This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft File: zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft (raw, json) Hash identifier: z+qWlrOYOEgD5hywQM2ND8BrX4rejWd12tLZ8z2i3ws= Subject key identifier: A5:65:46:69:D7:69:B6:BB:2B:A4:0F:B2:44:54:A3:58:70:3F:B7:A2 Authority key identifier: CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5 Certificate issuer: /CN=A91E8FFF/serialNumber=CC9F2FBBFAEDC44C7632B18C2BD3BC58ECED7BF5 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft Manifest number: 09 Signing time: Sun 25 Jan 2026 07:07:47 +0000 Manifest this update: Sun 25 Jan 2026 07:07:47 +0000 Manifest next update: Sun 01 Feb 2026 07:07:47 +0000 Files and hashes: 1: zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl (hash: 1sQ6Eb7FwGMUwPRjIHrYMz+jmrPguzcVyt55W74Wck4=) 2: DBA60106EED111F0AB3DEEA1736F56BC.roa (hash: Pvjzh1wB4BpFzjENBVvgVUaERhu/PoJPSA4+GLZsUU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8FFF, serialNumber=CC9F2FBBFAEDC44C7632B18C2BD3BC58ECED7BF5 Validity Not Before: Jan 25 07:07:47 2026 GMT Not After : Feb 1 07:07:47 2026 GMT Subject: CN=6975c143-39a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:08:21:4a:eb:5f:56:4f:fb:2f:13:00:23: ad:c5:76:e3:f9:5d:29:e4:ad:7d:d2:8b:39:a1:d3: 9e:8d:78:3c:33:e7:e6:d0:aa:b2:43:72:5c:2e:37: d8:e0:ff:8f:8c:35:92:7e:d5:7b:3c:31:df:40:1d: a3:94:91:32:9b:4f:85:f0:4b:15:e4:f4:14:7f:f3: 4b:dc:4e:06:8a:47:fb:47:a1:ba:c7:3c:47:6a:28: 6f:a6:cf:39:a3:6c:71:6d:3f:4f:2f:aa:0c:31:40: f8:8d:94:b2:5a:8d:e9:3c:27:14:23:b9:7d:6f:69: 29:0f:0b:c0:5e:cd:a0:dc:94:6b:01:bf:ea:75:61: 54:c3:60:97:0f:ae:ff:76:6b:3f:30:3b:46:ca:56: dd:e1:c2:c9:41:6d:47:a4:4c:7b:8e:d1:4c:42:6d: 90:fe:31:b3:55:69:3d:04:13:04:50:3d:6d:70:cc: 08:ac:fd:00:91:8d:c4:98:80:27:e4:6a:05:0d:75: bc:e3:d5:75:ce:c2:d3:ef:2e:2b:c1:90:4e:59:d4: 05:15:4c:a1:ec:a8:6c:8f:9f:08:12:13:86:db:5d: 69:a0:ec:96:16:5b:2d:f1:8c:a0:a0:3b:3f:4d:f8: 28:59:11:09:0a:cb:17:bf:36:34:d5:3c:7b:32:f7: c6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:65:46:69:D7:69:B6:BB:2B:A4:0F:B2:44:54:A3:58:70:3F:B7:A2 X509v3 Authority Key Identifier: keyid:CC:9F:2F:BB:FA:ED:C4:4C:76:32:B1:8C:2B:D3:BC:58:EC:ED:7B:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zJ8vu_rtxEx2MrGMK9O8WOzte_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8FFF/5913E262EED111F0B0ACD276736F56BC/zJ8vu_rtxEx2MrGMK9O8WOzte_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:78:78:be:2f:e8:b2:db:10:30:10:14:3d:3b:fd:4b:c2:88: ad:43:b0:f5:6e:b4:e5:81:d4:75:61:2b:a3:d1:bd:41:03:df: a7:fa:1c:cd:7a:24:ec:99:eb:09:0f:1f:56:6b:54:e0:c9:ac: 82:a1:14:a8:84:ab:b6:8a:39:2c:20:f3:e3:e9:93:53:84:74: db:53:17:67:e2:9b:0b:da:8a:28:e7:bf:39:0c:dd:f0:6f:ae: 04:c3:e2:06:58:82:d5:30:5d:0d:ce:29:a1:a3:79:56:ad:7c: 29:c3:b3:00:7a:22:c1:7a:ae:db:b9:36:da:5f:7e:9b:d7:5b: 5e:3f:4d:a8:0d:9b:0e:c9:41:63:38:ad:1c:20:df:65:87:d5: f9:39:dd:4c:29:81:27:b8:a2:7b:ad:eb:80:34:3b:0d:67:89: 00:bc:f4:58:a8:6f:fb:d5:1f:95:2d:07:95:45:69:1e:31:1c: bf:6d:d8:a7:10:b5:77:db:9e:8c:2c:c9:71:b2:9a:ff:b3:e2: 6f:20:4f:b9:62:22:6c:b8:7d:18:c0:f1:fa:66:dd:b1:74:3c: 8f:ab:fd:cb:56:ce:ae:00:75:24:a4:56:6e:32:38:62:5a:bb: 43:e3:61:0b:e4:a3:20:00:3d:14:54:cc:1d:8d:4c:7b:c3:40: 6e:27:24:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFF OEZGRjExMC8GA1UEBRMoQ0M5RjJGQkJGQUVEQzQ0Qzc2MzJCMThDMkJEM0JDNThF Q0VEN0JGNTAeFw0yNjAxMjUwNzA3NDdaFw0yNjAyMDEwNzA3NDdaMBgxFjAUBgNV BAMMDTY5NzVjMTQzLTM5YTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2TQghSutfVk/7LxMAI63FduP5XSnkrX3Sizmh056NeDwz5+bQqrJDclwuN9jg /4+MNZJ+1Xs8Md9AHaOUkTKbT4XwSxXk9BR/80vcTgaKR/tHobrHPEdqKG+mzzmj bHFtP08vqgwxQPiNlLJajek8JxQjuX1vaSkPC8BezaDclGsBv+p1YVTDYJcPrv92 az8wO0bKVt3hwslBbUekTHuO0UxCbZD+MbNVaT0EEwRQPW1wzAis/QCRjcSYgCfk agUNdbzj1XXOwtPvLivBkE5Z1AUVTKHsqGyPnwgSE4bbXWmg7JYWWy3xjKCgOz9N +ChZEQkKyxe/NjTVPHsy98bzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpWVGaddp trsrpA+yRFSjWHA/t6IwHwYDVR0jBBgwFoAUzJ8vu/rtxEx2MrGMK9O8WOzte/Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4RkZGLzU5MTNFMjYyRUVE MTExRjBCMEFDRDI3NjczNkY1NkJDL3pKOHZ1X3J0eEV4Mk1yR01LOU84V096dGVf VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveko4dnVfcnR4RXgyTXJHTUs5TzhXT3p0ZV9VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 RkZGLzU5MTNFMjYyRUVEMTExRjBCMEFDRDI3NjczNkY1NkJDL3pKOHZ1X3J0eEV4 Mk1yR01LOU84V096dGVfVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKF4eL4v6LLbEDAQFD07/UvCiK1DsPVutOWB1HVhK6PRvUED36f6HM16 JOyZ6wkPH1ZrVODJrIKhFKiEq7aKOSwg8+Ppk1OEdNtTF2fimwvaiijnvzkM3fBv rgTD4gZYgtUwXQ3OKaGjeVatfCnDswB6IsF6rtu5NtpffpvXW14/TagNmw7JQWM4 rRwg32WH1fk53UwpgSe4onut64A0Ow1niQC89Fiob/vVH5UtB5VFaR4xHL9t2KcQ tXfbnowsyXGymv+z4m8gT7liImy4fRjA8fpm3bF0PI+r/ctWzq4AdSSkVm4yOGJa u0PjYQvkoyAAPRRUzB2NTHvDQG4nJLg= -----END CERTIFICATE-----Generated at Sun Jan 25 10:21:11 2026 by rpki-client