This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft File: 09zhcUP5z134AE-MZZf7LIzMcEY.mft (raw, json) Hash identifier: 5aKteNaxKspO9UL/3DroNVbmHnM55Q7Zd7yFcjh63HM= Subject key identifier: 42:84:74:49:C3:F2:73:AC:CB:A5:A5:C9:44:71:50:EC:7A:5D:1C:2D Authority key identifier: D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46 Certificate issuer: /CN=A91F7D74/serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft Manifest number: 0100 Signing time: Mon 05 Jan 2026 04:09:36 +0000 Manifest this update: Mon 05 Jan 2026 04:09:35 +0000 Manifest next update: Mon 12 Jan 2026 04:09:35 +0000 Files and hashes: 1: 09zhcUP5z134AE-MZZf7LIzMcEY.crl (hash: K8oyPQfrFq1f9wR9Gj2sxnbIc1RcN7LUwBcQTnT9BpE=) 2: 6A3FA88A693C11EF8B032237C4F9AE02.roa (hash: xlsUk+nBjbtHnwZ4MERgcwqdT/rxsOcTBiheef/VMVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Jan 2026 04:09:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7D74, serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046 Validity Not Before: Jan 5 04:09:35 2026 GMT Not After : Jan 12 04:09:35 2026 GMT Subject: CN=695b3980-4e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ae:de:6c:a4:e8:04:46:8a:af:77:3c:10:71: 99:08:f5:10:8e:5c:c6:5f:09:de:cb:d2:14:f1:56: 78:0c:62:dd:93:2f:de:c2:71:1a:bf:36:52:34:16: 32:9e:a9:84:33:98:39:15:11:29:c6:d2:81:cc:5a: 52:76:b1:74:9a:85:40:2f:d7:6f:99:11:19:75:a2: 0e:a9:d5:19:2b:e9:8d:45:27:99:8d:62:8f:64:86: d2:2d:5b:90:5d:71:49:66:55:74:27:d6:22:18:48: 7c:f2:b8:67:f7:24:62:23:b8:f8:cb:d2:11:99:0e: 71:b7:64:ef:bc:1f:d3:4a:7d:97:d9:3a:0d:90:20: f9:c8:fc:aa:f4:58:41:d7:7e:d7:0d:c2:69:2e:63: 5f:0b:40:98:04:4f:e0:47:97:69:b4:6a:1d:c3:32: a8:d2:07:08:3b:4c:bb:ce:c5:58:90:ba:d3:7e:2c: 91:76:97:bc:a1:72:00:38:0e:63:cf:ef:ec:14:66: 5f:19:aa:17:79:77:00:db:85:0e:74:af:e2:2d:3d: c3:a4:9f:10:8f:8e:3d:fd:1a:a9:a5:52:92:74:d0: c6:0a:81:13:9a:0c:e2:07:5d:36:d7:a4:f3:e3:5d: 38:f0:2d:92:23:8f:a2:0a:c3:6b:0d:ec:9f:a0:f5: d2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:84:74:49:C3:F2:73:AC:CB:A5:A5:C9:44:71:50:EC:7A:5D:1C:2D X509v3 Authority Key Identifier: keyid:D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:83:13:c1:45:0a:85:91:f6:80:e2:32:9b:a9:46:e3:46:d3: 27:22:a0:eb:ce:04:e1:4f:cd:9b:2c:99:87:82:b0:19:48:d7: b0:37:77:ab:c3:51:61:32:0e:51:5b:e3:76:cb:a0:cc:e1:2f: 33:0e:5e:4c:9a:d1:7e:d6:c9:55:dc:5f:18:a9:91:f1:1b:f1: 49:f5:f7:31:52:de:ca:12:39:9b:47:53:ce:df:3a:96:13:f2: 9d:22:0e:b2:42:27:4f:ae:b2:f0:f6:f2:b0:60:c6:4a:e2:00: 47:3f:ac:f6:a2:07:96:13:87:e2:9a:00:96:6b:86:fa:38:5f: b1:74:4a:df:f5:b4:00:0e:61:b0:d6:6f:b1:22:82:5b:a9:b8: 64:23:e6:cc:f4:65:9e:af:73:b9:7c:a2:07:05:3d:85:dc:68: d7:e2:66:b7:4f:33:57:bb:07:63:4f:7b:40:54:bf:c4:f0:ee: 68:aa:59:b6:93:48:62:af:4d:8f:2b:f8:38:27:25:b6:bc:9f: 95:26:55:9b:f1:17:b6:33:99:3e:ed:c1:4c:f9:e0:7e:3e:cc: 61:8d:4f:9e:72:be:05:64:ed:77:21:67:d5:c6:86:81:2a:77: 9d:8e:dc:8e:4d:26:cc:a6:6b:9f:be:05:f3:6d:2e:91:15:20: a9:57:77:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdENzQxMTAvBgNVBAUTKEQzRENFMTcxNDNGOUNGNURGODAwNEY4QzY1OTdGQjJD OENDQzcwNDYwHhcNMjYwMTA1MDQwOTM1WhcNMjYwMTEyMDQwOTM1WjAYMRYwFAYD VQQDDA02OTViMzk4MC00ZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwa7ebKToBEaKr3c8EHGZCPUQjlzGXwney9IU8VZ4DGLdky/ewnEavzZSNBYy nqmEM5g5FREpxtKBzFpSdrF0moVAL9dvmREZdaIOqdUZK+mNRSeZjWKPZIbSLVuQ XXFJZlV0J9YiGEh88rhn9yRiI7j4y9IRmQ5xt2TvvB/TSn2X2ToNkCD5yPyq9FhB 137XDcJpLmNfC0CYBE/gR5dptGodwzKo0gcIO0y7zsVYkLrTfiyRdpe8oXIAOA5j z+/sFGZfGaoXeXcA24UOdK/iLT3DpJ8Qj449/RqppVKSdNDGCoETmgziB10216Tz 41048C2SI4+iCsNrDeyfoPXS/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKEdEnD 8nOsy6WlyURxUOx6XRwtMB8GA1UdIwQYMBaAFNPc4XFD+c9d+ABPjGWX+yyMzHBG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q3NC8zNzhEOUEwQTY5 MjgxMUVGQUY3MTE0ODdDNEY5QUUwMi8wOXpoY1VQNXoxMzRBRS1NWlpmN0xJek1j RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5emhjVVA1ejEzNEFFLU1aWmY3TEl6TWNFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0Q3NC8zNzhEOUEwQTY5MjgxMUVGQUY3MTE0ODdDNEY5QUUwMi8wOXpoY1VQNXox MzRBRS1NWlpmN0xJek1jRVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEgxPBRQqFkfaA4jKbqUbjRtMnIqDrzgThT82bLJmHgrAZSNewN3er w1FhMg5RW+N2y6DM4S8zDl5MmtF+1slV3F8YqZHxG/FJ9fcxUt7KEjmbR1PO3zqW E/KdIg6yQidPrrLw9vKwYMZK4gBHP6z2ogeWE4fimgCWa4b6OF+xdErf9bQADmGw 1m+xIoJbqbhkI+bM9GWer3O5fKIHBT2F3GjX4ma3TzNXuwdjT3tAVL/E8O5oqlm2 k0hir02PK/g4JyW2vJ+VJlWb8Re2M5k+7cFM+eB+PsxhjU+ecr4FZO13IWfVxoaB KnedjtyOTSbMpmufvgXzbS6RFSCpV3c+ -----END CERTIFICATE-----Generated at Mon Jan 5 18:54:21 2026 by rpki-client