This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft File: Z38M1kpd4sGwKO0APFaHS0j6LiE.mft (raw, json) Hash identifier: Wzc+xAH+G35dvFELPgh3yMdYtowk2WluVRueedhgXmg= Subject key identifier: C0:EF:BA:4A:E5:6A:43:14:7C:78:BF:4C:B1:81:C6:A0:FF:1F:DD:B2 Authority key identifier: 67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21 Certificate issuer: /CN=A91F17B3/serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft Manifest number: 52 Signing time: Sat 17 Jan 2026 06:16:29 +0000 Manifest this update: Sat 17 Jan 2026 06:16:28 +0000 Manifest next update: Sat 24 Jan 2026 06:16:28 +0000 Files and hashes: 1: Z38M1kpd4sGwKO0APFaHS0j6LiE.crl (hash: KdgRCH0zAGFUJIGHhSoIoGQaUBNDI58uAQSkIzvvXV8=) 2: AD46933EB65011F0B751DB86C4F9AE02.roa (hash: 4nT2yihpsRgIGDl3UtBaxjdfAfsQlqp6s85lRI5En8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 06:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17B3, serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21 Validity Not Before: Jan 17 06:16:28 2026 GMT Not After : Jan 24 06:16:28 2026 GMT Subject: CN=696b293d-d52c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:34:0f:14:b9:73:03:5f:02:bb:82:4b:70:b8: 49:63:14:5c:89:d8:1c:1d:52:ab:31:c6:9a:d8:0b: 46:73:29:64:7e:b3:fd:e9:56:01:3a:d9:bd:39:d8: e7:8f:60:4f:3e:38:1b:4f:f4:4a:40:7c:9b:98:94: c8:5d:96:2b:9c:12:09:4f:3d:4a:6e:ee:6c:9a:0d: 34:0a:cc:b4:28:4d:6b:49:d0:98:02:a8:dd:20:4f: 06:19:8f:c1:fc:ae:10:37:27:c9:bd:99:ff:e2:04: 3a:4e:29:ad:7d:36:3f:5b:87:64:0b:aa:73:0e:20: 07:14:40:d2:79:9c:b9:43:ea:24:8a:eb:a2:58:05: 65:7c:b5:cd:92:be:76:de:2a:4d:c8:08:ff:77:ff: 39:5b:03:02:00:64:c2:11:1f:4d:a6:e1:84:c8:06: d7:24:28:3e:ab:f9:00:8d:2a:e1:21:81:1c:f9:47: 7e:47:1b:77:26:c1:0a:f2:f7:1f:f6:52:49:92:4b: 54:d7:c1:fd:f5:48:3b:84:0d:71:8c:3b:9a:ca:1c: ad:28:2a:f3:b0:39:c6:14:a3:a8:91:98:c0:cd:c2: 27:ef:30:ff:93:c6:38:4e:dd:0b:1f:34:81:0e:64: fe:db:32:98:32:d7:50:0c:6b:48:b2:f9:05:d2:df: 0c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EF:BA:4A:E5:6A:43:14:7C:78:BF:4C:B1:81:C6:A0:FF:1F:DD:B2 X509v3 Authority Key Identifier: keyid:67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:be:32:62:59:cc:27:d5:a1:c3:2e:93:14:ae:7e:e9:dd:b7: 59:aa:57:c4:c9:04:ec:3c:7c:c7:78:1c:df:98:74:8d:59:ad: 34:a3:c7:7d:d4:09:98:b3:a1:eb:0b:0a:7c:88:e4:83:bc:15: 16:05:cc:7e:ea:18:fe:5c:a5:81:db:f9:26:92:3e:02:58:ad: e9:c5:e0:06:9c:90:60:14:1b:a2:5a:79:2f:b9:f4:0b:ca:4c: 99:09:1e:33:6b:58:fa:fe:57:bf:a4:f6:96:a7:09:54:0c:c2: 43:92:86:a5:c9:1d:56:cb:a3:17:5a:2e:51:58:36:48:05:41: e0:c0:31:c6:7d:03:cb:b8:16:ff:3a:8f:8c:ba:d3:59:f6:d1: 9c:e1:3f:3e:24:36:d4:ca:33:4f:68:e1:b3:ef:d1:77:f9:10: a9:d8:ca:0d:ac:1b:46:40:f3:a9:3d:f0:f2:af:10:7f:df:50: e4:ea:63:7a:44:15:54:e0:a4:67:1d:ce:13:75:2b:6b:52:10: 78:89:b0:10:e9:03:8a:04:90:a7:e0:42:2f:ce:23:e7:1f:28: 32:f1:44:14:d2:1b:9d:1b:82:5b:c9:a3:fc:71:b5:25:ac:3d: 3e:ce:97:95:61:ce:f5:e4:4f:a9:d6:be:d0:1b:8f:8a:74:60: 7e:1e:cb:b1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTdCMzExMC8GA1UEBRMoNjc3RjBDRDY0QTVERTJDMUIwMjhFRDAwM0M1Njg3NEI0 OEZBMkUyMTAeFw0yNjAxMTcwNjE2MjhaFw0yNjAxMjQwNjE2MjhaMBgxFjAUBgNV BAMMDTY5NmIyOTNkLWQ1MmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYNA8UuXMDXwK7gktwuEljFFyJ2BwdUqsxxprYC0ZzKWR+s/3pVgE62b052OeP YE8+OBtP9EpAfJuYlMhdliucEglPPUpu7myaDTQKzLQoTWtJ0JgCqN0gTwYZj8H8 rhA3J8m9mf/iBDpOKa19Nj9bh2QLqnMOIAcUQNJ5nLlD6iSK66JYBWV8tc2Svnbe Kk3ICP93/zlbAwIAZMIRH02m4YTIBtckKD6r+QCNKuEhgRz5R35HG3cmwQry9x/2 UkmSS1TXwf31SDuEDXGMO5rKHK0oKvOwOcYUo6iRmMDNwifvMP+TxjhO3QsfNIEO ZP7bMpgy11AMa0iy+QXS3wx7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwO+6SuVq QxR8eL9MsYHGoP8f3bIwHwYDVR0jBBgwFoAUZ38M1kpd4sGwKO0APFaHS0j6LiEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxN0IzLzU1OEM2MDk4NzlD RDExRjBBOUI5MDMyMUM0RjlBRTAyL1ozOE0xa3BkNHNHd0tPMEFQRmFIUzBqNkxp RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWjM4TTFrcGQ0c0d3S08wQVBGYUhTMGo2TGlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx N0IzLzU1OEM2MDk4NzlDRDExRjBBOUI5MDMyMUM0RjlBRTAyL1ozOE0xa3BkNHNH d0tPMEFQRmFIUzBqNkxpRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABW+MmJZzCfVocMukxSufundt1mqV8TJBOw8fMd4HN+YdI1ZrTSjx33U CZizoesLCnyI5IO8FRYFzH7qGP5cpYHb+SaSPgJYrenF4AackGAUG6JaeS+59AvK TJkJHjNrWPr+V7+k9panCVQMwkOShqXJHVbLoxdaLlFYNkgFQeDAMcZ9A8u4Fv86 j4y601n20ZzhPz4kNtTKM09o4bPv0Xf5EKnYyg2sG0ZA86k98PKvEH/fUOTqY3pE FVTgpGcdzhN1K2tSEHiJsBDpA4oEkKfgQi/OI+cfKDLxRBTSG50bglvJo/xxtSWs PT7Ol5VhzvXkT6nWvtAbj4p0YH4ey7E= -----END CERTIFICATE-----Generated at Sun Jan 18 03:01:36 2026 by rpki-client