This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft File: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft (raw, json) Hash identifier: UN+uhOHGHYi2uRE3rNm6Yuk7wTshV95QXvv8OhZpmfc= Subject key identifier: 68:1C:1A:72:C3:89:BB:10:0F:AF:2B:21:60:EF:5D:E8:89:BD:F5:4B Authority key identifier: 64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8 Certificate issuer: /CN=A91F5756/serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft Manifest number: 65 Signing time: Sun 25 Jan 2026 06:08:51 +0000 Manifest this update: Sun 25 Jan 2026 06:08:51 +0000 Manifest next update: Sun 01 Feb 2026 06:08:51 +0000 Files and hashes: 1: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl (hash: /02LDfheAoD+RcxIZ5C0LPAI76GNkWfuK6lOVOWj4Dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5756, serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8 Validity Not Before: Jan 25 06:08:51 2026 GMT Not After : Feb 1 06:08:51 2026 GMT Subject: CN=6975b373-c0d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:de:93:9f:e4:c8:d3:c6:1b:ae:78:d2:89:f3: 26:80:b6:5c:a7:f6:6a:d3:80:95:6e:d7:f3:bd:1f: 0b:05:7a:92:c9:f2:9b:7c:b7:38:00:7f:b7:82:bd: dc:5b:92:63:2b:30:29:5c:04:d2:d2:99:65:45:7b: 65:b7:e6:2a:89:25:c6:79:a1:90:5c:44:a6:b6:51: 20:3c:f6:bd:30:c9:2c:04:35:37:49:d2:cf:d9:fe: a3:81:86:84:f1:19:8b:44:62:0f:0c:10:ae:3c:c3: 15:9c:41:56:49:e8:4d:a8:25:e0:f0:78:ec:4f:88: 8a:cf:00:a7:15:f2:c9:4d:a4:91:23:68:7b:55:0d: 76:97:28:66:9c:df:7a:a2:1d:c0:57:b0:3a:82:ae: cd:50:8e:b6:0f:b4:5f:94:d7:69:3b:6a:08:01:bc: 1b:cd:f8:ee:b2:0d:3f:87:94:0a:f6:7f:3b:58:b0: 02:ce:12:07:38:9b:18:b7:e0:29:fa:b0:26:d7:d9: ef:f4:d1:5d:a7:e9:0d:90:82:92:65:87:a0:ee:bc: b0:62:98:69:24:65:2e:d9:37:4b:c7:1d:14:2b:51: c1:86:5d:87:24:18:6c:a9:15:12:e4:24:22:ab:2d: 4f:04:58:55:b7:56:b7:a5:63:72:6f:d5:c0:ff:7b: dc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1C:1A:72:C3:89:BB:10:0F:AF:2B:21:60:EF:5D:E8:89:BD:F5:4B X509v3 Authority Key Identifier: keyid:64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:7c:9c:35:fe:1b:b7:e8:16:4b:32:10:50:52:0f:0f:b2:21: fe:1a:bf:22:8b:e7:85:c4:60:28:e6:ee:73:03:9d:0d:a3:19: d2:6a:a7:81:f4:af:b4:d3:20:1b:58:86:f9:e9:f5:61:e8:88: b1:58:fa:35:0d:95:56:e7:de:f8:80:8d:ff:6f:8d:55:9b:07: 32:8d:9d:c3:91:f1:7d:e1:61:bf:2d:43:3c:02:aa:3e:17:7b: d3:24:e1:0f:41:7e:33:82:09:35:2a:25:04:48:96:22:ca:d1: 48:ee:69:8c:75:8e:7a:09:3a:12:38:f9:5a:e9:20:d3:c6:2c: e8:6e:ec:e8:ab:6d:9a:89:eb:5a:48:92:76:9e:f3:ff:e0:15: 06:cc:e6:de:d8:a2:43:e6:2e:c7:e6:78:51:74:54:a7:be:ce: da:c3:a8:f9:4f:f4:e4:21:77:75:68:c3:d2:a3:e8:32:01:81: 5b:46:5e:51:bd:ae:33:ae:7a:69:7b:27:41:c5:81:73:65:da: 19:e9:cb:de:97:1e:98:11:f6:fd:fb:79:89:9b:e2:08:12:ba: ad:f2:17:12:25:df:a1:38:11:f8:c2:dd:88:e1:6c:39:0d:de: 00:e6:82:39:48:c7:19:4e:01:9f:88:9e:57:97:5f:37:54:55: 36:41:96:37 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTc1NjExMC8GA1UEBRMoNjQyMTM1MkFFRDY0NDEwMDZCQkNFNDhBODUzNDU1QzhE MjcyM0RCODAeFw0yNjAxMjUwNjA4NTFaFw0yNjAyMDEwNjA4NTFaMBgxFjAUBgNV BAMMDTY5NzViMzczLWMwZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC53pOf5MjTxhuueNKJ8yaAtlyn9mrTgJVu1/O9HwsFepLJ8pt8tzgAf7eCvdxb kmMrMClcBNLSmWVFe2W35iqJJcZ5oZBcRKa2USA89r0wySwENTdJ0s/Z/qOBhoTx GYtEYg8MEK48wxWcQVZJ6E2oJeDweOxPiIrPAKcV8slNpJEjaHtVDXaXKGac33qi HcBXsDqCrs1QjrYPtF+U12k7aggBvBvN+O6yDT+HlAr2fztYsALOEgc4mxi34Cn6 sCbX2e/00V2n6Q2QgpJlh6DuvLBimGkkZS7ZN0vHHRQrUcGGXYckGGypFRLkJCKr LU8EWFW3VrelY3Jv1cD/e9y3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaBwacsOJ uxAPryshYO9d6Im99UswHwYDVR0jBBgwFoAUZCE1Ku1kQQBrvOSKhTRVyNJyPbgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1NzU2Lzc0NDY0REU2NjIx MjExRjA4Q0E2QzE1NEM0RjlBRTAyL1pDRTFLdTFrUVFCcnZPU0toVFJWeU5KeVBi Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkNFMUt1MWtRUUJydk9TS2hUUlZ5Tkp5UGJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 NzU2Lzc0NDY0REU2NjIxMjExRjA4Q0E2QzE1NEM0RjlBRTAyL1pDRTFLdTFrUVFC cnZPU0toVFJWeU5KeVBiZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK98nDX+G7foFksyEFBSDw+yIf4avyKL54XEYCjm7nMDnQ2jGdJqp4H0 r7TTIBtYhvnp9WHoiLFY+jUNlVbn3viAjf9vjVWbBzKNncOR8X3hYb8tQzwCqj4X e9Mk4Q9BfjOCCTUqJQRIliLK0UjuaYx1jnoJOhI4+VrpINPGLOhu7OirbZqJ61pI knae8//gFQbM5t7YokPmLsfmeFF0VKe+ztrDqPlP9OQhd3Vow9Kj6DIBgVtGXlG9 rjOueml7J0HFgXNl2hnpy96XHpgR9v37eYmb4ggSuq3yFxIl36E4EfjC3YjhbDkN 3gDmgjlIxxlOAZ+InleXXzdUVTZBljc= -----END CERTIFICATE-----Generated at Sun Jan 25 09:44:03 2026 by rpki-client