This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft File: rzCJXc48ZcI77FTLCJhY66Fhic4.mft (raw, json) Hash identifier: vxqN/r6LhLAL/kRP9KYVkwnJqzL07PMOQzHg61HEL7c= Subject key identifier: 25:F3:B8:22:D7:56:03:5B:C4:BA:7F:38:27:03:F6:89:3A:FE:9F:89 Authority key identifier: AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE Certificate issuer: /CN=A91CA294/serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft Manifest number: 42 Signing time: Sun 25 Jan 2026 06:30:48 +0000 Manifest this update: Sun 25 Jan 2026 06:30:47 +0000 Manifest next update: Sun 01 Feb 2026 06:30:47 +0000 Files and hashes: 1: rzCJXc48ZcI77FTLCJhY66Fhic4.crl (hash: DtUarAb8ggXs/zbwSGBiOUQO/A8Wr4MIyVtJrS1r1do=) 2: 44D1A4E69DAB11F0A7401064C4F9AE02.roa (hash: rrG273YrKP30bIP6LI9pQgElPTdMGXNtxru1G29zetU=) 3: 7CCBF066A2F811F09235B919C4F9AE02.roa (hash: zhniOmksUDRXONnEcT5JY0KumHd8uj/NZx0Y0gByQxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA294, serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE Validity Not Before: Jan 25 06:30:47 2026 GMT Not After : Feb 1 06:30:47 2026 GMT Subject: CN=6975b898-8ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:08:6e:da:09:ac:90:12:34:8c:44:d1:ce:da: 79:51:2d:45:f4:26:0f:03:db:7f:b2:8f:45:37:ec: 3c:e1:ef:92:a1:76:92:6d:5e:6b:87:75:d1:a6:6d: 0b:83:ef:19:c7:b7:16:1b:ba:de:b3:71:74:84:2a: b9:e9:bf:d4:0c:c7:2b:d8:39:58:db:df:cb:de:94: 4c:03:21:5a:8b:05:50:c8:ea:9f:ca:e3:ea:0d:22: 09:c4:ab:b1:84:64:0c:91:25:68:7a:2d:ab:25:52: 8e:ea:40:d1:e3:29:35:19:ac:95:3c:57:b7:87:5a: b8:34:bb:49:63:e1:01:87:1c:16:35:ed:df:b1:4e: 8d:fc:6d:2a:84:f5:92:de:f1:6e:bb:d9:c2:33:d6: fb:78:56:4d:a3:01:23:b5:ff:92:3d:be:2e:e0:e8: be:cc:49:c9:fa:26:32:e7:d6:12:73:62:f8:05:bb: 9f:11:b1:c9:16:57:3e:3a:62:76:fa:c1:32:87:83: d9:66:ae:52:7d:d2:55:7e:c6:d2:1d:ec:8f:e7:55: c0:7c:29:0e:47:62:f4:51:19:87:c1:1c:b5:18:00: 44:f7:c9:a4:8c:d7:e4:3e:e3:81:7d:0d:c0:b1:c7: 48:26:be:41:72:46:62:34:ba:cd:7d:3a:61:4d:fa: 52:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F3:B8:22:D7:56:03:5B:C4:BA:7F:38:27:03:F6:89:3A:FE:9F:89 X509v3 Authority Key Identifier: keyid:AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:69:6d:33:fe:ea:da:77:7b:a1:31:93:2d:e3:50:c1:d5:af: 00:0b:ed:35:b4:d6:ed:b6:51:2f:92:1e:12:c6:99:11:dd:99: ff:74:3a:58:ce:04:01:89:48:cd:5e:63:41:9c:1e:86:24:98: 08:09:71:b1:9d:0f:2e:b4:50:7d:80:49:1f:34:e7:87:09:83: d9:55:e1:c1:d0:7a:64:01:5a:0f:0b:74:75:93:96:41:ca:61: e9:8e:e0:5a:af:e2:6e:ec:60:af:ce:cb:5e:8a:d8:cc:9e:71: 4b:21:3b:17:44:b3:8e:07:e7:64:0b:75:2e:54:36:39:33:55: 22:ff:ca:f1:58:cf:1e:ad:09:e1:54:c3:78:a3:ba:e6:8d:05: 39:04:1e:58:97:e4:ca:b4:34:fd:ed:51:43:9b:4b:9b:ad:7c: 2c:40:f9:11:5b:59:04:ce:ee:5a:9e:f7:39:db:86:ef:f7:58: 30:eb:c4:98:32:19:e8:62:5e:c5:2d:b7:a4:2f:f2:f1:4e:06: 6a:b6:10:db:89:31:89:1b:eb:af:5c:12:ac:1a:75:ee:80:29: ea:b9:7b:5a:e5:d8:25:76:88:aa:f5:2b:dc:59:89:28:b5:07: bc:2a:e5:75:b8:0a:c1:32:8d:a1:38:dd:10:a1:6a:72:8d:c2: 7a:bf:0f:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTI5NDExMC8GA1UEBRMoQUYzMDg5NURDRTNDNjVDMjNCRUM1NENCMDg5ODU4RUJB MTYxODlDRTAeFw0yNjAxMjUwNjMwNDdaFw0yNjAyMDEwNjMwNDdaMBgxFjAUBgNV BAMMDTY5NzViODk4LThhZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXCG7aCayQEjSMRNHO2nlRLUX0Jg8D23+yj0U37Dzh75KhdpJtXmuHddGmbQuD 7xnHtxYbut6zcXSEKrnpv9QMxyvYOVjb38velEwDIVqLBVDI6p/K4+oNIgnEq7GE ZAyRJWh6LaslUo7qQNHjKTUZrJU8V7eHWrg0u0lj4QGHHBY17d+xTo38bSqE9ZLe 8W672cIz1vt4Vk2jASO1/5I9vi7g6L7MScn6JjLn1hJzYvgFu58RsckWVz46Ynb6 wTKHg9lmrlJ90lV+xtId7I/nVcB8KQ5HYvRRGYfBHLUYAET3yaSM1+Q+44F9DcCx x0gmvkFyRmI0us19OmFN+lIjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJfO4ItdW A1vEun84JwP2iTr+n4kwHwYDVR0jBBgwFoAUrzCJXc48ZcI77FTLCJhY66Fhic4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBMjk0L0M3QUZBNkEyOURB QTExRjA5NjQyMEI2M0M0RjlBRTAyL3J6Q0pYYzQ4WmNJNzdGVExDSmhZNjZGaGlj NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnpDSlhjNDhaY0k3N0ZUTENKaFk2NkZoaWM0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB Mjk0L0M3QUZBNkEyOURBQTExRjA5NjQyMEI2M0M0RjlBRTAyL3J6Q0pYYzQ4WmNJ NzdGVExDSmhZNjZGaGljNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAExpbTP+6tp3e6Exky3jUMHVrwAL7TW01u22US+SHhLGmRHdmf90OljO BAGJSM1eY0GcHoYkmAgJcbGdDy60UH2ASR8054cJg9lV4cHQemQBWg8LdHWTlkHK YemO4Fqv4m7sYK/Oy16K2MyecUshOxdEs44H52QLdS5UNjkzVSL/yvFYzx6tCeFU w3ijuuaNBTkEHliX5Mq0NP3tUUObS5utfCxA+RFbWQTO7lqe9znbhu/3WDDrxJgy GehiXsUtt6Qv8vFOBmq2ENuJMYkb669cEqwade6AKeq5e1rl2CV2iKr1K9xZiSi1 B7wq5XW4CsEyjaE43RChanKNwnq/D1o= -----END CERTIFICATE-----Generated at Mon Jan 26 15:39:50 2026 by rpki-client