This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft File: zyFayRHKpSBlx-xKx5V4NTgr4-0.mft (raw, json) Hash identifier: xk1GkqO7PC4M2p7CMcSPUK8+YcIjPTqnSqO7OS58TNM= Subject key identifier: 51:F8:DB:0C:A3:05:BA:9D:E5:BD:0F:87:53:80:E1:65:1F:1B:8B:36 Authority key identifier: CF:21:5A:C9:11:CA:A5:20:65:C7:EC:4A:C7:95:78:35:38:2B:E3:ED Certificate issuer: /CN=A91BF2DB/serialNumber=CF215AC911CAA52065C7EC4AC7957835382BE3ED Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft Manifest number: 28 Signing time: Sun 25 Jan 2026 06:46:16 +0000 Manifest this update: Sun 25 Jan 2026 06:46:15 +0000 Manifest next update: Sun 01 Feb 2026 06:46:15 +0000 Files and hashes: 1: zyFayRHKpSBlx-xKx5V4NTgr4-0.crl (hash: VZiwhls4lk6nLKcUKZ81KR27OhV//oMQ/zGr3cH7F+I=) 2: FD88540EF5E311F0AB8204204D6F56BC.roa (hash: 9afs8tNluN+honO+1NuyXqJsKe1j49dlf661XCnaIf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.crl rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF2DB, serialNumber=CF215AC911CAA52065C7EC4AC7957835382BE3ED Validity Not Before: Jan 25 06:46:15 2026 GMT Not After : Feb 1 06:46:15 2026 GMT Subject: CN=6975bc38-8995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0e:43:b1:30:30:0c:82:81:45:d0:04:d5:37: 26:7d:cb:5c:bf:00:78:db:16:a8:ee:b3:8b:c0:5a: e2:b6:ea:39:83:ac:fe:78:87:0a:dc:8c:5b:a5:f1: e5:d8:76:45:28:73:90:5b:d8:1c:ec:5c:27:b8:f1: 11:2c:fd:c4:f3:25:1f:42:76:96:49:5b:9a:dd:4b: 3a:63:6a:7a:1d:8f:8e:a4:cd:3b:4f:e6:4f:58:8e: ed:46:ae:30:8a:2a:60:e7:af:54:8c:2e:5b:ec:60: f2:94:34:ce:2b:fc:00:a1:f3:68:bf:74:41:de:a6: 37:a8:44:1d:79:b4:17:a1:47:d6:db:1d:79:23:73: 3b:0f:d7:04:3a:88:23:2b:5a:40:7d:74:f6:7b:41: b5:ad:5d:5c:03:93:7c:e3:15:59:f2:d7:a4:24:66: 74:14:9c:59:23:b8:27:04:53:c0:89:9c:4c:31:f0: e5:ff:6f:f1:fa:64:7b:40:ef:f3:cc:7f:3e:44:e2: fa:4b:3e:4b:eb:1d:5d:c3:ae:9d:f7:11:a1:c5:4f: 93:fc:3d:a3:74:e9:c7:b8:8f:b4:d3:59:9f:f2:12: 10:55:60:40:e4:11:59:2f:fa:20:49:71:ff:61:70: bd:ac:80:69:97:99:39:3a:5b:e2:8c:17:8c:6a:91: 72:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F8:DB:0C:A3:05:BA:9D:E5:BD:0F:87:53:80:E1:65:1F:1B:8B:36 X509v3 Authority Key Identifier: keyid:CF:21:5A:C9:11:CA:A5:20:65:C7:EC:4A:C7:95:78:35:38:2B:E3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zyFayRHKpSBlx-xKx5V4NTgr4-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2DB/0CA77FD6C43511F08138F07DC4F9AE02/zyFayRHKpSBlx-xKx5V4NTgr4-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:11:11:e7:5e:da:3d:e9:5a:f2:6e:5a:b7:c5:e3:1a:a1:cf: 09:85:61:34:17:6c:b5:87:20:31:0a:8d:97:9c:c4:01:ff:a1: e0:d4:1b:10:2a:da:54:6f:a7:e7:3a:7f:47:fb:74:a9:53:c6: 30:ee:6e:73:8b:d5:6f:ea:fa:e7:59:94:85:ea:9e:a3:99:dd: 92:4f:3a:ce:f3:54:45:73:ee:c5:d6:cc:2f:34:67:29:15:e6: bb:c8:95:ed:49:3c:df:9d:cd:f0:05:1c:82:9a:89:6c:ed:f0: 46:69:59:08:7e:77:be:9a:2b:eb:a0:31:8c:5f:ee:8b:16:c4: 86:65:fe:e0:f3:12:7d:f6:3f:d1:bd:6a:0e:b5:c6:a3:4b:5f: 31:79:c5:26:e9:db:10:bb:09:f5:2e:c8:b2:55:6a:74:70:8f: d1:93:68:84:04:c5:76:fe:fe:f6:29:20:b5:c0:e7:03:fd:55: 45:63:73:c8:d2:34:14:f2:1c:cd:f3:73:a5:27:68:bc:10:d1: 93:b7:c7:a6:35:19:eb:d5:07:0c:73:de:ee:66:57:4b:ba:a7: 1c:98:1a:dc:fa:2f:14:32:fe:b7:ef:6a:d3:d5:79:69:be:41: 35:00:0c:c2:04:df:d9:8d:9e:f4:48:31:14:7d:59:43:7c:95: 45:a2:90:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RjJEQjExMC8GA1UEBRMoQ0YyMTVBQzkxMUNBQTUyMDY1QzdFQzRBQzc5NTc4MzUz ODJCRTNFRDAeFw0yNjAxMjUwNjQ2MTVaFw0yNjAyMDEwNjQ2MTVaMBgxFjAUBgNV BAMMDTY5NzViYzM4LTg5OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6DkOxMDAMgoFF0ATVNyZ9y1y/AHjbFqjus4vAWuK26jmDrP54hwrcjFul8eXY dkUoc5Bb2BzsXCe48REs/cTzJR9CdpZJW5rdSzpjanodj46kzTtP5k9Yju1GrjCK KmDnr1SMLlvsYPKUNM4r/ACh82i/dEHepjeoRB15tBehR9bbHXkjczsP1wQ6iCMr WkB9dPZ7QbWtXVwDk3zjFVny16QkZnQUnFkjuCcEU8CJnEwx8OX/b/H6ZHtA7/PM fz5E4vpLPkvrHV3Drp33EaHFT5P8PaN06ce4j7TTWZ/yEhBVYEDkEVkv+iBJcf9h cL2sgGmXmTk6W+KMF4xqkXJBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUfjbDKMF up3lvQ+HU4DhZR8bizYwHwYDVR0jBBgwFoAUzyFayRHKpSBlx+xKx5V4NTgr4+0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGMkRCLzBDQTc3RkQ2QzQz NTExRjA4MTM4RjA3REM0RjlBRTAyL3p5RmF5UkhLcFNCbHgteEt4NVY0TlRncjQt MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvenlGYXlSSEtwU0JseC14S3g1VjROVGdyNC0wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG MkRCLzBDQTc3RkQ2QzQzNTExRjA4MTM4RjA3REM0RjlBRTAyL3p5RmF5UkhLcFNC bHgteEt4NVY0TlRncjQtMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGoREede2j3pWvJuWrfF4xqhzwmFYTQXbLWHIDEKjZecxAH/oeDUGxAq 2lRvp+c6f0f7dKlTxjDubnOL1W/q+udZlIXqnqOZ3ZJPOs7zVEVz7sXWzC80ZykV 5rvIle1JPN+dzfAFHIKaiWzt8EZpWQh+d76aK+ugMYxf7osWxIZl/uDzEn32P9G9 ag61xqNLXzF5xSbp2xC7CfUuyLJVanRwj9GTaIQExXb+/vYpILXA5wP9VUVjc8jS NBTyHM3zc6UnaLwQ0ZO3x6Y1GevVBwxz3u5mV0u6pxyYGtz6LxQy/rfvatPVeWm+ QTUADMIE39mNnvRIMRR9WUN8lUWikK4= -----END CERTIFICATE-----Generated at Sun Jan 25 10:36:01 2026 by rpki-client