This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft File: zEJAcHQQNjc16_bvsZT7Zw80X0I.mft (raw, json) Hash identifier: Fl+oB+EhMtsHwHA17dw2zyN0od7gFz2dEu9o4gmGT1M= Subject key identifier: 8F:98:2E:B7:D2:E4:BF:C8:8F:55:D3:96:7E:73:5B:FE:2B:C4:E8:C5 Authority key identifier: CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42 Certificate issuer: /CN=A9160AEE/serialNumber=CC4240707410363735EBF6EFB194FB670F345F42 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft Manifest number: 3E Signing time: Sat 17 Jan 2026 06:31:58 +0000 Manifest this update: Sat 17 Jan 2026 06:31:57 +0000 Manifest next update: Sat 24 Jan 2026 06:31:57 +0000 Files and hashes: 1: zEJAcHQQNjc16_bvsZT7Zw80X0I.crl (hash: epWxJwwVYx9GNrJvN56D0/DZ/dLp2xZyak8q6VF5OoU=) 2: 2159B7B8A41F11F087C1F02CC4F9AE02.roa (hash: o9+trdGZs9g/j9AiQD7kTRhw8blN1x7JWncUYHM5y3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 06:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160AEE, serialNumber=CC4240707410363735EBF6EFB194FB670F345F42 Validity Not Before: Jan 17 06:31:57 2026 GMT Not After : Jan 24 06:31:57 2026 GMT Subject: CN=696b2cde-ba55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:ab:f5:88:7c:8c:8f:25:ae:7b:9e:90:cd: 41:c4:4a:99:97:bf:e5:59:a6:78:43:71:57:69:fb: 08:b0:3c:d7:3a:13:7e:62:1c:14:06:8d:7d:ac:65: 90:e4:17:08:70:74:bd:61:eb:6a:d1:ea:9e:0f:bf: ba:e8:17:be:57:ce:3b:ba:66:ae:d5:df:f4:21:29: 87:6d:69:91:62:ae:80:ab:e3:d3:79:c1:46:4e:59: d1:40:10:0c:e1:af:91:c6:1a:2b:95:f8:1c:28:fd: 80:9c:dd:99:a5:0d:a5:33:50:b5:e4:96:17:1f:69: c2:c5:b5:50:28:1c:7f:b7:5e:38:9f:23:fc:6b:a1: ef:ea:35:4d:61:d2:0b:1d:eb:da:b3:51:e1:6e:bd: ee:20:2f:5a:b7:38:fa:d6:29:da:4e:dc:cd:38:a8: 9f:fd:ac:f4:12:2c:ea:92:07:dc:01:97:e6:6f:af: de:85:62:1b:76:eb:49:52:b6:9c:28:bf:db:7e:b8: f7:4f:d9:9f:4e:db:20:ed:2b:db:27:d0:55:d6:3f: 40:b7:c7:56:d4:0f:0e:e1:f3:ef:9b:60:e5:91:94: ff:8f:2c:17:fd:bd:94:fb:5a:ea:ce:0d:69:e1:d6: 56:e2:b9:f5:df:ea:57:65:c4:33:c6:b4:83:67:0a: 0f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:98:2E:B7:D2:E4:BF:C8:8F:55:D3:96:7E:73:5B:FE:2B:C4:E8:C5 X509v3 Authority Key Identifier: keyid:CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:14:31:3f:f7:5e:8c:7d:0a:a7:6c:d2:a7:9e:0e:3e:b2:61: b5:d4:a3:fc:57:9a:da:73:c4:64:41:47:2c:73:b0:18:2d:94: f7:b0:6e:9d:6f:95:c1:43:aa:85:c9:85:85:12:40:c0:dd:8e: 16:03:52:20:ac:b1:bb:97:30:0e:c6:0c:e9:7f:24:36:4d:07: 5d:6d:89:76:3f:ed:51:7f:de:0e:d2:b1:6b:84:6a:42:db:49: 59:05:f9:7c:98:0f:ae:ed:e6:70:fc:e3:64:ea:94:c8:f3:70: e9:0a:01:1a:3e:91:3e:cb:81:29:2e:aa:42:6a:5f:02:d0:61: ca:de:16:eb:bb:28:91:dc:3b:10:4a:79:bf:80:c8:86:ed:25: c3:73:13:e0:74:2b:79:60:15:23:23:cd:3f:d9:f4:83:0b:75: af:8d:2d:9a:75:2a:02:45:38:a9:c9:e2:5b:a1:43:83:86:ae: 26:46:c7:2a:40:a7:4a:bc:85:c5:01:ac:58:57:77:68:44:07: 7c:fc:1e:3f:52:eb:bf:7d:bb:07:94:bf:fc:f4:46:d7:1b:72: 2f:e4:3b:bb:05:49:77:d1:fb:78:04:1a:54:eb:1b:65:a8:47: 91:64:53:54:64:dd:ff:63:34:37:85:05:60:1f:07:ee:e7:52: cb:b5:03:d4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEFFRTExMC8GA1UEBRMoQ0M0MjQwNzA3NDEwMzYzNzM1RUJGNkVGQjE5NEZCNjcw RjM0NUY0MjAeFw0yNjAxMTcwNjMxNTdaFw0yNjAxMjQwNjMxNTdaMBgxFjAUBgNV BAMMDTY5NmIyY2RlLWJhNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1Eqv1iHyMjyWue56QzUHESpmXv+VZpnhDcVdp+wiwPNc6E35iHBQGjX2sZZDk FwhwdL1h62rR6p4Pv7roF75Xzju6Zq7V3/QhKYdtaZFiroCr49N5wUZOWdFAEAzh r5HGGiuV+Bwo/YCc3ZmlDaUzULXklhcfacLFtVAoHH+3XjifI/xroe/qNU1h0gsd 69qzUeFuve4gL1q3OPrWKdpO3M04qJ/9rPQSLOqSB9wBl+Zvr96FYht260lStpwo v9t+uPdP2Z9O2yDtK9sn0FXWP0C3x1bUDw7h8++bYOWRlP+PLBf9vZT7WurODWnh 1lbiufXf6ldlxDPGtINnCg+fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUj5gut9Lk v8iPVdOWfnNb/ivE6MUwHwYDVR0jBBgwFoAUzEJAcHQQNjc16/bvsZT7Zw80X0Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQUVFLzE4OENBRjA2QTNF QzExRjBCOEU5N0YzN0M0RjlBRTAyL3pFSkFjSFFRTmpjMTZfYnZzWlQ3Wnc4MFgw SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvekVKQWNIUVFOamMxNl9idnNaVDdadzgwWDBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw QUVFLzE4OENBRjA2QTNFQzExRjBCOEU5N0YzN0M0RjlBRTAyL3pFSkFjSFFRTmpj MTZfYnZzWlQ3Wnc4MFgwSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHoUMT/3Xox9Cqds0qeeDj6yYbXUo/xXmtpzxGRBRyxzsBgtlPewbp1v lcFDqoXJhYUSQMDdjhYDUiCssbuXMA7GDOl/JDZNB11tiXY/7VF/3g7SsWuEakLb SVkF+XyYD67t5nD842TqlMjzcOkKARo+kT7LgSkuqkJqXwLQYcreFuu7KJHcOxBK eb+AyIbtJcNzE+B0K3lgFSMjzT/Z9IMLda+NLZp1KgJFOKnJ4luhQ4OGriZGxypA p0q8hcUBrFhXd2hEB3z8Hj9S6799uweUv/z0Rtcbci/kO7sFSXfR+3gEGlTrG2Wo R5FkU1Rk3f9jNDeFBWAfB+7nUsu1A9Q= -----END CERTIFICATE-----Generated at Sun Jan 18 03:16:26 2026 by rpki-client