This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft File: zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft (raw, json) Hash identifier: SOY7SdlcdfndKa/ogysqrm16iqUSbs/ALVCxf9JsrtM= Subject key identifier: 04:F2:78:C8:0E:35:F6:23:30:28:CE:FD:48:18:0B:15:46:B5:1F:99 Authority key identifier: CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22 Certificate issuer: /CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322 Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft Manifest number: 015A Signing time: Tue 27 Jan 2026 03:31:25 +0000 Manifest this update: Tue 27 Jan 2026 03:31:24 +0000 Manifest next update: Tue 03 Feb 2026 03:31:24 +0000 Files and hashes: 1: zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl (hash: UEL2kKPflDcV6w5jSJA+mdiu2UGkxBJgpq6Y3nx74Xs=) 2: 51030EF09B9C11F09447A92BC4F9AE02.roa (hash: S3cyIXZVoOkRNLShFeU9F6eot2kvd0U8U4Swy25JVmk=) 3: F6BB410AA34E11F0B508F67EC4F9AE02.roa (hash: 8K1O69m1bstFL8LZIqUFWVOg/nAR4GoraVpfB2EqwyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 03:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2, serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322 Validity Not Before: Jan 27 03:31:24 2026 GMT Not After : Feb 3 03:31:24 2026 GMT Subject: CN=6978318c-b80f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:24:23:b7:91:3f:6c:44:e4:8f:bb:41:3d:ff: 22:69:94:5f:9d:04:e0:ab:5d:66:88:8c:b8:5e:d0: 2d:af:d7:38:22:e8:7a:31:6f:4f:1e:4d:d3:aa:de: 07:ec:dd:25:91:fc:64:d8:c9:ea:3a:d5:40:1f:92: d0:13:af:88:eb:d0:4a:9f:2e:45:93:c7:02:f7:f5: c1:bb:f9:44:05:d0:a3:a0:a0:2a:e0:7a:71:96:99: b9:80:3c:04:1f:eb:cc:e9:8d:ad:d4:67:4c:2d:8c: d7:11:1c:13:a9:93:ad:f4:ab:58:3c:75:f3:3a:8d: 1a:93:33:fa:99:7b:65:f2:e1:53:a1:7f:8b:55:ee: 7a:c2:a2:72:86:98:e6:76:16:3e:bb:2a:fa:63:e7: 64:80:b3:40:80:07:8d:2e:f6:6a:5b:73:4c:b1:97: 16:6e:aa:91:99:e4:93:e6:7f:49:1f:cc:c8:8f:a8: de:19:4a:d1:15:f6:36:1d:12:df:0e:d9:11:31:07: 66:56:32:f3:fd:1c:b8:11:84:c3:c4:d7:19:e8:7a: 4d:de:c4:95:cb:8d:f6:74:e3:d7:12:23:28:28:34: 9e:71:f1:b9:63:4f:6d:45:21:5d:97:de:04:5b:32: 55:86:01:66:2d:4e:1b:06:1c:a4:d8:10:94:1f:39: 58:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F2:78:C8:0E:35:F6:23:30:28:CE:FD:48:18:0B:15:46:B5:1F:99 X509v3 Authority Key Identifier: keyid:CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:b9:fe:b0:1b:df:b9:04:ca:b7:bb:f0:c7:d5:a1:41:0f:36: ab:09:84:bb:aa:d7:89:a9:63:05:61:70:29:0d:53:7c:dc:02: 74:c4:ad:5c:fa:e4:66:5a:b7:b7:a1:cc:da:d5:f9:86:31:f3: d0:5b:5c:b0:49:64:ab:c2:48:c0:c9:63:8f:1a:60:fa:80:df: 73:eb:2c:a5:97:1c:d1:bf:fb:75:c0:f5:a4:7a:c6:c9:0f:1e: c9:f8:f2:ad:6b:56:eb:b7:85:97:3d:07:e5:17:58:0d:bc:4f: 42:f1:3d:4c:21:e0:58:39:b3:58:dc:e1:ef:bb:61:95:83:f1: 5e:43:7a:d6:3e:9e:5f:c8:2a:bf:e8:76:d6:6c:3b:c2:06:b0: b6:3a:e2:69:da:f4:6c:61:ec:7e:a9:95:4e:f8:2e:0c:40:8a: 07:51:90:3d:0d:0d:6f:59:18:ca:95:33:c9:31:09:8d:09:d7: e7:e0:2e:bc:5c:b2:48:e9:0e:d2:07:e7:14:90:46:7c:d8:58: ab:cc:c5:3f:95:81:47:d7:2b:49:a3:78:2b:9b:ba:c2:3b:e4: 69:b8:db:26:99:a6:54:10:fc:92:51:15:43:28:86:1f:dd:33: 7a:d2:e5:29:31:b5:04:da:44:20:d6:c2:34:31:58:eb:a5:8f: 37:0b:5d:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQzIxMTAvBgNVBAUTKENFRTA3Qzg3MTRGMTkyNzgxMzlEMjM5NjA1MDQzRUND NkJEQkQzMjIwHhcNMjYwMTI3MDMzMTI0WhcNMjYwMjAzMDMzMTI0WjAYMRYwFAYD VQQDDA02OTc4MzE4Yy1iODBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyQjt5E/bETkj7tBPf8iaZRfnQTgq11miIy4XtAtr9c4Iuh6MW9PHk3Tqt4H 7N0lkfxk2MnqOtVAH5LQE6+I69BKny5Fk8cC9/XBu/lEBdCjoKAq4Hpxlpm5gDwE H+vM6Y2t1GdMLYzXERwTqZOt9KtYPHXzOo0akzP6mXtl8uFToX+LVe56wqJyhpjm dhY+uyr6Y+dkgLNAgAeNLvZqW3NMsZcWbqqRmeST5n9JH8zIj6jeGUrRFfY2HRLf DtkRMQdmVjLz/Ry4EYTDxNcZ6HpN3sSVy432dOPXEiMoKDSecfG5Y09tRSFdl94E WzJVhgFmLU4bBhyk2BCUHzlYQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATyeMgO NfYjMCjO/UgYCxVGtR+ZMB8GA1UdIwQYMBaAFM7gfIcU8ZJ4E50jlgUEPsxr29Mi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBDMi9GRTQ4QUJGNDA2 QjIxMUVGQkNFMDM0NUNDNEY5QUUwMi96dUI4aHhUeGtuZ1RuU09XQlFRLXpHdmIw eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1QjhoeFR4a25nVG5TT1dCUVEtekd2YjB5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBDMi9GRTQ4QUJGNDA2QjIxMUVGQkNFMDM0NUNDNEY5QUUwMi96dUI4aHhUeGtu Z1RuU09XQlFRLXpHdmIweUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeuf6wG9+5BMq3u/DH1aFBDzarCYS7qteJqWMFYXApDVN83AJ0xK1c +uRmWre3ocza1fmGMfPQW1ywSWSrwkjAyWOPGmD6gN9z6yyllxzRv/t1wPWkesbJ Dx7J+PKta1brt4WXPQflF1gNvE9C8T1MIeBYObNY3OHvu2GVg/FeQ3rWPp5fyCq/ 6HbWbDvCBrC2OuJp2vRsYex+qZVO+C4MQIoHUZA9DQ1vWRjKlTPJMQmNCdfn4C68 XLJI6Q7SB+cUkEZ82FirzMU/lYFH1ytJo3grm7rCO+RpuNsmmaZUEPySURVDKIYf 3TN60uUpMbUE2kQg1sI0MVjrpY83C12T -----END CERTIFICATE-----Generated at Wed Jan 28 18:36:01 2026 by rpki-client