This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft File: ZgXWapgEftsGpJSzdC9eyCuB3LA.mft (raw, json) Hash identifier: +LT9Hc27xoIxp28xrJXMRYjFmBh6wF01c9eRXzpKH60= Subject key identifier: 3A:62:43:56:42:E4:CA:A9:D7:02:08:F6:AA:63:00:48:C5:F3:F7:83 Authority key identifier: 66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0 Certificate issuer: /CN=A91E22E3/serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft Manifest number: 0138 Signing time: Fri 23 Jan 2026 03:36:28 +0000 Manifest this update: Fri 23 Jan 2026 03:36:27 +0000 Manifest next update: Fri 30 Jan 2026 03:36:27 +0000 Files and hashes: 1: ZgXWapgEftsGpJSzdC9eyCuB3LA.crl (hash: qBUG07orlUYd4vT3n5ooPld35Tsg3gVQCNa8huyxuiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 03:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E22E3, serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0 Validity Not Before: Jan 23 03:36:27 2026 GMT Not After : Jan 30 03:36:27 2026 GMT Subject: CN=6972ecbc-31ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a2:7b:8c:64:00:aa:77:2f:e8:89:2e:1d:f7: 38:3a:c5:fe:09:24:d6:a6:43:37:7b:80:56:0e:e1: f6:09:89:e6:74:db:63:84:56:86:f3:7d:65:58:b2: 0e:27:45:c5:53:79:59:e1:03:58:9b:81:bc:0d:92: 07:75:34:51:4f:15:52:83:63:17:37:a8:c8:62:bd: 4a:5e:ac:9c:9d:3c:94:19:c2:ba:0d:92:54:9a:65: 76:50:1d:bf:63:15:59:13:e9:e4:c7:fe:3e:98:c3: d3:a9:26:de:3b:e4:b7:87:fd:15:25:57:a1:11:68: 4a:77:67:5e:40:f0:3a:81:d8:10:d5:a7:1f:cd:23: 35:07:ec:82:c5:aa:fd:1f:9a:44:65:f0:1d:f0:d1: 63:40:db:c9:9c:11:68:fa:4c:b9:b6:f7:05:cc:cc: fb:1a:4d:e1:0d:ae:77:9f:dc:8b:f6:94:87:a4:63: 06:67:1b:40:f2:dc:42:4d:9d:61:94:cc:c0:27:fe: c0:9d:db:fe:15:b2:25:a2:bc:90:a3:88:e9:fd:70: fb:12:af:ee:18:8e:45:0d:a2:6f:69:f8:b0:00:e4: bf:29:df:eb:d6:d3:b2:92:75:f3:64:d4:6e:73:65: 43:1b:00:5a:b4:b4:18:7b:03:38:4c:31:76:82:1f: 30:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:62:43:56:42:E4:CA:A9:D7:02:08:F6:AA:63:00:48:C5:F3:F7:83 X509v3 Authority Key Identifier: keyid:66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:19:12:77:f6:0f:eb:5c:c3:bb:ce:57:c0:cc:03:d6:0d:69: 7e:35:69:85:0c:72:4e:84:a3:8f:49:1e:a5:1e:83:1d:44:b6: 3f:a8:d0:f1:7a:e9:e8:1c:d8:af:82:f8:95:b1:d1:c3:ed:f2: 65:c8:dc:90:be:61:e8:10:67:3b:e7:e3:a9:7d:4e:b7:7e:88: 89:5e:57:90:d8:53:07:ab:bd:79:bc:0f:ca:67:d3:ac:c4:95: de:68:57:c9:63:42:7b:0e:b8:7a:6f:05:49:96:21:09:29:12: c1:d4:b9:f0:fa:ec:4f:34:86:85:0c:5f:34:ca:94:fe:1f:de: d2:ef:a7:2b:59:1f:b0:56:c4:be:9d:9d:b5:0d:9a:3f:28:2c: aa:f9:9c:6d:5c:6c:ee:50:73:b0:85:5e:fc:ee:04:9b:06:ba: 45:35:ec:9a:a1:bd:70:04:67:ce:f5:8c:61:0b:a7:35:85:03: c8:5c:00:ab:33:78:b7:5c:d6:c3:1d:71:df:d7:03:3b:11:89: c3:fa:0e:85:01:82:06:ed:fd:bb:17:69:55:fd:66:e2:31:e5: c8:8b:4e:bd:41:f8:34:f8:61:27:7d:3a:89:ce:0a:17:cd:cd: 0a:c3:4b:d4:4c:21:7d:45:54:67:a9:b0:86:4c:a5:7e:64:91: 18:09:b8:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyRTMxMTAvBgNVBAUTKDY2MDVENjZBOTgwNDdFREIwNkE0OTRCMzc0MkY1RUM4 MkI4MURDQjAwHhcNMjYwMTIzMDMzNjI3WhcNMjYwMTMwMDMzNjI3WjAYMRYwFAYD VQQDDA02OTcyZWNiYy0zMWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkaJ7jGQAqncv6IkuHfc4OsX+CSTWpkM3e4BWDuH2CYnmdNtjhFaG831lWLIO J0XFU3lZ4QNYm4G8DZIHdTRRTxVSg2MXN6jIYr1KXqycnTyUGcK6DZJUmmV2UB2/ YxVZE+nkx/4+mMPTqSbeO+S3h/0VJVehEWhKd2deQPA6gdgQ1acfzSM1B+yCxar9 H5pEZfAd8NFjQNvJnBFo+ky5tvcFzMz7Gk3hDa53n9yL9pSHpGMGZxtA8txCTZ1h lMzAJ/7Andv+FbIloryQo4jp/XD7Eq/uGI5FDaJvafiwAOS/Kd/r1tOyknXzZNRu c2VDGwBatLQYewM4TDF2gh8wdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpiQ1ZC 5Mqp1wII9qpjAEjF8/eDMB8GA1UdIwQYMBaAFGYF1mqYBH7bBqSUs3QvXsgrgdyw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFMy84NEIwQTg1RTE3 MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi9aZ1hXYXBnRWZ0c0dwSlN6ZEM5ZXlDdUIz TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnWFdhcGdFZnRzR3BKU3pkQzlleUN1QjNMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjJFMy84NEIwQTg1RTE3MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi9aZ1hXYXBnRWZ0 c0dwSlN6ZEM5ZXlDdUIzTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+GRJ39g/rXMO7zlfAzAPWDWl+NWmFDHJOhKOPSR6lHoMdRLY/qNDx eunoHNivgviVsdHD7fJlyNyQvmHoEGc75+OpfU63foiJXleQ2FMHq715vA/KZ9Os xJXeaFfJY0J7Drh6bwVJliEJKRLB1Lnw+uxPNIaFDF80ypT+H97S76crWR+wVsS+ nZ21DZo/KCyq+ZxtXGzuUHOwhV787gSbBrpFNeyaob1wBGfO9YxhC6c1hQPIXACr M3i3XNbDHXHf1wM7EYnD+g6FAYIG7f27F2lV/WbiMeXIi069Qfg0+GEnfTqJzgoX zc0Kw0vUTCF9RVRnqbCGTKV+ZJEYCbh3 -----END CERTIFICATE-----Generated at Sun Jan 25 02:50:40 2026 by rpki-client