This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft File: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft (raw, json) Hash identifier: f/w9hfmQZoZlZ1D7MuQx4s6hiRt1EDXFQNsMMxrYNjc= Subject key identifier: 8A:0F:C4:CA:4B:3A:6D:BA:1E:95:F5:2E:00:DA:C0:65:83:8A:E0:37 Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 Certificate issuer: /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Certificate serial: 0292 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft Manifest number: 028D Signing time: Sun 11 Jan 2026 00:42:24 +0000 Manifest this update: Sun 11 Jan 2026 00:42:23 +0000 Manifest next update: Sun 18 Jan 2026 00:42:23 +0000 Files and hashes: 1: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl (hash: hD+mAZ5eHxWTg4bdHWMufRnNhKIcTePrFiae8nX2Ias=) 2: 71CE3962337511EDAE4C4121C4F9AE02.roa (hash: sxVzKfc267mIu+gOhFU373beNXbIm7xeSE4h5TdhNYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 00:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912672E, serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Validity Not Before: Jan 11 00:42:23 2026 GMT Not After : Jan 18 00:42:23 2026 GMT Subject: CN=6962f1ef-9d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:74:32:95:36:55:14:e9:00:b0:63:27:52:06: ca:3e:24:bb:29:ce:3a:6f:86:2e:34:50:b5:ac:48: 0f:c8:af:f7:ff:6b:e0:41:93:c3:9e:a5:4a:89:f7: 2d:9f:d1:46:b3:9f:50:7a:1c:f2:5b:f7:10:cd:e8: 7d:6c:d8:e8:9d:4d:5c:86:c4:80:8e:f2:5f:61:39: d6:b6:d9:20:be:ad:d7:a7:7d:83:68:e7:02:72:79: d7:0f:34:37:3e:af:e9:ea:a9:18:9e:68:5b:ab:03: 78:9a:c7:78:68:14:f5:3d:29:85:42:36:d8:24:64: 10:04:c3:ef:13:6b:42:1c:9c:3c:e4:f9:a2:0d:1f: 70:0a:ce:47:f9:0b:aa:a6:e4:2f:08:35:70:bb:b5: dc:6c:d3:2b:83:20:82:d0:85:89:9b:c7:1f:5e:34: 00:34:0d:6e:c9:9a:86:bf:91:e0:2e:83:99:45:d2: 0e:09:1a:d2:fa:33:1c:cc:b2:1d:23:42:b1:42:5b: ef:66:c4:cc:7d:54:5b:78:88:21:91:77:75:ee:d0: 16:1f:f8:85:a2:c3:03:76:92:46:fb:92:ff:37:ab: 7a:4a:09:f2:16:33:dc:57:89:83:0e:f2:29:58:79: 5c:81:c4:3f:64:73:11:48:fe:96:a8:e6:ef:75:ca: 17:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0F:C4:CA:4B:3A:6D:BA:1E:95:F5:2E:00:DA:C0:65:83:8A:E0:37 X509v3 Authority Key Identifier: keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:d2:8b:cf:df:0c:a4:1c:75:9f:b5:3a:8b:d5:07:bb:ef:e8: 54:32:35:d6:01:44:16:23:97:7b:14:33:85:db:e6:69:b6:00: 15:89:fa:b4:a8:3d:af:7b:d2:18:f6:45:f8:79:25:ff:4f:18: fd:1e:4d:a2:88:e0:1e:ab:c9:56:a1:71:90:6b:74:f0:a1:ca: 51:45:28:f1:a4:e1:fe:39:c8:1d:4a:97:42:e7:08:db:e9:c9: 8d:e3:95:c0:4f:31:02:c4:f0:b7:86:0e:a8:16:4e:bc:f1:11: 18:b4:8e:e3:5e:0f:5b:72:70:b3:0b:ef:09:8d:db:57:95:68: bd:ec:30:83:4f:7f:4b:1e:17:57:bc:04:e0:02:97:b8:7c:ef: 48:86:52:28:00:9d:68:e1:34:cf:96:88:8a:62:76:ec:36:85: f2:b5:4f:4a:fa:8a:ac:2c:36:60:dd:35:cb:4d:84:cb:ac:90: e4:31:44:f7:36:56:0f:46:a3:9a:58:a6:bc:2c:13:33:3b:6e: 31:b1:0e:3c:a7:9c:c1:cd:ae:7d:85:ee:4d:38:26:19:b2:a0: a9:3e:1b:8d:62:36:59:bc:37:4f:b8:8e:39:6f:25:51:ab:85: 60:fe:6c:59:bb:10:d9:cb:1c:36:4c:b1:5d:4e:a2:a1:c7:b3: a5:e6:d1:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3MkUxMTAvBgNVBAUTKENEQzE4N0E2NDJCNEQ3RUM1MERDQUU1OUEwMDY2RjE0 OEQ1MTA4MDEwHhcNMjYwMTExMDA0MjIzWhcNMjYwMTE4MDA0MjIzWjAYMRYwFAYD VQQDDA02OTYyZjFlZi05ZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXQylTZVFOkAsGMnUgbKPiS7Kc46b4YuNFC1rEgPyK/3/2vgQZPDnqVKifct n9FGs59QehzyW/cQzeh9bNjonU1chsSAjvJfYTnWttkgvq3Xp32DaOcCcnnXDzQ3 Pq/p6qkYnmhbqwN4msd4aBT1PSmFQjbYJGQQBMPvE2tCHJw85PmiDR9wCs5H+Quq puQvCDVwu7XcbNMrgyCC0IWJm8cfXjQANA1uyZqGv5HgLoOZRdIOCRrS+jMczLId I0KxQlvvZsTMfVRbeIghkXd17tAWH/iFosMDdpJG+5L/N6t6SgnyFjPcV4mDDvIp WHlcgcQ/ZHMRSP6WqObvdcoX5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIoPxMpL Om26HpX1LgDawGWDiuA3MB8GA1UdIwQYMBaAFM3Bh6ZCtNfsUNyuWaAGbxSNUQgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjcyRS9BRjQ2NjU3NDMz NzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEteFEzSzVab0FadkZJMVJD QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pjR0hwa0swMS14UTNLNVpvQVp2RkkxUkNBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjcyRS9BRjQ2NjU3NDMzNzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEt eFEzSzVab0FadkZJMVJDQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDB0ovP3wykHHWftTqL1Qe77+hUMjXWAUQWI5d7FDOF2+ZptgAVifq0 qD2ve9IY9kX4eSX/Txj9Hk2iiOAeq8lWoXGQa3TwocpRRSjxpOH+OcgdSpdC5wjb 6cmN45XATzECxPC3hg6oFk688REYtI7jXg9bcnCzC+8JjdtXlWi97DCDT39LHhdX vATgApe4fO9IhlIoAJ1o4TTPloiKYnbsNoXytU9K+oqsLDZg3TXLTYTLrJDkMUT3 NlYPRqOaWKa8LBMzO24xsQ48p5zBza59he5NOCYZsqCpPhuNYjZZvDdPuI45byVR q4Vg/mxZuxDZyxw2TLFdTqKhx7Ol5tFF -----END CERTIFICATE-----Generated at Sun Jan 11 06:53:46 2026 by rpki-client