This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft File: zEJAcHQQNjc16_bvsZT7Zw80X0I.mft (raw, json) Hash identifier: NWjDZcGdKsTJJLlvgRh4dZ2gN947Udc8rIV+MKKSQCE= Subject key identifier: DA:FD:B0:77:19:FF:D3:5F:BA:D3:12:F2:9A:56:FA:D9:5C:7D:32:A4 Authority key identifier: CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42 Certificate issuer: /CN=A9160AEE/serialNumber=CC4240707410363735EBF6EFB194FB670F345F42 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft Manifest number: 42 Signing time: Sun 25 Jan 2026 06:32:56 +0000 Manifest this update: Sun 25 Jan 2026 06:32:56 +0000 Manifest next update: Sun 01 Feb 2026 06:32:56 +0000 Files and hashes: 1: zEJAcHQQNjc16_bvsZT7Zw80X0I.crl (hash: 97SN/32q6wFyiQAH9PxiA54nRv6Ea7ImaRr6kmbDRsE=) 2: 2159B7B8A41F11F087C1F02CC4F9AE02.roa (hash: o9+trdGZs9g/j9AiQD7kTRhw8blN1x7JWncUYHM5y3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160AEE, serialNumber=CC4240707410363735EBF6EFB194FB670F345F42 Validity Not Before: Jan 25 06:32:56 2026 GMT Not After : Feb 1 06:32:56 2026 GMT Subject: CN=6975b918-b5bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e5:83:68:ca:37:9d:e6:62:0f:59:51:2c:ba: 43:24:0f:35:2d:34:b5:92:0d:54:c3:e2:6c:6a:63: aa:7a:0a:eb:bd:0c:4e:f2:4b:0e:f9:dc:72:1d:53: 01:0c:4c:9d:24:09:28:be:03:d3:da:b1:97:1d:65: 7d:65:69:3f:01:59:61:6a:d0:c0:4e:a4:a8:ec:2c: 60:83:3d:40:07:f6:31:41:88:e8:94:c1:34:66:4f: 28:aa:e8:f4:2c:29:bf:0d:9c:bc:66:61:63:c8:03: 30:54:dc:5f:ff:6a:a5:32:78:07:97:b6:17:ea:92: a0:4b:22:b7:36:6e:da:69:0c:de:8b:23:1f:d8:f2: ef:7b:c6:8e:5a:31:28:aa:59:bc:85:6a:22:31:58: 10:e4:f3:8b:be:7f:fd:00:7b:f1:d3:87:a6:04:cf: 87:52:11:a7:2a:f4:96:85:11:32:2f:88:3f:01:34: 4b:c1:6d:c1:46:ee:da:eb:66:f4:e3:1b:ed:29:d1: db:7f:da:d1:b4:88:c8:3b:07:9b:a4:44:39:3f:f8: 0c:19:18:8e:5f:6b:37:92:dd:2d:dd:84:cc:86:ec: 76:62:4d:e9:d5:d8:dd:f6:8c:96:75:96:26:4e:b7: 60:c4:cf:e8:49:f1:1b:65:91:43:ce:46:7a:04:e9: 6e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:FD:B0:77:19:FF:D3:5F:BA:D3:12:F2:9A:56:FA:D9:5C:7D:32:A4 X509v3 Authority Key Identifier: keyid:CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:a8:e3:1d:cd:ae:b3:3f:0f:9e:6e:ff:ae:4d:83:5a:ce:cc: 16:3b:92:05:10:a0:a0:eb:32:14:8e:2b:c0:ca:57:a7:69:5c: 28:6f:ef:c9:fb:16:fa:ee:17:42:b1:43:65:dc:38:78:20:e9: 26:21:5b:a8:26:d7:c6:00:8a:61:7a:95:45:2c:a4:05:a1:25: 63:ec:d6:f2:62:4d:9a:85:db:25:e4:ff:1e:e8:39:fb:06:ab: a5:ed:ac:82:7d:89:5b:d0:50:5e:17:e1:12:67:7f:26:e7:df: 8c:b5:b4:34:a1:3f:fc:f4:f8:91:5f:4e:fc:65:f4:78:12:36: f3:21:97:2d:4f:a4:d1:5e:53:94:7a:5f:e8:1e:91:4c:c7:d0: e0:d0:89:dc:e1:5e:6a:d6:1d:c7:14:70:25:ac:0b:07:c3:00: 10:67:2b:b3:2f:b3:05:2c:32:76:4a:96:c3:5a:22:c6:bd:8e: 37:e7:2d:98:37:be:33:85:56:fe:2a:b8:d6:aa:91:cb:d6:2f: 45:05:63:c2:c5:f1:4e:0f:a4:6a:4f:fc:9d:37:33:f9:7f:a7: 0f:31:25:9c:d6:24:1d:e3:01:65:3b:1b:8e:fb:0c:8e:86:b3: c6:13:e7:06:f9:d8:33:60:a2:7d:ff:98:77:14:da:6c:8b:d8: 3b:f1:9f:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEFFRTExMC8GA1UEBRMoQ0M0MjQwNzA3NDEwMzYzNzM1RUJGNkVGQjE5NEZCNjcw RjM0NUY0MjAeFw0yNjAxMjUwNjMyNTZaFw0yNjAyMDEwNjMyNTZaMBgxFjAUBgNV BAMMDTY5NzViOTE4LWI1YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH5YNoyjed5mIPWVEsukMkDzUtNLWSDVTD4mxqY6p6Cuu9DE7ySw753HIdUwEM TJ0kCSi+A9PasZcdZX1laT8BWWFq0MBOpKjsLGCDPUAH9jFBiOiUwTRmTyiq6PQs Kb8NnLxmYWPIAzBU3F//aqUyeAeXthfqkqBLIrc2btppDN6LIx/Y8u97xo5aMSiq WbyFaiIxWBDk84u+f/0Ae/HTh6YEz4dSEacq9JaFETIviD8BNEvBbcFG7trrZvTj G+0p0dt/2tG0iMg7B5ukRDk/+AwZGI5fazeS3S3dhMyG7HZiTenV2N32jJZ1liZO t2DEz+hJ8RtlkUPORnoE6W5fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2v2wdxn/ 01+60xLymlb62Vx9MqQwHwYDVR0jBBgwFoAUzEJAcHQQNjc16/bvsZT7Zw80X0Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQUVFLzE4OENBRjA2QTNF QzExRjBCOEU5N0YzN0M0RjlBRTAyL3pFSkFjSFFRTmpjMTZfYnZzWlQ3Wnc4MFgw SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvekVKQWNIUVFOamMxNl9idnNaVDdadzgwWDBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw QUVFLzE4OENBRjA2QTNFQzExRjBCOEU5N0YzN0M0RjlBRTAyL3pFSkFjSFFRTmpj MTZfYnZzWlQ3Wnc4MFgwSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFCo4x3NrrM/D55u/65Ng1rOzBY7kgUQoKDrMhSOK8DKV6dpXChv78n7 FvruF0KxQ2XcOHgg6SYhW6gm18YAimF6lUUspAWhJWPs1vJiTZqF2yXk/x7oOfsG q6XtrIJ9iVvQUF4X4RJnfybn34y1tDShP/z0+JFfTvxl9HgSNvMhly1PpNFeU5R6 X+gekUzH0ODQidzhXmrWHccUcCWsCwfDABBnK7MvswUsMnZKlsNaIsa9jjfnLZg3 vjOFVv4quNaqkcvWL0UFY8LF8U4PpGpP/J03M/l/pw8xJZzWJB3jAWU7G477DI6G s8YT5wb52DNgon3/mHcU2myL2Dvxn4M= -----END CERTIFICATE-----Generated at Mon Jan 26 04:01:02 2026 by rpki-client