This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft File: ZU4CASXBt1B4JvBf3akktSh0CPk.mft (raw, json) Hash identifier: UDx1Oq7KTPc5ggwn6lcqmuIEEZ5ahxusKblLkmUTP84= Subject key identifier: 90:C1:DB:0A:E3:F5:AB:E8:F5:CA:24:5E:C3:3C:BE:74:53:B4:C7:70 Authority key identifier: 65:4E:02:01:25:C1:B7:50:78:26:F0:5F:DD:A9:24:B5:28:74:08:F9 Certificate issuer: /CN=A91C002D/serialNumber=654E020125C1B7507826F05FDDA924B5287408F9 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft Manifest number: 33 Signing time: Fri 23 Jan 2026 06:34:21 +0000 Manifest this update: Fri 23 Jan 2026 06:34:21 +0000 Manifest next update: Fri 30 Jan 2026 06:34:21 +0000 Files and hashes: 1: ZU4CASXBt1B4JvBf3akktSh0CPk.crl (hash: zpNJfOwb4czfw1lLe3kzzg1pNdNoCtgnqaXaK66YHE0=) 2: 0235D930AE5011F0927AE62BC4F9AE02.roa (hash: 5k0XibRJRAi1MAo51wXtFTLJ6nvUXfkdSDCq/B/6+Qs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.crl rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C002D, serialNumber=654E020125C1B7507826F05FDDA924B5287408F9 Validity Not Before: Jan 23 06:34:21 2026 GMT Not After : Jan 30 06:34:21 2026 GMT Subject: CN=6973166d-99aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4e:02:10:06:20:9a:7a:02:f7:43:4d:d5:8d: 57:3c:59:12:19:ea:bd:89:f0:ba:d0:c1:38:28:a3: 2d:da:d5:0f:b7:49:f0:68:f4:7b:78:1e:ff:5e:16: d5:b6:d9:e8:83:34:36:e5:7b:1a:62:6a:cb:a6:3e: 3d:59:26:df:c3:a0:02:b1:0d:38:c9:77:74:25:1d: a6:f9:e5:26:6d:e5:49:0c:5e:e3:52:58:f2:b2:89: ea:9c:68:87:e9:2b:e5:7d:ac:25:50:c3:4b:e0:c6: bc:32:d8:c7:ae:95:63:96:30:36:27:0b:de:4c:3f: 41:08:12:1b:42:10:7e:f1:6b:ca:dd:16:07:00:1b: 0e:75:1c:26:ec:a8:26:91:50:67:ef:90:e9:9f:2f: a3:a7:84:92:36:00:4c:1b:5a:da:00:8d:f0:08:d9: 3c:d0:bc:b9:93:d0:ca:3c:af:37:32:6e:70:14:ce: a6:77:3e:e9:b5:29:28:b7:b4:ec:96:81:3a:d3:f3: 99:03:40:c7:aa:d1:92:fe:17:1e:05:c2:3c:bd:17: 32:cf:58:df:65:d4:2c:4f:7f:91:d1:df:b2:9d:da: 15:92:cd:9b:d3:a8:0e:a0:bb:bc:7a:7f:59:ab:4c: 44:ea:af:d8:e5:51:a5:99:fd:d9:b2:8c:b0:1c:05: 05:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C1:DB:0A:E3:F5:AB:E8:F5:CA:24:5E:C3:3C:BE:74:53:B4:C7:70 X509v3 Authority Key Identifier: keyid:65:4E:02:01:25:C1:B7:50:78:26:F0:5F:DD:A9:24:B5:28:74:08:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZU4CASXBt1B4JvBf3akktSh0CPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C002D/149D5B52ADA611F09C4F6B4FC4F9AE02/ZU4CASXBt1B4JvBf3akktSh0CPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:00:45:54:d5:7a:d1:3f:f1:ae:e3:76:13:0a:92:72:bb:19: c0:ed:be:1b:52:1c:c3:bc:17:27:19:54:9d:f3:59:d6:28:ab: 94:93:a5:0e:a2:60:9f:80:75:93:92:e0:7a:34:76:7a:58:31: fa:54:7b:d9:db:72:a6:ec:da:a6:66:ce:0e:85:99:f3:2c:e4: f6:55:27:0c:83:e1:75:55:bd:e8:96:b9:e5:43:8d:a8:53:d2: 0f:be:9f:1f:c5:ee:3a:f4:59:c1:1f:15:02:6a:43:b5:37:1c: 5c:7a:76:42:c2:ce:93:33:72:98:4d:58:51:50:ff:f4:1d:7a: c5:e8:07:da:58:b3:72:a0:18:4a:d1:42:6f:3e:b9:4c:68:b4: 1a:56:f4:be:7c:c5:9b:76:a1:fb:bf:fc:48:26:3d:15:c4:16: 80:82:ea:2c:4a:2d:74:8f:40:2b:6f:f2:60:61:dc:33:5b:cd: 41:ad:7b:55:15:2a:69:97:81:f9:cd:83:90:b0:a4:cd:5f:2a: e8:09:0c:83:21:89:0d:9a:e6:cb:28:19:d4:d3:70:09:4c:b6: 34:c5:a0:5b:7c:dc:2d:65:92:94:b2:f8:d5:7b:4d:0b:06:37: c8:01:93:29:ff:63:db:24:6f:71:48:82:2f:8c:59:0f:42:36: 1b:99:da:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDAyRDExMC8GA1UEBRMoNjU0RTAyMDEyNUMxQjc1MDc4MjZGMDVGRERBOTI0QjUy ODc0MDhGOTAeFw0yNjAxMjMwNjM0MjFaFw0yNjAxMzAwNjM0MjFaMBgxFjAUBgNV BAMMDTY5NzMxNjZkLTk5YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyTgIQBiCaegL3Q03VjVc8WRIZ6r2J8LrQwTgooy3a1Q+3SfBo9Ht4Hv9eFtW2 2eiDNDblexpiasumPj1ZJt/DoAKxDTjJd3QlHab55SZt5UkMXuNSWPKyieqcaIfp K+V9rCVQw0vgxrwy2MeulWOWMDYnC95MP0EIEhtCEH7xa8rdFgcAGw51HCbsqCaR UGfvkOmfL6OnhJI2AEwbWtoAjfAI2TzQvLmT0Mo8rzcybnAUzqZ3Pum1KSi3tOyW gTrT85kDQMeq0ZL+Fx4Fwjy9FzLPWN9l1CxPf5HR37Kd2hWSzZvTqA6gu7x6f1mr TETqr9jlUaWZ/dmyjLAcBQWBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkMHbCuP1 q+j1yiRewzy+dFO0x3AwHwYDVR0jBBgwFoAUZU4CASXBt1B4JvBf3akktSh0CPkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwMDJELzE0OUQ1QjUyQURB NjExRjA5QzRGNkI0RkM0RjlBRTAyL1pVNENBU1hCdDFCNEp2QmYzYWtrdFNoMENQ ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlU0Q0FTWEJ0MUI0SnZCZjNha2t0U2gwQ1BrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw MDJELzE0OUQ1QjUyQURBNjExRjA5QzRGNkI0RkM0RjlBRTAyL1pVNENBU1hCdDFC NEp2QmYzYWtrdFNoMENQay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD0ARVTVetE/8a7jdhMKknK7GcDtvhtSHMO8FycZVJ3zWdYoq5STpQ6i YJ+AdZOS4Ho0dnpYMfpUe9nbcqbs2qZmzg6FmfMs5PZVJwyD4XVVveiWueVDjahT 0g++nx/F7jr0WcEfFQJqQ7U3HFx6dkLCzpMzcphNWFFQ//QdesXoB9pYs3KgGErR Qm8+uUxotBpW9L58xZt2ofu//EgmPRXEFoCC6ixKLXSPQCtv8mBh3DNbzUGte1UV KmmXgfnNg5CwpM1fKugJDIMhiQ2a5ssoGdTTcAlMtjTFoFt83C1lkpSy+NV7TQsG N8gBkyn/Y9skb3FIgi+MWQ9CNhuZ2vs= -----END CERTIFICATE-----Generated at Sun Jan 25 09:22:24 2026 by rpki-client