This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft File: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft (raw, json) Hash identifier: jsAQKZX2bezP4e+rJabjU6NYQBpaJZG2PuBVAdecH+s= Subject key identifier: 18:D4:C0:E4:3D:F0:4E:06:8E:D0:0B:E6:D6:07:10:E0:6A:AD:E0:B8 Authority key identifier: CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34 Certificate issuer: /CN=A9175529/serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534 Certificate serial: 2842 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft Manifest number: 2834 Signing time: Mon 12 Jan 2026 15:28:40 +0000 Manifest this update: Mon 12 Jan 2026 15:28:40 +0000 Manifest next update: Mon 19 Jan 2026 15:28:40 +0000 Files and hashes: 1: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl (hash: EtBpWah35pQhRrEJRaP/v5yKBorwgdfVMHB1BZdj/tI=) 2: 14EC8116B10B11E58EB48F13C4F9AE02.roa (hash: dICqWrTdlFtrMZe68AJTlZkc2xz/VXcxAztydCwI54o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 15:28:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10306 (0x2842) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175529, serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534 Validity Not Before: Jan 12 15:28:40 2026 GMT Not After : Jan 19 15:28:40 2026 GMT Subject: CN=69651328-4a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:be:8e:fc:d9:39:3c:62:bf:93:e2:9a:0c:8d: bf:e8:76:ab:7a:3c:71:58:72:85:71:64:d2:87:de: ac:c2:1e:12:a1:22:3b:29:d9:ac:4a:0e:ed:c3:bf: d7:4c:c3:39:5f:50:47:f4:bc:86:36:b7:19:7d:83: 07:cb:25:90:84:27:7d:7e:4f:1f:b3:a8:1c:85:2c: eb:37:ce:89:a0:fb:73:9e:82:c3:47:1b:ce:96:ef: b5:9d:f2:21:e1:0c:75:5b:47:5d:85:8e:bb:cd:dd: 33:70:ff:6a:ad:49:f2:ab:a4:cc:e9:a4:d9:dd:3b: b4:89:a2:f4:7f:67:cd:ae:fe:ee:c7:95:96:a9:c3: 48:32:17:8e:8e:54:7c:c4:8a:8c:e0:b4:13:66:c7: 9e:1d:aa:e8:fe:4b:f2:53:af:5e:1f:0f:de:16:db: 35:9e:c2:45:2b:3f:ae:6e:3c:78:47:aa:5c:af:55: 3d:a3:86:7a:54:95:a7:59:90:80:7c:82:2e:aa:e6: e7:fd:be:a9:08:21:83:c1:2b:33:17:b8:4d:c1:19: 54:bf:85:17:4a:94:94:c6:3c:ad:9f:16:a6:ee:b7: 31:3d:af:cc:be:f2:fa:16:29:e7:9a:df:de:db:32: da:64:e1:e4:eb:d6:e2:54:fe:b8:38:94:15:58:c2: 29:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D4:C0:E4:3D:F0:4E:06:8E:D0:0B:E6:D6:07:10:E0:6A:AD:E0:B8 X509v3 Authority Key Identifier: keyid:CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:33:73:3c:a0:00:21:a0:14:3f:6a:ab:a5:07:3c:5f:4e:79: e4:a9:4b:c4:5e:e9:dd:b4:e7:3b:e7:f2:4e:c0:2d:58:b5:aa: 37:ff:ed:a4:b0:f9:0a:e1:7c:b6:7f:4a:af:b4:9a:b1:30:a6: 82:94:e1:f3:c6:7a:ca:be:ea:62:db:05:4b:45:5c:e6:24:77: 41:03:11:04:c6:a8:c1:26:74:ff:03:ea:f9:03:92:a5:32:01: 95:fd:0d:e7:21:b7:11:e4:24:37:a1:9a:84:8f:da:bc:7a:56: e0:30:0b:ae:39:4d:2e:aa:07:03:de:70:6a:ff:b9:42:1b:99: 98:15:83:32:1b:0e:9c:ea:32:31:62:6c:bf:6a:0c:e2:de:ca: d5:04:96:1a:fd:42:97:23:ee:eb:e4:ab:13:f3:d1:a6:4a:1f: f0:b1:90:7c:e6:35:df:0e:fb:0f:04:73:03:cd:5e:68:7d:6d: 85:6e:43:c8:ef:ca:02:14:c7:66:73:55:df:97:1e:53:b7:f2: 05:0d:89:57:85:35:45:87:50:f6:f4:2e:8a:94:ae:3b:1a:80: 55:10:25:99:5e:8d:c4:8c:fe:f2:8c:3a:ad:bc:e0:c2:ff:98: 9d:99:62:3d:e3:a3:cc:36:4b:51:de:65:c4:03:31:49:04:80: f3:57:0e:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1MjkxMTAvBgNVBAUTKENFRTY5MzBGNDhENzc0RDY0M0Q1NUNGRkU5OEIxRTYz QTRENjM1MzQwHhcNMjYwMTEyMTUyODQwWhcNMjYwMTE5MTUyODQwWjAYMRYwFAYD VQQDDA02OTY1MTMyOC00YTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxL6O/Nk5PGK/k+KaDI2/6HarejxxWHKFcWTSh96swh4SoSI7KdmsSg7tw7/X TMM5X1BH9LyGNrcZfYMHyyWQhCd9fk8fs6gchSzrN86JoPtznoLDRxvOlu+1nfIh 4Qx1W0ddhY67zd0zcP9qrUnyq6TM6aTZ3Tu0iaL0f2fNrv7ux5WWqcNIMheOjlR8 xIqM4LQTZseeHaro/kvyU69eHw/eFts1nsJFKz+ubjx4R6pcr1U9o4Z6VJWnWZCA fIIuqubn/b6pCCGDwSszF7hNwRlUv4UXSpSUxjytnxam7rcxPa/MvvL6Finnmt/e 2zLaZOHk69biVP64OJQVWMIplQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjUwOQ9 8E4GjtAL5tYHEOBqreC4MB8GA1UdIwQYMBaAFM7mkw9I13TWQ9Vc/+mLHmOk1jU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTUyOS8wQjY2MDA0MEEy MDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGROWkQxVnpfNllzZVk2VFdO VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1YVREMGpYZE5aRDFWel82WXNlWTZUV05UUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTUyOS8wQjY2MDA0MEEyMDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGRO WkQxVnpfNllzZVk2VFdOVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAM3M8oAAhoBQ/aqulBzxfTnnkqUvEXundtOc75/JOwC1Ytao3/+2k sPkK4Xy2f0qvtJqxMKaClOHzxnrKvupi2wVLRVzmJHdBAxEExqjBJnT/A+r5A5Kl MgGV/Q3nIbcR5CQ3oZqEj9q8elbgMAuuOU0uqgcD3nBq/7lCG5mYFYMyGw6c6jIx Ymy/agzi3srVBJYa/UKXI+7r5KsT89GmSh/wsZB85jXfDvsPBHMDzV5ofW2FbkPI 78oCFMdmc1Xflx5Tt/IFDYlXhTVFh1D29C6KlK47GoBVECWZXo3EjP7yjDqtvODC /5idmWI946PMNktR3mXEAzFJBIDzVw4G -----END CERTIFICATE-----Generated at Tue Jan 13 08:30:50 2026 by rpki-client