This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft File: zek5HqgTnkArRtHYhD5Aqx0i0vM.mft (raw, json) Hash identifier: reP0op3Igsmf6lqnKZfXMgJRW4yNtUTP/i15JA8LtO4= Subject key identifier: 6C:F4:A8:88:18:C5:B5:F4:D9:A8:29:CD:73:D0:28:AD:7A:CC:A1:95 Authority key identifier: CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 Certificate issuer: /CN=A91F300B/serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft Manifest number: 4B Signing time: Fri 23 Jan 2026 06:21:01 +0000 Manifest this update: Fri 23 Jan 2026 06:21:00 +0000 Manifest next update: Fri 30 Jan 2026 06:21:00 +0000 Files and hashes: 1: zek5HqgTnkArRtHYhD5Aqx0i0vM.crl (hash: 5OHarwm97B3MPUyTo0SMXBD5f9oN4zKEDW6Gnmxbhq8=) 2: A7CEC08691E611F0A8D76134C4F9AE02.roa (hash: GDfPEylawrKx56Y2TAT5tXuGZ2rH6VnvaaNVcgNRZcE=) 3: DA1BF46E91E611F08635E534C4F9AE02.roa (hash: nG9sdc441APZ2AYq+eucZAUUY/j7wEx0tfcPV/Vx/Zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F300B, serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Validity Not Before: Jan 23 06:21:00 2026 GMT Not After : Jan 30 06:21:00 2026 GMT Subject: CN=6973134d-2c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9c:73:06:a4:3b:3a:9d:b7:81:e5:88:82:e1: 8c:e3:51:28:ae:8f:11:48:86:c7:2c:a8:6c:f1:97: f3:1e:4f:b0:91:44:ab:b6:06:28:75:fa:ce:bc:d9: 19:02:d6:f9:ef:07:28:90:7f:1a:88:e3:60:2b:6f: f6:42:b1:74:f3:78:b1:33:6b:2f:c5:61:da:7c:0f: e3:d9:d5:dd:9e:cc:ea:1f:b5:99:c9:5e:00:c0:dd: bd:54:cf:de:26:77:8a:18:12:a5:be:41:c2:45:cf: dc:bf:86:7d:67:2f:ab:14:f1:91:f5:83:e1:67:18: bf:2d:39:a7:74:85:26:88:16:2d:ca:2c:b6:8a:40: 95:a9:c4:3b:a6:b1:f9:f3:42:fd:b0:b8:4b:a7:89: 3c:3a:c2:f3:01:61:b8:cb:b1:6d:d2:27:68:12:e7: 60:33:30:63:97:da:ca:74:98:95:62:14:96:cc:59: 4a:6d:f6:39:2b:f9:bd:7d:d9:2b:2a:76:1c:38:97: ce:d1:c5:0d:00:02:4e:1f:d2:d6:e8:ba:d4:36:6e: 6c:ef:08:6f:e9:3c:63:79:d7:1b:09:19:47:d0:10: 0e:3b:27:09:b8:f0:7b:35:9a:51:cb:a4:af:d5:72: 6c:d4:63:95:b6:7f:86:14:b5:c3:30:b5:9b:84:ef: 7f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F4:A8:88:18:C5:B5:F4:D9:A8:29:CD:73:D0:28:AD:7A:CC:A1:95 X509v3 Authority Key Identifier: keyid:CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:9e:a0:eb:6b:e1:2b:03:a2:30:6a:9b:7f:da:6b:1b:61:12: e7:3b:40:83:91:0f:c3:45:09:7d:67:cb:23:73:1f:72:fa:d2: b8:7c:4f:59:56:53:05:77:ad:86:03:0e:b4:15:9b:94:23:3f: f5:21:a8:91:86:6d:7b:e2:fd:4e:85:bd:c3:94:a5:32:e9:8c: 48:52:bd:ea:c8:9b:29:8f:6e:5f:c5:2d:bb:0d:c0:e3:24:f6: 31:d4:0b:ab:38:5b:05:be:69:77:76:bc:83:1f:b5:45:64:7d: ef:61:c4:76:ea:9a:96:6e:5d:55:af:7a:ea:0c:5a:4a:cd:b7: 54:35:2b:43:96:25:d1:b3:7e:35:2f:46:48:eb:9f:ce:69:9a: 3d:d1:f3:7b:26:8e:26:33:eb:07:87:df:59:6a:9e:44:74:f0: dc:ec:32:1b:6c:95:e4:b3:d5:17:41:68:c3:c0:b2:c3:0b:72: 7f:06:4c:07:9d:7b:49:55:fc:9b:77:7a:0f:ad:fd:c6:c7:7b: 04:2e:ca:7e:87:9d:6e:4d:f5:93:38:8f:6e:b3:f3:51:6a:cc: d6:c1:76:a6:13:67:da:63:3d:77:83:bd:97:0d:09:b1:f9:69: 13:b6:1b:4b:6c:49:28:cb:43:cb:b4:94:f7:39:9e:7c:92:44: 30:c0:c6:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzAwQjExMC8GA1UEBRMoQ0RFOTM5MUVBODEzOUU0MDJCNDZEMUQ4ODQzRTQwQUIx RDIyRDJGMzAeFw0yNjAxMjMwNjIxMDBaFw0yNjAxMzAwNjIxMDBaMBgxFjAUBgNV BAMMDTY5NzMxMzRkLTJjOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtnHMGpDs6nbeB5YiC4YzjUSiujxFIhscsqGzxl/MeT7CRRKu2Bih1+s682RkC 1vnvByiQfxqI42Arb/ZCsXTzeLEzay/FYdp8D+PZ1d2ezOoftZnJXgDA3b1Uz94m d4oYEqW+QcJFz9y/hn1nL6sU8ZH1g+FnGL8tOad0hSaIFi3KLLaKQJWpxDumsfnz Qv2wuEuniTw6wvMBYbjLsW3SJ2gS52AzMGOX2sp0mJViFJbMWUpt9jkr+b192Ssq dhw4l87RxQ0AAk4f0tboutQ2bmzvCG/pPGN51xsJGUfQEA47Jwm48Hs1mlHLpK/V cmzUY5W2f4YUtcMwtZuE739VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbPSoiBjF tfTZqCnNc9AorXrMoZUwHwYDVR0jBBgwFoAUzek5HqgTnkArRtHYhD5Aqx0i0vMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzMDBCL0E1QUM1RURBOEM2 RTExRjBCQjQzQkYyN0M0RjlBRTAyL3plazVIcWdUbmtBclJ0SFloRDVBcXgwaTB2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemVrNUhxZ1Rua0FyUnRIWWhENUFxeDBpMHZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz MDBCL0E1QUM1RURBOEM2RTExRjBCQjQzQkYyN0M0RjlBRTAyL3plazVIcWdUbmtB clJ0SFloRDVBcXgwaTB2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAyeoOtr4SsDojBqm3/aaxthEuc7QIORD8NFCX1nyyNzH3L60rh8T1lW UwV3rYYDDrQVm5QjP/UhqJGGbXvi/U6FvcOUpTLpjEhSverImymPbl/FLbsNwOMk 9jHUC6s4WwW+aXd2vIMftUVkfe9hxHbqmpZuXVWveuoMWkrNt1Q1K0OWJdGzfjUv Rkjrn85pmj3R83smjiYz6weH31lqnkR08NzsMhtsleSz1RdBaMPAssMLcn8GTAed e0lV/Jt3eg+t/cbHewQuyn6HnW5N9ZM4j26z81FqzNbBdqYTZ9pjPXeDvZcNCbH5 aRO2G0tsSSjLQ8u0lPc5nnySRDDAxvc= -----END CERTIFICATE-----Generated at Sun Jan 25 03:02:49 2026 by rpki-client