This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft File: ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft (raw, json) Hash identifier: 8B7Bcm3hWJqIaf6QtpBiHA7HYN1TZ4xHqZf9F6sow6M= Subject key identifier: B0:C7:3F:F7:89:10:5D:CD:70:BB:F8:9B:7D:6D:98:5A:A9:5B:82:99 Authority key identifier: 64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13 Certificate issuer: /CN=A911B5AC/serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft Manifest number: 29 Signing time: Sat 17 Jan 2026 01:00:58 +0000 Manifest this update: Sat 17 Jan 2026 01:00:58 +0000 Manifest next update: Sat 24 Jan 2026 01:00:58 +0000 Files and hashes: 1: ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl (hash: Su0UYhvMp3PCyJr+QXOi1cC2QK3Ybo+wXZ9b77V8Op0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 01:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5AC, serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213 Validity Not Before: Jan 17 01:00:58 2026 GMT Not After : Jan 24 01:00:58 2026 GMT Subject: CN=696adf4a-2fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ca:22:1b:70:7f:32:7a:76:77:6a:0a:13:ea: b5:1b:e3:4c:e1:02:36:ea:39:2d:31:4d:01:91:ba: 16:b7:7a:de:c0:76:2e:c6:6b:e4:93:58:f7:17:98: d1:b8:39:b6:f5:f1:06:bb:d2:d5:cd:0f:6d:21:b9: 2b:46:47:a0:32:64:f0:11:6b:63:f7:ec:d2:8c:a3: 15:d0:6a:b6:eb:66:21:e7:24:7a:44:05:8a:7e:e6: d1:fb:8d:6d:01:37:ea:7b:01:a3:a5:a2:80:f4:14: f3:8d:f1:3f:12:d1:45:ce:f9:d9:31:3b:be:5f:c2: f3:a9:e8:23:20:34:c2:5b:60:49:b9:a3:5f:41:5e: db:85:7b:db:77:c9:6a:1a:b2:7e:7a:51:10:a8:ff: 0e:f0:37:39:95:90:25:42:84:9c:bd:3e:1a:a2:8e: 75:34:e4:6e:10:73:d1:a4:61:02:9f:39:a1:53:9c: 7c:7f:93:c2:76:3c:d5:68:d1:bb:bc:3c:98:9d:33: 2b:e5:a9:bb:26:bb:64:17:2c:11:0e:3a:bc:78:aa: 4d:04:64:8f:46:19:53:9c:9d:ab:50:ba:aa:03:9e: 6f:ac:f6:c1:43:94:fb:62:9f:4c:ab:cf:d4:de:da: 1e:7a:fe:9d:1d:66:fc:03:f6:3d:14:0b:d8:6c:aa: e1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C7:3F:F7:89:10:5D:CD:70:BB:F8:9B:7D:6D:98:5A:A9:5B:82:99 X509v3 Authority Key Identifier: keyid:64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a1:44:e3:29:ba:4b:1d:bb:78:0b:a8:ae:db:9c:d4:da:c5: 4c:7d:54:6d:e0:3f:10:de:4f:7d:60:a7:7d:a1:ad:11:28:a7: 17:af:02:b2:c3:ee:b0:d8:65:3f:8b:93:38:82:66:81:43:6f: 27:62:2c:5c:c7:ad:11:1a:90:11:0d:b7:14:59:92:7f:20:4d: 77:42:51:cb:44:06:af:77:31:2b:7f:cc:8d:3f:73:09:ee:54: 76:06:77:32:f7:d9:78:1c:35:d1:9e:0d:46:87:fd:5f:6c:e7: 68:b2:30:09:b3:00:6f:bc:55:f6:ae:12:0a:3a:f1:22:e8:66: 4a:31:db:11:7b:c0:d8:b4:57:0d:1a:f9:87:34:d5:63:b4:6a: a8:4c:85:85:18:5d:f9:33:e1:4b:7e:97:9f:8a:d9:c1:b3:e1: b4:9a:c4:15:ee:b1:e6:e2:9c:4e:9f:bc:5c:80:fa:30:51:5d: ce:56:08:1e:e9:9e:8f:d7:9a:61:43:b4:b7:de:6d:5d:4d:c3: d2:65:4b:22:b1:70:09:89:4a:98:2e:1a:91:92:c5:0c:5e:38: 28:f0:d7:c4:d1:fa:65:b6:fd:05:ae:c0:ed:54:00:7e:40:82: 2f:90:79:57:1d:2e:0f:6b:ef:40:68:b9:f4:d6:70:4d:cb:66: 4e:c3:6d:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjVBQzExMC8GA1UEBRMoNjQ1MTU1M0UwOURDMjRERERCQzU0MDczRTY2MjVCMUEx NkU3NTIxMzAeFw0yNjAxMTcwMTAwNThaFw0yNjAxMjQwMTAwNThaMBgxFjAUBgNV BAMMDTY5NmFkZjRhLTJmYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDByiIbcH8yenZ3agoT6rUb40zhAjbqOS0xTQGRuha3et7Adi7Ga+STWPcXmNG4 Obb18Qa70tXND20huStGR6AyZPARa2P37NKMoxXQarbrZiHnJHpEBYp+5tH7jW0B N+p7AaOlooD0FPON8T8S0UXO+dkxO75fwvOp6CMgNMJbYEm5o19BXtuFe9t3yWoa sn56URCo/w7wNzmVkCVChJy9PhqijnU05G4Qc9GkYQKfOaFTnHx/k8J2PNVo0bu8 PJidMyvlqbsmu2QXLBEOOrx4qk0EZI9GGVOcnatQuqoDnm+s9sFDlPtin0yrz9Te 2h56/p0dZvwD9j0UC9hsquFdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsMc/94kQ Xc1wu/ibfW2YWqlbgpkwHwYDVR0jBBgwFoAUZFFVPgncJN3bxUBz5mJbGhbnUhMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCNUFDL0JDMUY3REI2Qjky MTExRjBCRjREMzk0MEM0RjlBRTAyL1pGRlZQZ25jSk4zYnhVQno1bUpiR2hiblVo TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWkZGVlBnbmNKTjNieFVCejVtSmJHaGJuVWhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC NUFDL0JDMUY3REI2QjkyMTExRjBCRjREMzk0MEM0RjlBRTAyL1pGRlZQZ25jSk4z YnhVQno1bUpiR2hiblVoTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEyhROMpuksdu3gLqK7bnNTaxUx9VG3gPxDeT31gp32hrREopxevArLD 7rDYZT+LkziCZoFDbydiLFzHrREakBENtxRZkn8gTXdCUctEBq93MSt/zI0/cwnu VHYGdzL32XgcNdGeDUaH/V9s52iyMAmzAG+8VfauEgo68SLoZkox2xF7wNi0Vw0a +Yc01WO0aqhMhYUYXfkz4Ut+l5+K2cGz4bSaxBXusebinE6fvFyA+jBRXc5WCB7p no/XmmFDtLfebV1Nw9JlSyKxcAmJSpguGpGSxQxeOCjw18TR+mW2/QWuwO1UAH5A gi+QeVcdLg9r70BoufTWcE3LZk7DbYM= -----END CERTIFICATE-----Generated at Sun Jan 18 03:15:22 2026 by rpki-client