This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft File: cz1KHp8pnM0_jnJKteer9Ci7GV0.mft (raw, json) Hash identifier: AznX1Hv5kY/KUNP4hZ9FxmkP/2vUuF5EQsTsuCDLv3E= Subject key identifier: CE:88:7C:10:D1:FF:D2:07:89:25:92:E3:1F:49:59:A9:48:C6:8D:E2 Authority key identifier: 73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D Certificate issuer: /CN=A91DE500/serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft Manifest number: 0170 Signing time: Sun 11 Jan 2026 03:13:39 +0000 Manifest this update: Sun 11 Jan 2026 03:13:38 +0000 Manifest next update: Sun 18 Jan 2026 03:13:38 +0000 Files and hashes: 1: cz1KHp8pnM0_jnJKteer9Ci7GV0.crl (hash: LxRAUaxu5GdFtlTcGe8ggMQZooekmnCjJYyujiZr/ZI=) 2: D035B7BE5BC711F097260D5EC4F9AE02.roa (hash: AlpyGioYVyajcJ7eEz9QWJBXQdVphfXg8wGbaRLMJmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 03:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Validity Not Before: Jan 11 03:13:38 2026 GMT Not After : Jan 18 03:13:38 2026 GMT Subject: CN=69631563-59aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3c:08:2e:3c:46:dc:39:9a:45:25:c5:48:4b: 47:8d:9f:9f:ab:69:d6:80:f7:0b:b1:5f:3c:70:be: 5b:f4:0f:7e:d1:2f:03:e3:e2:97:4f:28:2b:52:50: e6:80:23:46:d3:7e:35:f6:e8:d3:2e:ea:ba:a9:79: fc:d3:f0:56:a6:53:4f:1d:07:b3:d8:78:a1:84:b5: 37:85:b7:ba:25:6a:78:01:e8:08:ba:ac:3b:79:97: fc:9a:64:53:94:84:76:dd:87:31:cb:36:4e:4e:aa: 2a:48:4a:e6:ba:2c:a2:db:2e:71:9a:a5:c3:b4:5b: b8:71:01:af:5c:f7:16:ec:a4:fa:58:a2:62:72:61: 8c:c7:c1:04:40:cd:24:76:bc:a8:ee:0d:eb:e2:20: 19:67:f1:3a:43:d2:54:de:22:85:9d:84:b4:54:df: a5:a2:e0:74:f0:22:94:e6:3f:b7:25:3a:c1:c0:be: 90:5b:67:71:62:35:5d:3f:37:4b:94:c6:4c:e1:5a: c7:a2:39:22:26:62:fc:20:12:17:b7:2c:ad:c5:fa: cd:f1:cd:6c:0e:a7:18:91:2c:09:85:6d:37:e9:87: 27:56:50:54:f7:94:a2:a8:c6:a7:8e:2d:50:ab:d5: 96:5a:8b:47:68:5d:f7:e1:fb:9d:5e:c5:bf:c4:77: 78:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:88:7C:10:D1:FF:D2:07:89:25:92:E3:1F:49:59:A9:48:C6:8D:E2 X509v3 Authority Key Identifier: keyid:73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:9e:94:85:16:0f:31:7a:5c:de:15:0c:95:f7:8c:eb:0d:0d: 79:7c:a8:fa:e8:40:d1:4d:d4:70:b6:c2:45:df:67:1a:09:e4: 60:b3:ea:64:06:a5:88:8a:c2:d8:5d:61:0a:5a:a0:d8:f7:0e: a2:62:0b:08:3d:27:bb:41:09:b3:ad:c0:69:0f:ce:aa:fa:3c: ea:57:51:e4:6d:e6:5d:73:e2:77:db:50:23:91:f3:d0:74:45: 08:47:e5:86:50:85:47:ae:04:c1:03:5b:48:9d:29:f1:fd:80: f2:3a:c7:ba:21:f9:2d:39:89:80:7c:8f:68:e5:11:f4:f3:53: b7:3f:88:8b:4b:54:db:2d:38:5f:31:d4:fb:5c:fa:02:4f:3a: 70:2e:fb:96:fc:e0:d0:b6:97:21:7c:66:37:27:88:10:77:59: 03:e0:06:28:f8:a2:e4:eb:75:82:cd:d3:0f:40:87:ba:5e:91: b9:95:09:6e:cc:b4:bc:1e:e7:de:f8:94:a6:e7:e9:c2:88:e9: 76:ab:41:e6:2b:27:fa:b1:a2:fb:aa:76:b7:24:65:70:5b:d0: 2f:4b:ef:43:c5:ac:ce:44:d3:59:11:54:e8:99:7d:2e:6b:ad: b0:0c:e3:ca:8f:35:fe:a4:c1:7f:e1:9d:b4:96:9f:2b:78:5a: 77:7c:b2:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKDczM0Q0QTFFOUYyOTlDQ0QzRjhFNzI0QUI1RTdBQkY0 MjhCQjE5NUQwHhcNMjYwMTExMDMxMzM4WhcNMjYwMTE4MDMxMzM4WjAYMRYwFAYD VQQDDA02OTYzMTU2My01OWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjwILjxG3DmaRSXFSEtHjZ+fq2nWgPcLsV88cL5b9A9+0S8D4+KXTygrUlDm gCNG03419ujTLuq6qXn80/BWplNPHQez2HihhLU3hbe6JWp4AegIuqw7eZf8mmRT lIR23YcxyzZOTqoqSErmuiyi2y5xmqXDtFu4cQGvXPcW7KT6WKJicmGMx8EEQM0k dryo7g3r4iAZZ/E6Q9JU3iKFnYS0VN+louB08CKU5j+3JTrBwL6QW2dxYjVdPzdL lMZM4VrHojkiJmL8IBIXtyytxfrN8c1sDqcYkSwJhW036YcnVlBU95SiqManji1Q q9WWWotHaF334fudXsW/xHd4PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6IfBDR /9IHiSWS4x9JWalIxo3iMB8GA1UdIwQYMBaAFHM9Sh6fKZzNP45ySrXnq/Qouxld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC80OUU2RkU0NkM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5NMF9qbkpLdGVlcjlDaTdH VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6MUtIcDhwbk0wX2puSkt0ZWVyOUNpN0dWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC80OUU2RkU0NkM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5N MF9qbkpLdGVlcjlDaTdHVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWnpSFFg8xelzeFQyV94zrDQ15fKj66EDRTdRwtsJF32caCeRgs+pk BqWIisLYXWEKWqDY9w6iYgsIPSe7QQmzrcBpD86q+jzqV1HkbeZdc+J321AjkfPQ dEUIR+WGUIVHrgTBA1tInSnx/YDyOse6IfktOYmAfI9o5RH081O3P4iLS1TbLThf MdT7XPoCTzpwLvuW/ODQtpchfGY3J4gQd1kD4AYo+KLk63WCzdMPQIe6XpG5lQlu zLS8Hufe+JSm5+nCiOl2q0HmKyf6saL7qna3JGVwW9AvS+9DxazORNNZEVTomX0u a62wDOPKjzX+pMF/4Z20lp8reFp3fLLE -----END CERTIFICATE-----Generated at Sun Jan 11 15:11:23 2026 by rpki-client