This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft File: zIO7bQqhd53qFp7bpKQCKN4hvXs.mft (raw, json) Hash identifier: F489t9bK6OTyFWmzXBf+VkIUWgssKEj+STzf922qRus= Subject key identifier: 38:3A:4D:BC:AB:87:3B:B2:80:DB:2D:3E:B7:8A:0D:2C:6E:F3:0D:19 Authority key identifier: CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B Certificate issuer: /CN=A91D493B/serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B Certificate serial: 03A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft Manifest number: 039D Signing time: Sat 24 Jan 2026 23:56:04 +0000 Manifest this update: Sat 24 Jan 2026 23:56:03 +0000 Manifest next update: Sat 31 Jan 2026 23:56:03 +0000 Files and hashes: 1: zIO7bQqhd53qFp7bpKQCKN4hvXs.crl (hash: mTY5GqMiNCOBF4EvCNd2OfZehP2/C/QWsoboz71bRkw=) 2: 684DDD32CAB311ECBBCE9843C4F9AE02.roa (hash: qH/kmALWQxd9w+o7ml/PHWheO95UYxgo26aceJX0/p4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:56:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 930 (0x3a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D493B, serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B Validity Not Before: Jan 24 23:56:03 2026 GMT Not After : Jan 31 23:56:03 2026 GMT Subject: CN=69755c14-5d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:eb:18:37:da:82:fc:dd:b7:78:e5:f0:4c:45: 8e:39:b1:d2:96:38:e3:85:5d:1e:2c:66:94:10:86: 2b:5a:aa:34:b9:a3:0c:e5:66:06:ea:9c:f5:93:65: 4e:77:6e:be:b4:11:3c:d7:f6:f0:16:4c:df:f3:49: ab:37:e7:a6:1b:ff:5a:cd:b1:61:8e:a6:80:b9:9c: be:40:49:ce:d4:5a:67:32:a5:59:d3:38:57:7b:d2: e0:69:58:d9:84:54:82:0a:5c:88:fd:62:b7:d1:f9: 5c:53:ac:ba:7c:47:e6:a8:21:e9:68:cd:d9:41:86: a4:20:03:5a:59:2e:64:59:d5:95:ca:04:2e:ed:76: c3:6b:37:19:3a:83:60:cc:f7:a6:5a:8d:15:e5:66: ec:ae:9f:1e:ab:4e:d7:fc:45:57:e7:69:50:40:1e: 51:61:d6:2e:de:5f:78:65:0f:c2:5d:60:3f:c5:39: 5f:40:3a:3b:d9:39:13:6f:ab:f7:b4:8b:64:cf:f9: f1:22:2b:4d:88:9b:54:98:d7:e2:aa:a9:80:72:38: 5e:83:db:ed:d2:ef:28:53:e0:7e:04:c5:88:ea:f3: 49:47:ff:d0:fb:8a:3c:8b:34:a4:77:12:31:ae:4b: 0f:7b:4b:f3:43:69:a2:63:48:77:19:c6:d3:41:72: b5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3A:4D:BC:AB:87:3B:B2:80:DB:2D:3E:B7:8A:0D:2C:6E:F3:0D:19 X509v3 Authority Key Identifier: keyid:CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:72:b7:86:d6:a1:c5:44:02:ea:2b:6b:81:25:c0:4e:1f:24: dd:e7:26:06:0d:db:8a:57:69:ab:01:7d:f7:05:8f:0c:89:9e: d4:f8:53:0d:68:ce:e3:3c:8a:f3:14:8e:a0:ca:c5:43:0d:3a: 75:cb:58:1c:70:95:7e:78:8f:86:bd:62:f6:35:22:6b:38:5b: ba:8e:8d:b0:e3:93:52:f6:f7:4e:17:2b:7c:14:3b:f7:8f:2e: 06:0c:b1:d0:f9:af:98:75:56:18:1e:09:90:85:c0:fc:88:b5: d3:1c:74:6a:a7:dd:30:61:89:98:5a:fc:e9:1f:be:e8:a5:8a: 40:ac:18:63:c7:42:fc:e3:2b:93:ff:fc:cf:f1:cf:2f:91:b5: bf:12:5f:40:8e:58:f0:5e:8f:2b:5a:67:25:b0:19:be:d6:11: 5a:8e:67:00:8d:f1:74:96:cb:56:42:04:1b:7a:42:2c:2a:c2: f6:57:21:05:e6:d4:05:08:0f:fe:34:f2:25:a0:1d:fa:da:a5: bf:5d:3f:84:e8:e9:8f:2b:c6:2d:11:be:15:8c:cf:7c:92:64: a6:b1:e0:00:81:fe:92:fa:1f:59:4a:54:98:93:24:a3:5d:77: c9:22:64:e2:a6:41:82:2c:53:5b:3a:9f:da:6e:db:29:ef:2c: 53:d0:54:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ5M0IxMTAvBgNVBAUTKENDODNCQjZEMEFBMTc3OURFQTE2OUVEQkE0QTQwMjI4 REUyMUJEN0IwHhcNMjYwMTI0MjM1NjAzWhcNMjYwMTMxMjM1NjAzWjAYMRYwFAYD VQQDDA02OTc1NWMxNC01ZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9+sYN9qC/N23eOXwTEWOObHSljjjhV0eLGaUEIYrWqo0uaMM5WYG6pz1k2VO d26+tBE81/bwFkzf80mrN+emG/9azbFhjqaAuZy+QEnO1FpnMqVZ0zhXe9LgaVjZ hFSCClyI/WK30flcU6y6fEfmqCHpaM3ZQYakIANaWS5kWdWVygQu7XbDazcZOoNg zPemWo0V5Wbsrp8eq07X/EVX52lQQB5RYdYu3l94ZQ/CXWA/xTlfQDo72TkTb6v3 tItkz/nxIitNiJtUmNfiqqmAcjheg9vt0u8oU+B+BMWI6vNJR//Q+4o8izSkdxIx rksPe0vzQ2miY0h3GcbTQXK1RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDg6Tbyr hzuygNstPreKDSxu8w0ZMB8GA1UdIwQYMBaAFMyDu20KoXed6hae26SkAijeIb17 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDkzQi9EQkFEMzdBMENB QUUxMUVDODI0MTI4MERDNEY5QUUwMi96SU83YlFxaGQ1M3FGcDdicEtRQ0tONGh2 WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pJTzdiUXFoZDUzcUZwN2JwS1FDS040aHZYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDkzQi9EQkFEMzdBMENBQUUxMUVDODI0MTI4MERDNEY5QUUwMi96SU83YlFxaGQ1 M3FGcDdicEtRQ0tONGh2WHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCscreG1qHFRALqK2uBJcBOHyTd5yYGDduKV2mrAX33BY8MiZ7U+FMN aM7jPIrzFI6gysVDDTp1y1gccJV+eI+GvWL2NSJrOFu6jo2w45NS9vdOFyt8FDv3 jy4GDLHQ+a+YdVYYHgmQhcD8iLXTHHRqp90wYYmYWvzpH77opYpArBhjx0L84yuT //zP8c8vkbW/El9AjljwXo8rWmclsBm+1hFajmcAjfF0lstWQgQbekIsKsL2VyEF 5tQFCA/+NPIloB362qW/XT+E6OmPK8YtEb4VjM98kmSmseAAgf6S+h9ZSlSYkySj XXfJImTipkGCLFNbOp/abtsp7yxT0FSg -----END CERTIFICATE-----Generated at Sun Jan 25 10:48:36 2026 by rpki-client