This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft File: Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft (raw, json) Hash identifier: TCgmoVCZXh0jTia43Qjk2stra7NggHq8UvFdtwCrPsc= Subject key identifier: FA:46:7E:38:BD:AE:21:51:85:D6:39:23:31:AD:00:60:D0:C7:82:2A Authority key identifier: 65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE Certificate issuer: /CN=A91BB000/serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE Certificate serial: 3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft Manifest number: 3A Signing time: Sat 17 Jan 2026 06:29:27 +0000 Manifest this update: Sat 17 Jan 2026 06:29:26 +0000 Manifest next update: Sat 24 Jan 2026 06:29:26 +0000 Files and hashes: 1: Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl (hash: nPOckgWlimQuYAoogBbUbwJ67222hcoosamsS4RmrTI=) 2: C2B54C4E9D2611F0A7B9140CC4F9AE02.roa (hash: qXahNWKD3ULNKbUsqqR6NoyLBXctmb1mpVL8KL1rQa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 06:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB000, serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE Validity Not Before: Jan 17 06:29:26 2026 GMT Not After : Jan 24 06:29:26 2026 GMT Subject: CN=696b2c46-8707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:61:b7:a6:b8:f0:e8:bd:be:ef:38:44:81:3f: c7:3f:3b:6d:57:40:3f:e1:2c:e9:42:54:cb:7e:9b: 7e:63:1e:e5:48:aa:c9:13:f7:70:15:81:aa:37:02: 99:58:2b:db:71:82:5b:b9:0c:f1:b4:92:c3:39:0c: 28:9a:4d:3b:fa:a6:c8:3a:40:b2:9c:c4:bd:63:64: 9a:b1:10:fe:46:0b:39:13:32:b3:ee:3a:d2:b8:2b: 0f:e1:39:64:be:fe:52:f2:d9:8c:f3:ee:2c:0c:bc: bb:af:86:74:b9:1f:03:bf:ff:53:54:65:72:d0:56: a6:94:1c:15:c8:b8:28:6c:ca:8c:67:c5:67:a3:b1: 75:15:56:d0:b9:70:07:cc:9b:13:19:79:e7:71:11: 8e:16:8c:d3:63:4f:10:50:b5:a4:33:b7:54:c0:ee: 71:48:d9:bf:ae:f8:7b:5b:bb:b1:10:67:45:7d:b4: 59:9d:00:c9:06:39:fe:3f:58:fe:f0:91:0c:9e:64: 8a:97:88:7e:24:99:b0:46:fa:86:2f:ef:b5:07:1c: ef:85:55:2d:3f:fc:8e:39:1c:61:65:a5:81:d5:80: af:cf:00:82:c6:73:68:20:be:e8:82:5d:5a:db:83: 6d:de:b7:96:f4:e2:d2:03:c8:8e:10:22:0b:5a:0b: 1d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:46:7E:38:BD:AE:21:51:85:D6:39:23:31:AD:00:60:D0:C7:82:2A X509v3 Authority Key Identifier: keyid:65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:7d:00:e5:6f:00:66:07:76:82:4a:9e:1d:35:53:10:26:d7: ea:78:41:5c:b1:cc:01:90:70:f9:a7:f7:05:66:fb:c6:e8:51: e4:ef:ef:f0:55:1a:8f:c6:30:77:5e:16:bd:3b:1c:b0:7a:4a: c8:58:21:fd:a1:bd:26:3e:e1:c2:ef:28:0c:64:83:54:48:cc: dd:6a:86:78:2e:68:d4:e9:32:7f:4d:3f:33:06:88:3b:8f:3b: 46:bc:4d:ea:ba:0c:74:83:65:be:bd:87:af:11:29:44:b9:18: e3:24:1d:9e:c9:a6:84:cf:f6:44:68:45:f1:2c:42:aa:66:b4: ac:cc:20:82:a3:39:7e:7e:51:4d:b7:9b:a6:f9:57:33:f2:c5: 78:72:d5:b9:5f:f0:ef:bd:e8:52:06:46:82:2a:34:c1:36:21: ad:48:9b:49:8e:08:36:60:98:fe:24:d8:07:6a:de:27:3c:f6: 32:f8:1e:b4:40:b8:ae:0b:ad:f8:44:d7:c1:ac:bb:f5:f2:2f: 78:44:35:d0:31:00:3f:ad:42:74:2a:ab:78:2d:4c:3e:58:4c: 0a:43:d7:7d:a8:ea:bc:23:74:57:e1:a8:e0:6a:8e:f7:59:80: ef:72:42:da:82:4f:8f:b9:3a:a2:2c:28:eb:a7:4d:3c:53:44: ef:01:18:18 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjAwMDExMC8GA1UEBRMoNjVBQUJFRjE3Q0NDMDgwQzlBMzYyQTA4MjE1MzA0QjEx QkQ1MDdGRTAeFw0yNjAxMTcwNjI5MjZaFw0yNjAxMjQwNjI5MjZaMBgxFjAUBgNV BAMMDTY5NmIyYzQ2LTg3MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClYbemuPDovb7vOESBP8c/O21XQD/hLOlCVMt+m35jHuVIqskT93AVgao3AplY K9txglu5DPG0ksM5DCiaTTv6psg6QLKcxL1jZJqxEP5GCzkTMrPuOtK4Kw/hOWS+ /lLy2Yzz7iwMvLuvhnS5HwO//1NUZXLQVqaUHBXIuChsyoxnxWejsXUVVtC5cAfM mxMZeedxEY4WjNNjTxBQtaQzt1TA7nFI2b+u+Htbu7EQZ0V9tFmdAMkGOf4/WP7w kQyeZIqXiH4kmbBG+oYv77UHHO+FVS0//I45HGFlpYHVgK/PAILGc2ggvuiCXVrb g23et5b04tIDyI4QIgtaCx0BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+kZ+OL2u IVGF1jkjMa0AYNDHgiowHwYDVR0jBBgwFoAUZaq+8XzMCAyaNioIIVMEsRvVB/4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMDAwL0U1QTEzOEQwOUQx NzExRjBCNDJFRjAzNEM0RjlBRTAyL1phcS04WHpNQ0F5YU5pb0lJVk1Fc1J2VkJf NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmFxLThYek1DQXlhTmlvSUlWTUVzUnZWQl80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MDAwL0U1QTEzOEQwOUQxNzExRjBCNDJFRjAzNEM0RjlBRTAyL1phcS04WHpNQ0F5 YU5pb0lJVk1Fc1J2VkJfNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK19AOVvAGYHdoJKnh01UxAm1+p4QVyxzAGQcPmn9wVm+8boUeTv7/BV Go/GMHdeFr07HLB6SshYIf2hvSY+4cLvKAxkg1RIzN1qhnguaNTpMn9NPzMGiDuP O0a8Teq6DHSDZb69h68RKUS5GOMkHZ7JpoTP9kRoRfEsQqpmtKzMIIKjOX5+UU23 m6b5VzPyxXhy1blf8O+96FIGRoIqNME2Ia1Im0mOCDZgmP4k2Adq3ic89jL4HrRA uK4LrfhE18Gsu/XyL3hENdAxAD+tQnQqq3gtTD5YTApD132o6rwjdFfhqOBqjvdZ gO9yQtqCT4+5OqIsKOunTTxTRO8BGBg= -----END CERTIFICATE-----Generated at Sun Jan 18 03:03:02 2026 by rpki-client