This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft File: zFkhdtiMQj-IWbUYtq0zT_92dAk.mft (raw, json) Hash identifier: 4IpCAVHa7pycRbeU2fzGeJ+lh7GE7iDLYd7wdA7MozY= Subject key identifier: 3B:C2:12:BD:47:57:05:27:D4:87:1B:A8:71:D8:A4:8C:1F:85:04:44 Authority key identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 Certificate issuer: /CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Certificate serial: 11C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft Manifest number: 11A6 Signing time: Sat 24 Jan 2026 16:54:51 +0000 Manifest this update: Sat 24 Jan 2026 16:54:50 +0000 Manifest next update: Sat 31 Jan 2026 16:54:50 +0000 Files and hashes: 1: zFkhdtiMQj-IWbUYtq0zT_92dAk.crl (hash: HvvYqP2PBjWRYcYCnxk5dB3AX+jjszHNbk2AvqKoZBU=) 2: 23A0D39C0F1D11E991F4271EC4F9AE02.roa (hash: 0aF9iAN+3RVH4J1O6kdqQLay7pM2xBWN/Y0/JqEVjB4=) 3: 53BDA2F60F1A11E9B3F2A713C4F9AE02.roa (hash: X6YwhVSJsRk4vRctAp4yh1iloPqdQuAk/cq6rLQ/5Io=) 4: 5488F6EA0F1A11E9B3F2A713C4F9AE02.roa (hash: I1Ooxb/QxZtnwvTSGkb227BhEGDqKjHAGb9PCGADRjg=) 5: 552292460F1A11E9B3F2A713C4F9AE02.roa (hash: aQ6IFtryhMAcftZ8/U9VLVpz3iJ+2Www/ebnR7Mk7tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4553 (0x11c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Validity Not Before: Jan 24 16:54:50 2026 GMT Not After : Jan 31 16:54:50 2026 GMT Subject: CN=6974f95a-553d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:40:25:ea:c4:f9:7a:ee:ff:d9:52:7f:bc:eb: 9c:64:20:03:73:ad:6e:76:a8:57:47:b7:6a:be:86: ac:ff:e4:4a:16:34:37:45:0b:ca:68:99:ef:63:96: 5c:5a:fb:9c:e6:c1:70:fb:f8:b3:e1:92:b1:f6:0b: 59:70:d9:43:e7:be:23:35:6f:a4:f9:c3:6b:24:30: 97:91:fb:4e:7a:d2:58:d0:34:8f:1c:cb:99:03:37: b8:93:83:6a:b5:26:9c:8f:95:18:8b:f6:b7:c5:ed: e0:aa:3f:74:79:f6:79:43:01:e5:78:e6:ab:eb:1a: 2c:c0:37:2f:e3:4d:6f:0f:c0:1b:4b:f5:ea:02:8d: 50:07:0c:fd:96:0a:9b:e6:11:20:0d:ac:e3:b6:b6: c6:0b:b0:0e:16:69:fb:aa:2b:dd:b2:a7:5c:3f:07: 29:a2:e7:94:07:cf:da:88:d9:c3:96:2d:d8:39:dc: ce:8f:38:2c:70:ac:82:c0:c4:24:f0:a6:38:6c:89: ec:88:4b:ef:57:9e:63:2f:d1:9f:f3:9d:c3:5c:2c: 69:d3:1d:d9:e1:5a:08:0f:a7:77:d7:5d:55:d3:55: a6:68:66:66:94:11:ee:cc:51:fc:51:bc:6f:c2:32: 29:bf:a1:f4:97:cb:9d:af:52:c4:3a:4c:39:4d:a5: c1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C2:12:BD:47:57:05:27:D4:87:1B:A8:71:D8:A4:8C:1F:85:04:44 X509v3 Authority Key Identifier: keyid:CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:ab:1d:ec:28:73:99:2c:72:73:ad:6b:d5:2e:ab:d2:47:b2: c4:19:c5:c2:c2:c1:c7:e5:c1:17:6a:a5:d4:6f:75:8a:39:29: e7:7c:29:c0:0b:53:cc:36:a8:82:f6:39:16:e5:f4:6d:d0:c4: e9:bd:d1:27:24:e2:e3:60:e3:56:44:fe:78:97:09:e3:75:a0: 3f:59:60:00:9d:41:30:ca:96:74:ca:31:a0:48:6d:54:c8:5e: d6:1e:34:27:6b:f9:21:8e:fd:68:bc:d8:6a:94:67:38:f0:85: ce:16:07:19:51:df:dd:5f:81:5a:7e:4b:92:a6:3b:d9:7f:8c: d5:1b:b5:68:4f:60:a2:62:bc:20:31:d3:60:a1:a5:52:9f:98: 0b:36:81:d5:35:57:a1:9a:a3:04:4a:82:08:2a:98:0e:2f:3f: 72:a3:58:c0:bb:55:a8:77:b2:81:5b:02:1e:77:0f:58:8c:ff: 6a:bb:04:34:1f:e5:a2:f0:ce:12:c6:d1:0a:d7:c0:ad:55:60: fd:a1:38:6e:e2:48:04:3c:42:0d:a7:ee:16:b4:11:1b:94:7d: 43:1b:a4:76:03:38:16:97:28:d8:cd:43:09:9b:3e:56:71:b3: 38:ab:4e:9f:88:5a:1e:11:1a:f8:e3:63:b3:4d:ef:ee:da:a7: b3:ac:29:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKENDNTkyMTc2RDg4QzQyM0Y4ODU5QjUxOEI2QUQzMzRG RkY3Njc0MDkwHhcNMjYwMTI0MTY1NDUwWhcNMjYwMTMxMTY1NDUwWjAYMRYwFAYD VQQDDA02OTc0Zjk1YS01NTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkAl6sT5eu7/2VJ/vOucZCADc61udqhXR7dqvoas/+RKFjQ3RQvKaJnvY5Zc Wvuc5sFw+/iz4ZKx9gtZcNlD574jNW+k+cNrJDCXkftOetJY0DSPHMuZAze4k4Nq tSacj5UYi/a3xe3gqj90efZ5QwHleOar6xoswDcv401vD8AbS/XqAo1QBwz9lgqb 5hEgDazjtrbGC7AOFmn7qivdsqdcPwcpoueUB8/aiNnDli3YOdzOjzgscKyCwMQk 8KY4bInsiEvvV55jL9Gf853DXCxp0x3Z4VoID6d3111V01WmaGZmlBHuzFH8Ubxv wjIpv6H0l8udr1LEOkw5TaXBRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvCEr1H VwUn1IcbqHHYpIwfhQREMB8GA1UdIwQYMBaAFMxZIXbYjEI/iFm1GLatM0//dnQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9CREZCRjE4NjBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFqLUlXYlVZdHEwelRfOTJk QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pGa2hkdGlNUWotSVdiVVl0cTB6VF85MmRBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9CREZCRjE4NjBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFq LUlXYlVZdHEwelRfOTJkQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxqx3sKHOZLHJzrWvVLqvSR7LEGcXCwsHH5cEXaqXUb3WKOSnnfCnA C1PMNqiC9jkW5fRt0MTpvdEnJOLjYONWRP54lwnjdaA/WWAAnUEwypZ0yjGgSG1U yF7WHjQna/khjv1ovNhqlGc48IXOFgcZUd/dX4FafkuSpjvZf4zVG7VoT2CiYrwg MdNgoaVSn5gLNoHVNVehmqMESoIIKpgOLz9yo1jAu1Wod7KBWwIedw9YjP9quwQ0 H+Wi8M4SxtEK18CtVWD9oThu4kgEPEINp+4WtBEblH1DG6R2AzgWlyjYzUMJmz5W cbM4q06fiFoeERr442OzTe/u2qezrCkg -----END CERTIFICATE-----Generated at Sun Jan 25 15:45:27 2026 by rpki-client