This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft File: zcBVaYflG5M72WLX70WXHLqnosM.mft (raw, json) Hash identifier: FPfAyuv6+PIqBk1R1rKPVunpEAeTrSS7Rq2+jrpvUgM= Subject key identifier: DD:58:E9:3B:5F:4E:1C:02:F4:91:49:13:44:C9:01:10:11:2C:FB:1C Authority key identifier: CD:C0:55:69:87:E5:1B:93:3B:D9:62:D7:EF:45:97:1C:BA:A7:A2:C3 Certificate issuer: /CN=A917D31E/serialNumber=CDC0556987E51B933BD962D7EF45971CBAA7A2C3 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft Manifest number: 31 Signing time: Sun 25 Jan 2026 06:40:20 +0000 Manifest this update: Sun 25 Jan 2026 06:40:20 +0000 Manifest next update: Sun 01 Feb 2026 06:40:20 +0000 Files and hashes: 1: zcBVaYflG5M72WLX70WXHLqnosM.crl (hash: 3APoT4UnPhmCIR7Hzycgdi2m7H6bGIlNXZZU30jpOF0=) 2: 53D97C4AB6E011F0AE8E6B74C4F9AE02.roa (hash: j7M2O1V+RrKQdnIH5Bls93wKqEvC91BJ6Igtkvui/5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.crl rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D31E, serialNumber=CDC0556987E51B933BD962D7EF45971CBAA7A2C3 Validity Not Before: Jan 25 06:40:20 2026 GMT Not After : Feb 1 06:40:20 2026 GMT Subject: CN=6975bad4-f9fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:18:a0:a0:ca:b5:36:b3:8c:c7:9c:7a:e1:e9: c6:ca:e9:af:f2:e3:8f:ee:fc:41:ff:3a:17:48:c2: 01:9f:34:82:76:91:61:0d:bd:58:93:f6:af:68:a5: cd:91:4c:b1:16:36:a3:36:38:b5:09:a6:ab:db:37: 7b:84:57:9e:2d:6b:da:2c:5f:9f:16:96:cc:d9:b8: 8a:68:23:e7:21:5b:4b:cc:f2:08:d6:22:c1:b1:52: 62:39:5d:76:e1:91:25:b9:52:3d:c8:b0:17:cd:4f: 78:96:a9:9b:bb:75:b9:f7:30:5f:fd:7d:3c:1f:ab: 2e:10:ae:68:1d:fb:31:64:55:20:a4:e0:e4:70:d7: e4:1f:b6:9a:a6:9d:06:db:ac:64:73:51:a6:e9:e0: 78:01:95:5b:f8:1b:67:fd:81:ad:55:27:c0:1d:50: 77:0d:9f:f8:ec:65:8a:c1:6b:64:6f:5c:17:1e:5e: 05:3e:4a:7b:11:f4:e7:1b:d9:f9:a0:8a:11:10:83: 9f:77:e5:8b:a9:6c:4f:a2:72:9a:56:8c:48:ba:8e: 31:48:32:16:04:8b:6d:a2:64:16:2a:84:84:1e:c3: b4:f6:b9:1a:d6:70:e0:41:db:9c:06:59:c2:2f:f3: 39:9f:ed:f8:39:51:ef:4f:05:0d:d1:31:d5:fb:7c: b7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:58:E9:3B:5F:4E:1C:02:F4:91:49:13:44:C9:01:10:11:2C:FB:1C X509v3 Authority Key Identifier: keyid:CD:C0:55:69:87:E5:1B:93:3B:D9:62:D7:EF:45:97:1C:BA:A7:A2:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:71:66:0b:36:21:e4:8d:f9:5d:d4:41:9a:e2:68:ba:22:b0: 50:b2:f6:f9:9e:bb:fb:7b:55:14:c0:f8:92:04:18:3e:cb:8a: fa:11:dc:66:de:16:25:4a:05:6c:43:1e:be:4e:a3:33:98:74: 4f:1c:6b:7a:5c:ca:41:75:94:a6:3c:59:bc:a5:fa:df:e5:12: 71:f5:9e:d0:35:30:b9:b2:00:83:e6:57:28:af:7e:24:5b:a3: d8:01:c5:27:27:eb:5c:75:ed:29:dc:64:ac:84:54:bf:d5:ad: ce:54:40:31:3c:43:7e:bb:4a:0e:c3:7c:8c:58:0c:5a:fb:16: 63:73:52:91:1b:ec:c7:02:ba:03:9c:b5:ee:ce:2e:6b:51:17: a8:9b:b1:b7:06:56:9d:89:f0:1a:55:48:5d:40:0d:c6:fd:27: fc:04:17:f6:68:9a:48:a0:48:9e:bf:dc:2d:fd:af:4d:b4:6a: a6:72:25:bb:e7:47:e0:97:94:7e:4b:f9:a4:24:71:b3:45:b4: 22:ec:fa:2c:b6:82:31:ca:d0:e8:16:fa:72:26:14:72:6c:8e: cc:bc:30:ac:fc:a9:4e:1b:83:ed:f0:b1:30:29:30:a6:75:03: d8:9a:24:ad:7d:b8:78:0c:d1:2e:e5:42:71:24:09:0f:85:45: 13:ae:20:15 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDMxRTExMC8GA1UEBRMoQ0RDMDU1Njk4N0U1MUI5MzNCRDk2MkQ3RUY0NTk3MUNC QUE3QTJDMzAeFw0yNjAxMjUwNjQwMjBaFw0yNjAyMDEwNjQwMjBaMBgxFjAUBgNV BAMMDTY5NzViYWQ0LWY5ZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjGKCgyrU2s4zHnHrh6cbK6a/y44/u/EH/OhdIwgGfNIJ2kWENvViT9q9opc2R TLEWNqM2OLUJpqvbN3uEV54ta9osX58WlszZuIpoI+chW0vM8gjWIsGxUmI5XXbh kSW5Uj3IsBfNT3iWqZu7dbn3MF/9fTwfqy4Qrmgd+zFkVSCk4ORw1+QftpqmnQbb rGRzUabp4HgBlVv4G2f9ga1VJ8AdUHcNn/jsZYrBa2RvXBceXgU+SnsR9Ocb2fmg ihEQg5935YupbE+icppWjEi6jjFIMhYEi22iZBYqhIQew7T2uRrWcOBB25wGWcIv 8zmf7fg5Ue9PBQ3RMdX7fLfZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3VjpO19O HAL0kUkTRMkBEBEs+xwwHwYDVR0jBBgwFoAUzcBVaYflG5M72WLX70WXHLqnosMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEMzFFLzRBM0REMUIyQjRC QjExRjBBMTM1MzcyMkM0RjlBRTAyL3pjQlZhWWZsRzVNNzJXTFg3MFdYSExxbm9z TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvemNCVmFZZmxHNU03MldMWDcwV1hITHFub3NNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE MzFFLzRBM0REMUIyQjRCQjExRjBBMTM1MzcyMkM0RjlBRTAyL3pjQlZhWWZsRzVN NzJXTFg3MFdYSExxbm9zTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGFxZgs2IeSN+V3UQZriaLoisFCy9vmeu/t7VRTA+JIEGD7LivoR3Gbe FiVKBWxDHr5OozOYdE8ca3pcykF1lKY8Wbyl+t/lEnH1ntA1MLmyAIPmVyivfiRb o9gBxScn61x17SncZKyEVL/Vrc5UQDE8Q367Sg7DfIxYDFr7FmNzUpEb7McCugOc te7OLmtRF6ibsbcGVp2J8BpVSF1ADcb9J/wEF/ZomkigSJ6/3C39r020aqZyJbvn R+CXlH5L+aQkcbNFtCLs+iy2gjHK0OgW+nImFHJsjsy8MKz8qU4bg+3wsTApMKZ1 A9iaJK19uHgM0S7lQnEkCQ+FRROuIBU= -----END CERTIFICATE-----Generated at Sun Jan 25 12:41:20 2026 by rpki-client