This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft File: ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft (raw, json) Hash identifier: +OWqdXnG36alOgq6mXiLI0fWqI97MWjDxKC2fgFoVYw= Subject key identifier: E4:85:A4:88:55:37:F6:BC:2D:3A:27:78:13:E2:BE:71:C1:37:E2:BE Authority key identifier: 65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA Certificate issuer: /CN=A91E41C9/serialNumber=6546F510C1B92491CA7090BE747A2428924183AA Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft Manifest number: 0932 Signing time: Sat 24 Jan 2026 19:45:32 +0000 Manifest this update: Sat 24 Jan 2026 19:45:32 +0000 Manifest next update: Sat 31 Jan 2026 19:45:32 +0000 Files and hashes: 1: ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl (hash: zHaVmLqWeA/nVkP9h+msbULW7mcHnL+e+6U5TTyeWKo=) 2: 3FACB1ECAE3911F099A5E452C4F9AE02.roa (hash: v0qe3Is5q3yvzdsZV9nmpFuwmP+tm+rwCc0Ad6aEiXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E41C9, serialNumber=6546F510C1B92491CA7090BE747A2428924183AA Validity Not Before: Jan 24 19:45:32 2026 GMT Not After : Jan 31 19:45:32 2026 GMT Subject: CN=6975215c-7668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:19:09:0b:3b:a0:d6:3f:b2:95:8d:11:de:ab: e4:30:69:a7:ea:b3:37:fa:af:9d:e8:35:d0:3c:ae: 38:a5:4f:b7:ac:24:f6:88:fb:71:ef:f4:8b:44:1f: 5d:72:c7:7b:c1:9b:0c:ef:aa:7b:aa:5a:07:07:94: 8b:4d:a6:75:3a:c4:00:0f:01:0a:da:a0:1e:e8:41: 08:57:61:fd:3b:2a:22:23:28:08:d4:e8:45:aa:c4: 5d:84:73:0c:a9:0e:b2:5f:28:48:63:d4:c0:a7:66: cc:2b:4f:ea:33:57:cb:f6:a4:bc:95:d9:b1:6b:af: 29:1b:61:a7:60:40:a2:f9:34:20:88:6f:7d:9f:8f: ed:7d:ab:6b:e8:78:2f:a4:8c:c6:bb:72:85:94:26: 84:e6:22:13:bc:ff:76:8c:90:cd:84:9c:15:92:0d: f3:ee:47:d3:3a:8d:69:cc:e5:6d:6a:05:2b:8d:d6: 87:8c:57:32:d2:7d:20:5b:1d:2c:36:9e:8a:5a:96: 4d:aa:f3:49:a9:8f:ce:e5:85:da:ab:6a:b0:50:db: 76:ad:d3:c6:61:6d:f0:49:8c:a4:25:3c:5d:5f:6e: 01:7f:22:22:a2:6a:47:a5:20:7a:3a:c8:0f:f0:ed: 52:6a:52:ea:61:b4:e0:e6:d0:8a:11:c6:a7:dd:dd: d1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:85:A4:88:55:37:F6:BC:2D:3A:27:78:13:E2:BE:71:C1:37:E2:BE X509v3 Authority Key Identifier: keyid:65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:d6:d4:25:fc:04:1d:01:94:db:d8:f3:1d:c2:de:03:37:fb: 4d:e5:59:8e:96:e1:92:8b:a3:e3:08:23:6e:92:2e:4e:34:1d: 19:19:9f:09:5f:36:b2:fd:91:3c:f5:65:8a:2a:45:fb:66:e3: ce:8a:ab:13:7f:44:39:69:83:af:47:02:12:67:e9:8c:03:7c: 1b:19:61:85:38:9b:44:86:83:23:44:a0:9c:ea:04:33:05:3a: 0a:fc:19:46:37:b1:f4:97:1f:cd:e7:9a:8e:c7:12:e3:c6:ef: ca:86:a1:66:cb:f1:36:a5:67:38:59:07:07:12:aa:9f:ea:66: 66:fb:f6:e3:d4:b0:29:80:8a:b1:e9:5f:d5:a1:a9:68:86:4f: 52:ad:fd:e3:bd:9f:20:62:c2:48:43:9d:38:8b:b1:eb:c1:69: 7e:0a:b2:9e:c8:c8:5a:c2:c5:c8:e2:97:08:fc:71:1a:c1:00: 27:8c:fa:51:9e:f9:b1:81:30:24:01:b5:be:74:31:83:c0:e8: 06:54:c7:40:9a:bc:12:2d:2f:1a:59:94:96:49:21:ae:d3:b2: af:0b:de:e2:00:44:37:a1:8d:5a:f5:4f:47:cf:ab:fa:b1:20: e6:86:69:b1:41:a9:77:30:b1:93:61:ae:75:83:75:c4:a8:e5: a5:e1:77:5e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDFDOTExMC8GA1UEBRMoNjU0NkY1MTBDMUI5MjQ5MUNBNzA5MEJFNzQ3QTI0Mjg5 MjQxODNBQTAeFw0yNjAxMjQxOTQ1MzJaFw0yNjAxMzExOTQ1MzJaMBgxFjAUBgNV BAMMDTY5NzUyMTVjLTc2NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgGQkLO6DWP7KVjRHeq+Qwaafqszf6r53oNdA8rjilT7esJPaI+3Hv9ItEH11y x3vBmwzvqnuqWgcHlItNpnU6xAAPAQraoB7oQQhXYf07KiIjKAjU6EWqxF2Ecwyp DrJfKEhj1MCnZswrT+ozV8v2pLyV2bFrrykbYadgQKL5NCCIb32fj+19q2voeC+k jMa7coWUJoTmIhO8/3aMkM2EnBWSDfPuR9M6jWnM5W1qBSuN1oeMVzLSfSBbHSw2 nopalk2q80mpj87lhdqrarBQ23at08ZhbfBJjKQlPF1fbgF/IiKiakelIHo6yA/w 7VJqUuphtODm0IoRxqfd3dFdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5IWkiFU3 9rwtOid4E+K+ccE34r4wHwYDVR0jBBgwFoAUZUb1EMG5JJHKcJC+dHokKJJBg6ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0MUM5LzQ5QkQ5REE2QzBG ODExRUE4QUM2QzQ2Q0M0RjlBRTAyL1pVYjFFTUc1SkpIS2NKQy1kSG9rS0pKQmc2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlViMUVNRzVKSkhLY0pDLWRIb2tLSkpCZzZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 MUM5LzQ5QkQ5REE2QzBGODExRUE4QUM2QzQ2Q0M0RjlBRTAyL1pVYjFFTUc1SkpI S2NKQy1kSG9rS0pKQmc2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANPW1CX8BB0BlNvY8x3C3gM3+03lWY6W4ZKLo+MII26SLk40HRkZnwlf NrL9kTz1ZYoqRftm486KqxN/RDlpg69HAhJn6YwDfBsZYYU4m0SGgyNEoJzqBDMF Ogr8GUY3sfSXH83nmo7HEuPG78qGoWbL8TalZzhZBwcSqp/qZmb79uPUsCmAirHp X9WhqWiGT1Kt/eO9nyBiwkhDnTiLsevBaX4Ksp7IyFrCxcjilwj8cRrBACeM+lGe +bGBMCQBtb50MYPA6AZUx0CavBItLxpZlJZJIa7Tsq8L3uIARDehjVr1T0fPq/qx IOaGabFBqXcwsZNhrnWDdcSo5aXhd14= -----END CERTIFICATE-----Generated at Sun Jan 25 06:12:01 2026 by rpki-client