This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft File: zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft (raw, json) Hash identifier: b9Fh3mkJhtZPr26HtOfisHZx/nyk/32EpWwwPcZbSfY= Subject key identifier: DA:BE:9E:BA:C6:5A:F9:E6:79:43:FA:C7:6C:E7:F6:E1:4A:B8:0B:2D Authority key identifier: CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94 Certificate issuer: /CN=A911E93B/serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft Manifest number: 25 Signing time: Sun 11 Jan 2026 06:50:15 +0000 Manifest this update: Sun 11 Jan 2026 06:50:15 +0000 Manifest next update: Sun 18 Jan 2026 06:50:15 +0000 Files and hashes: 1: zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl (hash: d+8DiEyeRLX2S3j5DYhrl9kGlkbsbZs+Jnq0IhEk79Q=) 2: DEED8FA0BF0111F0A0DE3D62C4F9AE02.roa (hash: 5yc3OYyI9+cxhlN6GhCXy6b613PoZglZSVW/o0s8JBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 03:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E93B, serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594 Validity Not Before: Jan 11 06:50:15 2026 GMT Not After : Jan 18 06:50:15 2026 GMT Subject: CN=69634827-35d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d6:76:25:b1:be:92:a2:8e:62:2b:91:fd:0a: 8d:77:ff:ba:1a:44:24:6f:37:7b:82:76:76:da:00: 55:f5:bd:27:f3:78:f7:b6:ad:ad:28:1f:af:9f:3b: ff:eb:89:7e:33:cb:65:85:05:14:b3:90:36:aa:d9: 75:5e:fc:8d:38:40:a4:31:22:31:7d:66:7b:fb:8c: 07:a6:05:d7:35:e8:76:13:81:7f:d1:5f:b3:c4:5a: ac:61:c3:56:20:a6:9e:e2:65:55:ba:dd:d1:cf:9e: bf:38:98:38:36:5f:e8:5d:11:5c:64:4f:c2:89:48: a4:42:c6:d0:fa:ee:9b:07:c3:de:3e:de:e5:36:68: 24:71:74:6b:2a:7c:35:da:ae:09:0c:96:6e:15:d1: 16:66:4a:c0:16:7b:95:58:cf:f9:0a:1c:4f:b6:2b: f0:9c:be:c1:5e:bf:e2:9e:6a:4f:b0:68:41:c7:29: e0:df:0a:c1:de:66:d8:df:c2:23:60:ab:32:76:94: 7d:31:4c:f8:4f:4f:c3:5b:32:77:59:34:dc:b7:ba: 3e:b8:e3:81:c2:7a:cd:41:20:e1:5b:cf:29:29:ad: ab:de:37:00:44:51:2b:b5:a6:4a:8a:de:d1:6c:59: 91:72:cd:88:78:09:8b:7a:69:7c:98:6e:bd:b3:34: f4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BE:9E:BA:C6:5A:F9:E6:79:43:FA:C7:6C:E7:F6:E1:4A:B8:0B:2D X509v3 Authority Key Identifier: keyid:CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:df:19:4c:68:91:14:bf:42:9c:e1:29:39:ad:d0:31:78:6d: fa:ad:18:e6:6a:bc:17:de:19:80:54:0d:72:67:4d:67:7c:30: 60:54:53:4b:57:c8:f5:75:f8:54:8b:23:93:00:e9:f6:15:56: ae:5a:88:20:a3:3c:a6:ff:e3:6a:59:31:5f:c6:91:4a:65:46: c2:d3:21:1a:1f:f8:e4:c8:f4:db:5f:d8:24:a8:22:09:5f:45: 7f:7e:40:84:5f:0a:41:92:9d:f6:6a:29:fd:f1:bd:96:f1:2b: 72:a0:22:68:4e:e5:0a:27:c1:0e:5b:85:e5:66:1f:c3:fe:72: 70:91:6b:1e:18:6b:03:5b:1a:c0:97:45:45:c2:70:df:55:d5: 6f:9a:6a:bb:03:9f:af:7e:09:7b:5d:0e:1c:a2:6f:ae:4b:19: fb:bf:6a:43:f4:a0:7f:d9:63:d8:f2:5d:b0:92:da:bf:2d:a5: 6d:60:82:c4:dd:19:c3:a8:3f:f4:c5:ed:d9:56:38:93:31:b5: ea:8f:58:44:2f:43:24:5f:28:3f:70:af:a4:70:06:ab:cd:76: 4e:73:92:c0:73:4a:ae:3e:5e:51:d1:29:e0:7c:38:e2:41:2a: 9c:1d:93:e5:91:e8:2e:e5:49:d9:89:3f:a3:73:13:1e:f5:52: 06:3c:78:87 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTkzQjExMC8GA1UEBRMoQ0RGNkU1NjU0NDM1QjNDODRERkExMEI5QkM4NzEwRTlF QkIwRDU5NDAeFw0yNjAxMTEwNjUwMTVaFw0yNjAxMTgwNjUwMTVaMBgxFjAUBgNV BAMMDTY5NjM0ODI3LTM1ZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDX1nYlsb6Soo5iK5H9Co13/7oaRCRvN3uCdnbaAFX1vSfzePe2ra0oH6+fO//r iX4zy2WFBRSzkDaq2XVe/I04QKQxIjF9Znv7jAemBdc16HYTgX/RX7PEWqxhw1Yg pp7iZVW63dHPnr84mDg2X+hdEVxkT8KJSKRCxtD67psHw94+3uU2aCRxdGsqfDXa rgkMlm4V0RZmSsAWe5VYz/kKHE+2K/CcvsFev+Keak+waEHHKeDfCsHeZtjfwiNg qzJ2lH0xTPhPT8NbMndZNNy3uj6444HCes1BIOFbzykpraveNwBEUSu1pkqK3tFs WZFyzYh4CYt6aXyYbr2zNPRXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2r6eusZa +eZ5Q/rHbOf24Uq4Cy0wHwYDVR0jBBgwFoAUzfblZUQ1s8hN+hC5vIcQ6euw1ZQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFOTNCLzdEQkFEMUVFQkYw MDExRjBCQ0MxNUQ1REM0RjlBRTAyL3pmYmxaVVExczhoTi1oQzV2SWNRNmV1dzFa US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemZibFpVUTFzOGhOLWhDNXZJY1E2ZXV3MVpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF OTNCLzdEQkFEMUVFQkYwMDExRjBCQ0MxNUQ1REM0RjlBRTAyL3pmYmxaVVExczho Ti1oQzV2SWNRNmV1dzFaUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIbfGUxokRS/QpzhKTmt0DF4bfqtGOZqvBfeGYBUDXJnTWd8MGBUU0tX yPV1+FSLI5MA6fYVVq5aiCCjPKb/42pZMV/GkUplRsLTIRof+OTI9Ntf2CSoIglf RX9+QIRfCkGSnfZqKf3xvZbxK3KgImhO5QonwQ5bheVmH8P+cnCRax4YawNbGsCX RUXCcN9V1W+aarsDn69+CXtdDhyib65LGfu/akP0oH/ZY9jyXbCS2r8tpW1ggsTd GcOoP/TF7dlWOJMxteqPWEQvQyRfKD9wr6RwBqvNdk5zksBzSq4+XlHRKeB8OOJB Kpwdk+WR6C7lSdmJP6NzEx71UgY8eIc= -----END CERTIFICATE-----Generated at Sun Jan 11 08:37:51 2026 by rpki-client