This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft File: zQysDn6E4-geSHYXTiwhQIUJQmk.mft (raw, json) Hash identifier: A34V41Q5zdE/ShFz6MopbeyTMOsNS8vhGqHnGQ0XtDI= Subject key identifier: 9F:52:F8:B7:57:3A:C8:32:85:7A:92:B0:0B:7A:B4:A8:0F:D5:67:CB Authority key identifier: CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69 Certificate issuer: /CN=A914D249/serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269 Certificate serial: 037E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft Manifest number: 0373 Signing time: Sun 11 Jan 2026 00:06:46 +0000 Manifest this update: Sun 11 Jan 2026 00:06:45 +0000 Manifest next update: Sun 18 Jan 2026 00:06:45 +0000 Files and hashes: 1: zQysDn6E4-geSHYXTiwhQIUJQmk.crl (hash: PCGnrOuHZfMggJhvYd9TF8G6AQjEc8Ht5xmGlzIEjS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 894 (0x37e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D249, serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269 Validity Not Before: Jan 11 00:06:45 2026 GMT Not After : Jan 18 00:06:45 2026 GMT Subject: CN=6962e996-1076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4f:d2:3c:7e:d5:65:25:ef:8f:f2:a4:ee:9f: 78:9c:95:05:89:7d:21:58:82:76:45:84:e9:32:0c: 2f:f7:8f:c8:4d:d1:4d:70:a6:72:79:57:8e:8f:b0: bf:d3:1d:13:23:5b:01:79:1f:8d:bd:ce:cd:47:d0: c7:1f:9a:7a:f0:1b:84:1b:76:f0:52:c7:b9:de:da: f0:7f:95:d8:99:7c:56:c4:1e:69:38:c3:a1:31:c8: 26:87:3b:64:b2:40:18:e2:1b:f4:b2:4a:7e:16:71: 68:d7:7a:00:69:b9:aa:ff:f0:ee:5e:29:5b:55:f3: 20:a8:38:ee:3c:e2:b1:82:76:47:e4:5f:7d:e5:cf: 44:ca:55:76:96:bc:ad:b7:ac:32:f0:71:08:67:15: c9:5b:90:49:6d:73:03:56:6c:f0:4c:06:c7:2b:4a: 17:00:a5:47:28:62:81:48:af:ca:e7:2d:44:14:2b: fd:74:c1:a6:93:03:fa:ab:9e:1b:ab:e0:a8:2a:46: 1b:18:88:f1:aa:c9:4b:ed:83:2e:55:25:8d:d5:70: 74:cc:4e:9f:94:ba:73:df:fd:c7:c2:8d:92:97:c0: 51:e7:82:99:4f:2e:30:cf:9c:42:ad:bf:06:d2:d6: 84:ad:f8:81:6e:44:56:73:e4:ab:f1:61:c9:b3:d3: 08:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:52:F8:B7:57:3A:C8:32:85:7A:92:B0:0B:7A:B4:A8:0F:D5:67:CB X509v3 Authority Key Identifier: keyid:CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:5a:90:54:7e:bd:0b:65:ec:49:b8:ed:6a:c2:c1:b0:d5:78: 37:73:84:b9:3d:24:2e:67:41:da:ac:d5:30:2d:42:86:f8:b0: 28:96:92:db:b2:b3:bf:69:b1:79:5e:e5:b0:4a:38:9f:b0:e0: a6:50:6f:05:8f:46:5e:37:c2:f5:fd:98:70:c2:46:c7:06:41: c5:32:1c:3e:82:7f:4e:9e:4b:5b:91:b3:b5:4e:23:ba:0c:da: 55:7d:79:e9:3c:74:6a:1e:18:61:7a:a3:6c:33:38:29:c6:8e: 71:24:75:18:a5:c9:d7:4b:3c:92:e8:44:cd:09:12:e5:f6:0b: 6f:42:ce:72:3b:d1:39:28:6d:3d:44:70:87:38:c8:64:57:00: 06:26:07:a3:16:1f:32:90:e7:7d:79:c3:31:47:2b:88:df:ff: a8:3e:1b:26:91:8b:88:f1:fc:56:71:a4:f8:95:5e:f1:ed:7d: d9:3a:39:ac:a1:2d:f1:c6:eb:0f:01:2f:5f:51:e4:6b:36:0f: 2e:a8:b5:a0:26:e0:59:41:98:a3:06:5b:91:08:55:18:fb:e3: c5:ff:f1:1d:cf:fd:a2:2d:ca:2d:88:db:6e:55:f7:28:ff:45: 3a:71:5d:f2:28:f1:b2:97:29:fb:a3:3d:b7:be:64:88:10:44: a4:1e:14:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyNDkxMTAvBgNVBAUTKENEMENBQzBFN0U4NEUzRTgxRTQ4NzYxNzRFMkMyMTQw ODUwOTQyNjkwHhcNMjYwMTExMDAwNjQ1WhcNMjYwMTE4MDAwNjQ1WjAYMRYwFAYD VQQDDA02OTYyZTk5Ni0xMDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoE/SPH7VZSXvj/Kk7p94nJUFiX0hWIJ2RYTpMgwv94/ITdFNcKZyeVeOj7C/ 0x0TI1sBeR+Nvc7NR9DHH5p68BuEG3bwUse53trwf5XYmXxWxB5pOMOhMcgmhztk skAY4hv0skp+FnFo13oAabmq//DuXilbVfMgqDjuPOKxgnZH5F995c9EylV2lryt t6wy8HEIZxXJW5BJbXMDVmzwTAbHK0oXAKVHKGKBSK/K5y1EFCv9dMGmkwP6q54b q+CoKkYbGIjxqslL7YMuVSWN1XB0zE6flLpz3/3Hwo2Sl8BR54KZTy4wz5xCrb8G 0taErfiBbkRWc+Sr8WHJs9MIRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9S+LdX OsgyhXqSsAt6tKgP1WfLMB8GA1UdIwQYMBaAFM0MrA5+hOPoHkh2F04sIUCFCUJp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDI0OS83NkNFODQ1NkUw MjUxMUVDQjJGQjBFMjdDNEY5QUUwMi96UXlzRG42RTQtZ2VTSFlYVGl3aFFJVUpR bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pReXNEbjZFNC1nZVNIWVhUaXdoUUlVSlFtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDI0OS83NkNFODQ1NkUwMjUxMUVDQjJGQjBFMjdDNEY5QUUwMi96UXlzRG42RTQt Z2VTSFlYVGl3aFFJVUpRbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArWpBUfr0LZexJuO1qwsGw1Xg3c4S5PSQuZ0HarNUwLUKG+LAolpLb srO/abF5XuWwSjifsOCmUG8Fj0ZeN8L1/ZhwwkbHBkHFMhw+gn9OnktbkbO1TiO6 DNpVfXnpPHRqHhhheqNsMzgpxo5xJHUYpcnXSzyS6ETNCRLl9gtvQs5yO9E5KG09 RHCHOMhkVwAGJgejFh8ykOd9ecMxRyuI3/+oPhsmkYuI8fxWcaT4lV7x7X3ZOjms oS3xxusPAS9fUeRrNg8uqLWgJuBZQZijBluRCFUY++PF//Edz/2iLcotiNtuVfco /0U6cV3yKPGylyn7oz23vmSIEESkHhSr -----END CERTIFICATE-----Generated at Mon Jan 12 10:59:10 2026 by rpki-client