724 Validity Not Before: Jan 24 22:54:21 2026 GMT Not After : Jan 31 22:54:21 2026 GMT Subject: CN=69754d9d-bedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cc:6d:9f:a4:8a:d8:d9:46:2a:5e:18:61:63: 75:f6:7d:90:7f:a4:36:eb:20:94:91:fc:7a:81:ef: 4d:da:17:2f:e7:8f:a8:f4:bf:3d:de:34:26:4e:b2: 6b:de:da:64:4d:c7:3f:4b:32:9a:a0:71:d4:49:83: bd:82:3c:05:d4:03:48:94:ce:a4:21:ba:ce:f7:ea: c1:2d:59:de:6a:b7:8f:b6:40:e9:9e:f9:a1:78:e5: a5:3f:91:97:64:25:3d:23:9b:e5:a4:15:b6:2d:54: a0:de:d5:d0:6e:bf:ca:c5:98:43:46:c4:cf:c1:fb: 0a:36:fa:6a:69:55:9a:c5:98:4b:62:dd:0c:23:73: c8:d2:8a:2c:63:a7:b2:7d:3c:fa:03:49:a7:ee:f1: 36:e1:d8:47:e4:54:96:00:c5:fd:be:b3:09:de:88: 98:62:87:27:09:3e:dd:0f:da:4e:b8:bc:c0:cd:17: 17:c1:d7:5d:bc:4b:6b:6b:5b:22:df:e0:57:f3:5c: 86:69:a6:f9:81:a1:c7:09:14:f1:c9:27:e1:21:ac: e7:e0:1a:a6:48:8b:37:b5:34:da:2c:cb:d4:a5:14: 33:d2:06:2c:87:80:52:99:f7:1e:30:bd:1d:53:3d: 67:43:99:3b:5a:52:98:9c:10:99:d0:49:a2:55:db: 57:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C4:34:93:3E:D3:4C:DA:38:89:85:FE:D9:AF:3D:D1:33:48:DD:88 X509v3 Authority Key Identifier: keyid:CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:84:af:f2:16:c8:42:a0:a1:04:63:30:e6:fd:39:ef:45:2a: c3:ce:a5:9d:52:89:94:fc:14:4b:44:e5:9b:a1:34:62:fa:1b: ab:6c:6b:33:fc:08:7d:39:84:68:b8:58:50:74:d5:f8:f4:39: be:33:f7:7d:f5:65:b3:e1:53:7f:23:b6:be:51:ad:0c:9c:6d: 25:a0:47:08:90:c7:74:be:9b:52:53:55:44:fe:fd:59:00:f6: 71:51:ac:1f:88:68:b8:4d:74:a5:58:70:3c:a2:37:dd:a9:8b: 34:77:4b:79:02:5b:2e:5a:11:c6:f1:82:a2:14:6c:90:17:71: 3c:25:19:19:9a:a3:96:7b:ce:ac:10:85:7f:33:56:53:58:5d: 85:f6:af:4f:62:d0:58:09:64:38:ee:25:03:a8:47:5f:78:18: 98:1d:53:4d:58:8d:b3:48:00:27:3c:1b:33:90:e7:92:db:07: 74:bc:32:90:eb:af:26:99:d5:bc:62:e4:4f:21:00:08:b3:25: 2c:3f:0e:3b:e9:45:9f:14:63:7a:7c:bb:2e:5f:1f:33:e8:c2: cb:81:ba:5a:15:6c:80:c2:4e:25:34:36:65:a0:3a:3f:f3:1d: ac:39:2c:ee:43:f8:8c:74:94:b2:e5:67:56:12:93:de:1a:9d: f9:de:5e:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTREMjYxMTAvBgNVBAUTKENEQTAzRjY1RjREMzNBMzM5OTY5OTczRjZBOUJEMDdE QUY5RTM3MjQwHhcNMjYwMTI0MjI1NDIxWhcNMjYwMTMxMjI1NDIxWjAYMRYwFAYD VQQDDA02OTc1NGQ5ZC1iZWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8xtn6SK2NlGKl4YYWN19n2Qf6Q26yCUkfx6ge9N2hcv54+o9L893jQmTrJr 3tpkTcc/SzKaoHHUSYO9gjwF1ANIlM6kIbrO9+rBLVnearePtkDpnvmheOWlP5GX ZCU9I5vlpBW2LVSg3tXQbr/KxZhDRsTPwfsKNvpqaVWaxZhLYt0MI3PI0oosY6ey fTz6A0mn7vE24dhH5FSWAMX9vrMJ3oiYYocnCT7dD9pOuLzAzRcXwdddvEtra1si 3+BX81yGaab5gaHHCRTxySfhIazn4BqmSIs3tTTaLMvUpRQz0gYsh4BSmfceML0d Uz1nQ5k7WlKYnBCZ0EmiVdtX+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzENJM+ 00zaOImF/tmvPdEzSN2IMB8GA1UdIwQYMBaAFM2gP2X00zozmWmXP2qb0H2vnjck MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEQyNi9DMDBEOTcyNjQx M0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9qT1phWmNfYXB2UWZhLWVO eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3phQV9aZlRUT2pPWmFaY19hcHZRZmEtZU55US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEQyNi9DMDBEOTcyNjQxM0IxMUVDQjA2QUUwMzBDNEY5QUUwMi96YUFfWmZUVE9q T1phWmNfYXB2UWZhLWVOeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9hK/yFshCoKEEYzDm/TnvRSrDzqWdUomU/BRLROWboTRi+hurbGsz /Ah9OYRouFhQdNX49Dm+M/d99WWz4VN/I7a+Ua0MnG0loEcIkMd0vptSU1VE/v1Z APZxUawfiGi4TXSlWHA8ojfdqYs0d0t5AlsuWhHG8YKiFGyQF3E8JRkZmqOWe86s EIV/M1ZTWF2F9q9PYtBYCWQ47iUDqEdfeBiYHVNNWI2zSAAnPBszkOeS2wd0vDKQ 668mmdW8YuRPIQAIsyUsPw476UWfFGN6fLsuXx8z6MLLgbpaFWyAwk4lNDZloDo/ 8x2sOSzuQ/iMdJSy5WdWEpPeGp353l5/ -----END CERTIFICATE-----Generated at Sun Jan 25 10:41:56 2026 by rpki-client