This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft File: ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft (raw, json) Hash identifier: 4yBZJN1sfodSuDXprhPDAvf+5pVp+151AjPzNRsezrk= Subject key identifier: 1A:AE:21:AF:DD:32:55:ED:81:FA:7F:08:0E:C3:B7:49:1A:30:C1:CC Authority key identifier: 64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F Certificate issuer: /CN=A91D8A94/serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft Manifest number: 43 Signing time: Sun 25 Jan 2026 06:28:52 +0000 Manifest this update: Sun 25 Jan 2026 06:28:52 +0000 Manifest next update: Sun 01 Feb 2026 06:28:52 +0000 Files and hashes: 1: ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl (hash: aO6qddU4VWpyJ97gF0ODbScdFGqd/dYLOUQ3a4RdEtY=) 2: B57E9D8C98D511F0912EFD62C4F9AE02.roa (hash: H0Iwpph5C0NznDpgp/Qg/LJo8mI5O7HMAwbb7Y6vKFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8A94, serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F Validity Not Before: Jan 25 06:28:52 2026 GMT Not After : Feb 1 06:28:52 2026 GMT Subject: CN=6975b824-0d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:de:bd:4a:87:a9:d6:a0:a6:0d:af:44:4a:1b: 37:67:1e:af:b3:97:05:70:a1:00:c1:43:a3:8c:a6: 88:cc:08:fc:88:aa:57:e9:e1:4f:a3:4c:16:f6:e5: ed:5b:fb:8c:e5:2e:9e:4b:1f:87:24:8c:44:e5:12: 99:a0:87:23:2b:5f:21:22:0e:6e:a6:5a:07:c4:18: c0:ec:9c:6e:f5:40:84:ec:6c:81:41:ef:6e:8a:b1: 9a:0b:59:44:aa:af:8f:41:2e:9d:b3:4e:99:3a:17: 37:22:3e:4a:8b:5c:1c:a8:b2:06:82:00:55:9b:c7: db:f1:41:49:30:6d:0c:f2:02:85:32:18:da:2b:02: b7:a1:1a:4e:9b:62:fe:3e:7c:35:1b:4a:ae:ae:d7: c3:32:21:ba:e5:0e:74:86:8d:cd:52:a4:8a:5d:64: d2:76:7f:ae:1a:d4:e9:95:8e:79:9a:06:a1:74:f1: d8:cb:e1:39:83:4d:d3:1e:7e:24:39:65:5f:3a:b4: 59:e8:0c:21:76:3f:b7:06:59:c6:e8:65:11:ee:65: b0:fa:3a:43:17:a8:54:02:4f:61:21:7e:52:40:fc: de:9b:c6:85:bf:05:21:f3:14:2e:ce:8b:e4:98:16: d8:45:27:7c:74:3f:5e:bb:69:46:b2:7e:92:a4:b4: e0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AE:21:AF:DD:32:55:ED:81:FA:7F:08:0E:C3:B7:49:1A:30:C1:CC X509v3 Authority Key Identifier: keyid:64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:fc:0e:33:5a:04:b0:7c:08:2b:58:6a:6d:b3:10:30:18:ed: 7b:6c:b7:8d:2e:cb:cc:ce:21:7d:74:71:0e:f6:b2:a9:9c:e9: 9a:1d:f7:2d:39:ec:69:80:14:5d:f8:14:49:72:bd:da:0e:17: 57:00:b4:7b:51:84:b7:76:b7:53:6e:fa:6e:a8:72:f0:11:fb: 84:df:b8:b5:a6:72:85:65:66:1c:8a:e2:54:ff:9b:62:93:c6: e3:10:5e:2e:9f:2a:74:4a:16:d3:f0:3b:50:40:43:31:98:bb: 66:1e:c9:db:8b:a5:6f:81:23:c7:84:6c:a1:22:c2:74:7c:fb: 73:6c:5b:3e:53:47:27:e3:93:ea:82:62:2d:09:d3:36:7e:98: b3:f1:c2:11:af:e8:1c:b3:af:fd:0a:bb:0a:70:fe:14:46:6a: d6:7a:40:e5:e1:4a:35:58:43:d5:5f:7f:31:e9:1f:e9:37:6b: 59:25:11:a2:70:2b:a0:33:f1:23:89:08:78:3c:a8:d2:76:87: 9d:3a:00:ad:6c:dd:8e:67:59:40:59:9f:d8:64:88:17:55:06: c9:1c:50:9f:35:21:0f:0a:6c:ef:b5:31:fa:63:a0:82:44:19: 32:66:3b:70:3c:06:f3:0f:d3:66:f2:e4:c1:b5:66:ec:04:99: 03:60:98:c5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEE5NDExMC8GA1UEBRMoNjRDMEMxRDk2MTUwMTEwNjI1MTNFRjQ3QjhFRTM4ODk4 MUQzRTgwRjAeFw0yNjAxMjUwNjI4NTJaFw0yNjAyMDEwNjI4NTJaMBgxFjAUBgNV BAMMDTY5NzViODI0LTBkOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA3r1Kh6nWoKYNr0RKGzdnHq+zlwVwoQDBQ6OMpojMCPyIqlfp4U+jTBb25e1b +4zlLp5LH4ckjETlEpmghyMrXyEiDm6mWgfEGMDsnG71QITsbIFB726KsZoLWUSq r49BLp2zTpk6FzciPkqLXByosgaCAFWbx9vxQUkwbQzyAoUyGNorArehGk6bYv4+ fDUbSq6u18MyIbrlDnSGjc1SpIpdZNJ2f64a1OmVjnmaBqF08djL4TmDTdMefiQ5 ZV86tFnoDCF2P7cGWcboZRHuZbD6OkMXqFQCT2EhflJA/N6bxoW/BSHzFC7Oi+SY FthFJ3x0P167aUayfpKktOAxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGq4hr90y Ve2B+n8IDsO3SRowwcwwHwYDVR0jBBgwFoAUZMDB2WFQEQYlE+9HuO44iYHT6A8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QTk0LzZDRDAwREQyOThD QjExRjA4MkMzRjA1RkM0RjlBRTAyL1pNREIyV0ZRRVFZbEUtOUh1TzQ0aVlIVDZB OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWk1EQjJXRlFFUVlsRS05SHVPNDRpWUhUNkE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 QTk0LzZDRDAwREQyOThDQjExRjA4MkMzRjA1RkM0RjlBRTAyL1pNREIyV0ZRRVFZ bEUtOUh1TzQ0aVlIVDZBOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJX8DjNaBLB8CCtYam2zEDAY7Xtst40uy8zOIX10cQ72sqmc6Zod9y05 7GmAFF34FElyvdoOF1cAtHtRhLd2t1Nu+m6ocvAR+4TfuLWmcoVlZhyK4lT/m2KT xuMQXi6fKnRKFtPwO1BAQzGYu2YeyduLpW+BI8eEbKEiwnR8+3NsWz5TRyfjk+qC Yi0J0zZ+mLPxwhGv6Byzr/0Kuwpw/hRGatZ6QOXhSjVYQ9VffzHpH+k3a1klEaJw K6Az8SOJCHg8qNJ2h506AK1s3Y5nWUBZn9hkiBdVBskcUJ81IQ8KbO+1MfpjoIJE GTJmO3A8BvMP02by5MG1ZuwEmQNgmMU= -----END CERTIFICATE-----Generated at Sun Jan 25 13:57:26 2026 by rpki-client