This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft File: zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft (raw, json) Hash identifier: nxfBDAihXXgUutS2dOc+zQy8OSqQqlZvNrr8yykU8qM= Subject key identifier: 4C:61:CD:98:C2:8C:05:D1:66:30:7F:4B:21:6C:06:90:66:A3:56:CD Authority key identifier: CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48 Certificate issuer: /CN=A91565C6/serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft Manifest number: AA Signing time: Fri 23 Jan 2026 05:18:15 +0000 Manifest this update: Fri 23 Jan 2026 05:18:15 +0000 Manifest next update: Fri 30 Jan 2026 05:18:15 +0000 Files and hashes: 1: zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl (hash: oTjJDZynoqxNWlSyPoAIdpHyEXoZepmm1mIHXyM760Y=) 2: 296C92D0F5B611EFB7E6426EC4F9AE02.roa (hash: DAG2avo3wM4Iv7tiFSCw0I7iwE7NYk5jbcu93twLDNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 05:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91565C6, serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848 Validity Not Before: Jan 23 05:18:15 2026 GMT Not After : Jan 30 05:18:15 2026 GMT Subject: CN=69730497-aa6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:13:b1:82:1a:12:22:e3:b9:b0:41:58:5f:91: 9a:6e:33:2e:fe:08:b9:a9:e6:6e:74:f0:19:a6:8f: 08:79:88:a2:d2:46:2f:f5:91:fb:c9:6b:68:9d:35: b1:51:88:d1:a7:d4:c8:d0:41:01:bd:09:1f:98:f0: 58:ed:25:67:e6:8c:59:cf:41:6b:ec:49:d4:05:c0: 86:46:10:a7:72:a5:67:7e:20:c0:8a:31:ac:50:ec: 28:63:20:88:40:da:5d:04:8a:85:79:13:dd:02:7b: a6:4a:04:fe:65:d2:d1:28:a9:52:d1:cd:2d:d1:ed: 5d:7d:6c:5a:8c:79:e3:14:cd:b8:3d:fa:5b:94:0a: a8:ad:a6:38:f2:a3:fc:dc:76:13:8d:d9:d5:41:f7: ba:f5:42:fb:cc:f2:38:d2:26:29:d6:0d:27:0b:be: 91:30:98:03:4e:31:40:c9:d1:d0:da:79:bc:d4:7e: 2c:8e:5b:1b:62:4e:a9:ac:5f:56:e4:0f:4a:8e:29: 52:dc:f7:22:2b:dd:7c:00:f3:e5:a9:97:98:89:16: c1:ca:b5:5d:5a:88:c7:02:0e:7c:8e:31:7c:3f:f0: 50:28:3d:7d:89:44:d5:92:73:08:a2:b5:1c:0d:6b: 00:1b:42:6a:fe:1d:3c:5f:8d:7b:bf:12:74:76:69: c6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:61:CD:98:C2:8C:05:D1:66:30:7F:4B:21:6C:06:90:66:A3:56:CD X509v3 Authority Key Identifier: keyid:CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:c5:8b:49:bb:38:bf:00:43:b6:de:c7:0d:80:36:70:ca:c0: 28:54:00:13:9b:ef:72:aa:40:cb:56:9d:3c:21:e1:a2:4b:0f: b5:fd:ac:c0:80:9b:0a:27:85:40:a0:b2:ce:05:6d:46:f9:d7: 95:d9:73:ff:68:e0:2d:46:bd:af:d8:59:e1:35:3e:6b:b8:fc: 8e:ff:c5:87:f0:a5:45:6d:9f:74:d2:c6:7d:58:9c:48:67:08: 8f:52:81:d8:ea:22:ce:27:9a:38:6e:50:e2:1b:50:5f:9b:0f: e2:21:4f:60:54:8e:94:ec:da:dc:8b:d7:7c:49:9f:bc:4f:93: 60:07:ff:03:be:ca:ec:41:57:42:ae:87:1d:e3:23:68:6f:85: 9a:e8:52:33:53:c0:ec:ac:06:1c:4f:70:8c:14:33:29:86:e3: 85:ae:88:05:76:37:af:cf:da:26:7e:b1:f0:c6:35:ab:22:68: c9:0a:88:3d:56:35:54:c4:5b:37:94:3c:0a:b6:ce:3b:b8:37: 9b:91:bb:dd:ff:17:7e:6c:67:eb:1e:cc:9e:31:18:1e:9f:17: 29:68:d5:0d:10:b4:8e:02:f4:10:f0:eb:20:be:66:ff:d0:ff: ac:0f:7d:d0:f9:5f:42:b3:d7:24:99:17:03:ad:5d:72:cd:8d: 66:4c:56:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY1QzYxMTAvBgNVBAUTKENENTM1QzdFQjMxQTQwQTNGREI4QUM0RDVENTc3QUY5 RDZDNTg4NDgwHhcNMjYwMTIzMDUxODE1WhcNMjYwMTMwMDUxODE1WjAYMRYwFAYD VQQDDA02OTczMDQ5Ny1hYTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBOxghoSIuO5sEFYX5GabjMu/gi5qeZudPAZpo8IeYii0kYv9ZH7yWtonTWx UYjRp9TI0EEBvQkfmPBY7SVn5oxZz0Fr7EnUBcCGRhCncqVnfiDAijGsUOwoYyCI QNpdBIqFeRPdAnumSgT+ZdLRKKlS0c0t0e1dfWxajHnjFM24PfpblAqoraY48qP8 3HYTjdnVQfe69UL7zPI40iYp1g0nC76RMJgDTjFAydHQ2nm81H4sjlsbYk6prF9W 5A9KjilS3PciK918APPlqZeYiRbByrVdWojHAg58jjF8P/BQKD19iUTVknMIorUc DWsAG0Jq/h08X417vxJ0dmnGFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExhzZjC jAXRZjB/SyFsBpBmo1bNMB8GA1UdIwQYMBaAFM1TXH6zGkCj/bisTV1XevnWxYhI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjVDNi9EMjY1QjBDNkY0 MUYxMUVGODE3MDg4NjhDNEY5QUUwMi96Vk5jZnJNYVFLUDl1S3hOWFZkNi1kYkZp RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pWTmNmck1hUUtQOXVLeE5YVmQ2LWRiRmlFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjVDNi9EMjY1QjBDNkY0MUYxMUVGODE3MDg4NjhDNEY5QUUwMi96Vk5jZnJNYVFL UDl1S3hOWFZkNi1kYkZpRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxxYtJuzi/AEO23scNgDZwysAoVAATm+9yqkDLVp08IeGiSw+1/azA gJsKJ4VAoLLOBW1G+deV2XP/aOAtRr2v2FnhNT5ruPyO/8WH8KVFbZ900sZ9WJxI ZwiPUoHY6iLOJ5o4blDiG1Bfmw/iIU9gVI6U7Nrci9d8SZ+8T5NgB/8DvsrsQVdC rocd4yNob4Wa6FIzU8DsrAYcT3CMFDMphuOFrogFdjevz9omfrHwxjWrImjJCog9 VjVUxFs3lDwKts47uDebkbvd/xd+bGfrHsyeMRgenxcpaNUNELSOAvQQ8Osgvmb/ 0P+sD33Q+V9Cs9ckmRcDrV1yzY1mTFZJ -----END CERTIFICATE-----Generated at Sun Jan 25 04:33:51 2026 by rpki-client