This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft File: z-PzHk8zetOBIBvzOgGmhfsBal4.mft (raw, json) Hash identifier: jOHAqmv2MtCqaRaVu1osx+hy3n+P5Ul3+R4UqBntRa8= Subject key identifier: 98:92:38:5E:D8:EA:DB:45:3F:2A:E9:A3:74:C5:A5:E2:13:F9:D6:68 Authority key identifier: CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E Certificate issuer: /CN=A9128E00/serialNumber=CFE3F31E4F337AD381201BF33A01A685FB016A5E Certificate serial: 0D7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft Manifest number: 0D73 Signing time: Tue 06 Jan 2026 17:37:14 +0000 Manifest this update: Tue 06 Jan 2026 17:37:13 +0000 Manifest next update: Tue 13 Jan 2026 17:37:13 +0000 Files and hashes: 1: z-PzHk8zetOBIBvzOgGmhfsBal4.crl (hash: DMrCSLQRtPjWv+yf6d6u06g/Cg8/qFCbUSFbTbg726w=) 2: D23C5270E02111E9B4A3923FC4F9AE02.roa (hash: zkAhSZ57x5i2z1ecY4hViVs+riusX3XK2gSVsFUEBsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.crl rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Jan 2026 17:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3451 (0xd7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128E00, serialNumber=CFE3F31E4F337AD381201BF33A01A685FB016A5E Validity Not Before: Jan 6 17:37:13 2026 GMT Not After : Jan 13 17:37:13 2026 GMT Subject: CN=695d484a-f481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:97:f8:e3:43:61:72:c7:fb:2e:d2:f8:c9:66: 6f:e7:b0:9c:57:27:f2:de:86:53:ab:5a:c7:42:e4: 76:13:cb:d9:bd:e1:af:95:5a:ce:ac:0b:de:f3:36: e0:5b:8f:c0:7b:1c:b6:ef:7a:2a:a3:d7:c4:1e:4a: a9:bf:f8:2d:64:2f:1b:ae:61:85:c9:57:f7:82:0f: e9:f4:51:f3:54:12:0d:7a:63:14:15:2b:92:c8:ef: 39:45:1b:89:37:d7:32:49:71:51:02:7c:f2:7c:27: c6:cf:ab:14:27:ea:6c:34:25:23:46:94:60:9b:b1: cd:e5:d6:d9:07:35:af:98:d4:70:7a:a1:5f:a1:d2: 59:9c:79:25:d7:f3:dc:ba:d8:81:cb:72:ee:ba:d7: a7:7c:97:93:b2:32:60:b4:1f:35:cb:b2:48:db:4f: a1:0e:fd:e4:3c:4e:62:b3:43:90:55:15:19:20:74: 32:e4:30:90:76:18:00:92:d8:87:c5:b0:39:3f:4a: 46:c8:48:14:eb:fa:e0:2f:4b:6a:24:24:f4:f2:4c: 20:5f:f4:3e:77:2f:9e:32:c7:db:c0:03:4a:cd:dd: b5:ed:ea:79:8a:7d:e8:50:08:40:1a:4c:49:be:7e: 2f:23:24:00:da:11:db:bb:26:44:8e:5a:17:5a:b4: bf:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:92:38:5E:D8:EA:DB:45:3F:2A:E9:A3:74:C5:A5:E2:13:F9:D6:68 X509v3 Authority Key Identifier: keyid:CF:E3:F3:1E:4F:33:7A:D3:81:20:1B:F3:3A:01:A6:85:FB:01:6A:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z-PzHk8zetOBIBvzOgGmhfsBal4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128E00/8991EB9EE02011E982B37A3AC4F9AE02/z-PzHk8zetOBIBvzOgGmhfsBal4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:31:c6:01:3f:c2:47:ba:c6:30:4a:9e:84:3d:76:ce:c3:f6: 65:d9:de:2d:a8:bf:6e:2a:d4:32:bb:90:d1:be:49:aa:a3:03: fd:f4:53:03:d5:aa:23:51:90:a1:06:b8:b7:07:df:a8:03:6f: 2c:c3:9d:55:5b:84:61:42:4b:95:8f:a6:d4:7f:b2:28:9b:0f: f0:83:6a:32:ca:91:ee:c0:c8:6d:c4:ba:09:5b:dc:20:08:6e: 25:de:d4:c8:23:58:94:5c:30:90:14:f6:c6:20:ed:04:15:5c: de:f6:21:a6:0b:a4:3a:05:32:69:98:c6:21:da:3a:c1:b4:f1: 3d:f4:92:a7:6a:b7:b6:36:0a:f7:4d:00:63:58:c1:34:75:59: 32:7c:92:ae:e9:cc:d0:9e:49:c1:0b:16:ab:b8:53:07:ed:13: ea:f6:a7:54:b0:12:f9:ba:ca:e6:08:27:e9:aa:72:4b:8b:1b: e1:dc:34:6f:3f:94:92:d8:c4:7b:82:b6:c4:18:9b:db:cb:9c: 7d:c2:e1:47:4a:02:88:2b:03:ca:95:a8:28:ef:eb:9f:9f:58: 90:d4:81:90:29:6e:1a:56:a4:a5:be:b4:8b:4d:98:99:0c:53: 7e:fe:80:20:80:16:b7:a7:d4:cb:d5:e2:2a:20:b7:49:fa:62: 65:f2:5f:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhFMDAxMTAvBgNVBAUTKENGRTNGMzFFNEYzMzdBRDM4MTIwMUJGMzNBMDFBNjg1 RkIwMTZBNUUwHhcNMjYwMTA2MTczNzEzWhcNMjYwMTEzMTczNzEzWjAYMRYwFAYD VQQDDA02OTVkNDg0YS1mNDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpf440Nhcsf7LtL4yWZv57CcVyfy3oZTq1rHQuR2E8vZveGvlVrOrAve8zbg W4/Aexy273oqo9fEHkqpv/gtZC8brmGFyVf3gg/p9FHzVBINemMUFSuSyO85RRuJ N9cySXFRAnzyfCfGz6sUJ+psNCUjRpRgm7HN5dbZBzWvmNRweqFfodJZnHkl1/Pc utiBy3LuutenfJeTsjJgtB81y7JI20+hDv3kPE5is0OQVRUZIHQy5DCQdhgAktiH xbA5P0pGyEgU6/rgL0tqJCT08kwgX/Q+dy+eMsfbwANKzd217ep5in3oUAhAGkxJ vn4vIyQA2hHbuyZEjloXWrS/lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJiSOF7Y 6ttFPyrpo3TFpeIT+dZoMB8GA1UdIwQYMBaAFM/j8x5PM3rTgSAb8zoBpoX7AWpe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEUwMC84OTkxRUI5RUUw MjAxMUU5ODJCMzdBM0FDNEY5QUUwMi96LVB6SGs4emV0T0JJQnZ6T2dHbWhmc0Jh bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3otUHpIazh6ZXRPQklCdnpPZ0dtaGZzQmFsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEUwMC84OTkxRUI5RUUwMjAxMUU5ODJCMzdBM0FDNEY5QUUwMi96LVB6SGs4emV0 T0JJQnZ6T2dHbWhmc0JhbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyMcYBP8JHusYwSp6EPXbOw/Zl2d4tqL9uKtQyu5DRvkmqowP99FMD 1aojUZChBri3B9+oA28sw51VW4RhQkuVj6bUf7Iomw/wg2oyypHuwMhtxLoJW9wg CG4l3tTII1iUXDCQFPbGIO0EFVze9iGmC6Q6BTJpmMYh2jrBtPE99JKnare2Ngr3 TQBjWME0dVkyfJKu6czQnknBCxaruFMH7RPq9qdUsBL5usrmCCfpqnJLixvh3DRv P5SS2MR7grbEGJvby5x9wuFHSgKIKwPKlago7+ufn1iQ1IGQKW4aVqSlvrSLTZiZ DFN+/oAggBa3p9TL1eIqILdJ+mJl8l9H -----END CERTIFICATE-----Generated at Thu Jan 8 11:29:40 2026 by rpki-client