This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft File: zFfgNkMaXqPBcqpyg0Aa88StXFk.mft (raw, json) Hash identifier: I/yVXpxcbpFf96Q1w3/YIb80OaLWTYoO7P3HrRPZs/U= Subject key identifier: 02:A0:95:A8:D8:A6:9E:35:27:B8:BC:6C:3E:24:58:AE:66:71:5E:B2 Authority key identifier: CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 Certificate issuer: /CN=A91FDC78/serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Certificate serial: 097D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft Manifest number: 096B Signing time: Sat 24 Jan 2026 19:33:56 +0000 Manifest this update: Sat 24 Jan 2026 19:33:56 +0000 Manifest next update: Sat 31 Jan 2026 19:33:56 +0000 Files and hashes: 1: zFfgNkMaXqPBcqpyg0Aa88StXFk.crl (hash: 566+MOhTJajE6Mxt/6mYLHobyGx0GHpEGJXW4d9ZGOU=) 2: DA0B639E89E711F08DD17A55C4F9AE02.roa (hash: 92JEuDCm1e9WQ8I7GIzUujJiphmCChYv7JlAxtt8zqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 19:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2429 (0x97d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC78, serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Validity Not Before: Jan 24 19:33:56 2026 GMT Not After : Jan 31 19:33:56 2026 GMT Subject: CN=69751ea4-08d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b3:82:29:87:4a:8d:b5:fc:72:df:7a:5e:d5: 03:ed:52:b1:91:d5:a9:11:11:31:0e:4c:6c:c3:7f: fa:9f:73:e9:a5:da:56:d1:17:9d:02:cf:02:25:05: f6:e7:08:dd:73:0b:37:45:03:40:c5:5b:c8:0f:7c: a6:35:b0:e6:4f:cc:47:75:e0:82:74:17:cf:79:89: bb:3a:f1:54:ef:6e:4c:75:38:03:3e:35:57:75:07: a4:5b:8a:1a:7b:40:15:10:d6:0f:38:cc:30:8b:1b: 73:fe:84:26:d9:dc:c3:6c:f3:f5:d2:ab:ac:61:e2: cc:b6:56:a1:c8:97:83:a0:6a:89:5c:e2:e2:6e:26: 13:09:48:db:8e:64:f6:57:30:47:c9:a8:c6:88:33: f1:8f:41:36:fb:e1:ec:70:77:3d:82:51:e5:50:84: a0:bd:1a:4e:63:05:10:6c:dc:21:3f:ae:a0:d3:5e: 6d:4c:9d:81:7f:1d:e3:76:6e:db:89:5e:82:5f:21: 95:2b:eb:d6:48:71:ed:75:34:b3:d8:5a:96:d7:5d: fd:f5:2e:b2:cd:2a:4c:6c:b0:08:58:ff:e3:09:76: 50:1b:7b:b6:07:19:ca:31:63:ac:6f:af:84:3b:92: c7:1e:63:b5:19:2f:95:b2:9f:7c:b1:84:e4:a6:71: 46:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A0:95:A8:D8:A6:9E:35:27:B8:BC:6C:3E:24:58:AE:66:71:5E:B2 X509v3 Authority Key Identifier: keyid:CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a9:55:be:f6:ce:26:da:aa:c8:3f:82:3a:57:bb:9b:1e:84: 10:8d:59:5d:1b:01:14:f7:00:01:a6:8d:15:f1:3e:6c:4a:11: 0d:ff:0e:d9:ef:3f:a0:64:0d:3e:2a:23:de:b6:e6:05:f1:79: 9b:91:2f:b0:ba:0e:40:9f:f7:9e:e1:b7:15:21:90:8a:a4:f4: c1:a1:b7:cc:ab:a8:ef:82:61:8b:28:be:4c:25:17:d1:40:0e: 01:78:d0:bd:41:aa:67:42:ff:af:05:b0:c0:99:3f:3a:ad:28: 4c:51:ce:c9:3f:91:ac:cd:d6:83:c8:f0:93:d2:8c:36:c0:36: ee:9b:57:ed:ad:c6:eb:c1:5e:86:83:c6:a4:77:9a:4d:e0:5c: 88:03:14:b2:0b:f5:85:20:6a:d0:5e:97:9a:be:b2:b4:e3:7c: cd:06:1f:83:72:61:7a:52:4c:39:82:3e:87:71:8d:75:87:06: db:25:1b:08:67:3d:b8:b1:e9:21:57:05:48:d7:40:01:42:fe: c6:c0:fb:e8:36:ad:09:bf:eb:05:be:3b:b1:3a:07:44:93:05: cc:7c:cf:16:96:65:c8:20:f4:25:0f:5c:37:24:77:55:08:ff: ef:3f:a3:04:2a:79:7a:ec:48:57:59:35:44:f1:6a:a0:03:84: ed:f7:ad:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDNzgxMTAvBgNVBAUTKENDNTdFMDM2NDMxQTVFQTNDMTcyQUE3MjgzNDAxQUYz QzRBRDVDNTkwHhcNMjYwMTI0MTkzMzU2WhcNMjYwMTMxMTkzMzU2WjAYMRYwFAYD VQQDDA02OTc1MWVhNC0wOGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrOCKYdKjbX8ct96XtUD7VKxkdWpERExDkxsw3/6n3PppdpW0RedAs8CJQX2 5wjdcws3RQNAxVvID3ymNbDmT8xHdeCCdBfPeYm7OvFU725MdTgDPjVXdQekW4oa e0AVENYPOMwwixtz/oQm2dzDbPP10qusYeLMtlahyJeDoGqJXOLibiYTCUjbjmT2 VzBHyajGiDPxj0E2++HscHc9glHlUISgvRpOYwUQbNwhP66g015tTJ2Bfx3jdm7b iV6CXyGVK+vWSHHtdTSz2FqW11399S6yzSpMbLAIWP/jCXZQG3u2BxnKMWOsb6+E O5LHHmO1GS+Vsp98sYTkpnFGawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKglajY pp41J7i8bD4kWK5mcV6yMB8GA1UdIwQYMBaAFMxX4DZDGl6jwXKqcoNAGvPErVxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREM3OC8xNTQ3NDAwOEFF QUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhxUEJjcXB5ZzBBYTg4U3RY RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGZmdOa01hWHFQQmNxcHlnMEFhODhTdFhGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REM3OC8xNTQ3NDAwOEFFQUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhx UEJjcXB5ZzBBYTg4U3RYRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeqVW+9s4m2qrIP4I6V7ubHoQQjVldGwEU9wABpo0V8T5sShEN/w7Z 7z+gZA0+KiPetuYF8XmbkS+wug5An/ee4bcVIZCKpPTBobfMq6jvgmGLKL5MJRfR QA4BeNC9QapnQv+vBbDAmT86rShMUc7JP5GszdaDyPCT0ow2wDbum1ftrcbrwV6G g8akd5pN4FyIAxSyC/WFIGrQXpeavrK043zNBh+DcmF6Ukw5gj6HcY11hwbbJRsI Zz24sekhVwVI10ABQv7GwPvoNq0Jv+sFvjuxOgdEkwXMfM8WlmXIIPQlD1w3JHdV CP/vP6MEKnl67EhXWTVE8WqgA4Tt960W -----END CERTIFICATE-----Generated at Sun Jan 25 15:38:24 2026 by rpki-client