This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
File: Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft (raw, json)
Hash identifier: PeHolXpMZXBUVXX3Py2W+hgdKT8Cb8z13kUpaIX5qEc=
Subject key identifier: E7:15:01:D6:B1:DE:ED:7B:30:ED:C3:02:FF:CB:6E:76:63:44:96:17
Authority key identifier: 66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74
Certificate issuer: /CN=A911C812/serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
Certificate serial: 03D7
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
Manifest number: 03D7
Signing time: Sat 24 Jan 2026 20:03:59 +0000
Manifest this update: Sat 24 Jan 2026 20:03:59 +0000
Manifest next update: Sat 31 Jan 2026 20:03:59 +0000
Files and hashes: 1: Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl (hash: n25g+fqXsqbVpdbj1XSTGNnv50TKLnB3WW3Em7epWgY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl
rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 983 (0x3d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C812, serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
Validity
Not Before: Jan 24 20:03:59 2026 GMT
Not After : Jan 31 20:03:59 2026 GMT
Subject: CN=697525af-9072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d2:ca:ad:aa:20:3b:5a:dd:7a:e5:92:77:ed:
d7:c7:e6:f5:db:2b:b1:22:fb:05:0e:31:09:8a:a3:
ee:0d:ca:9d:90:b3:25:39:fa:3f:7a:7e:61:1a:de:
fc:18:8b:49:1b:92:d1:57:24:f6:04:6f:2f:7b:66:
79:0e:18:0e:93:a6:8b:78:ff:76:3b:4b:50:9e:7e:
dc:a6:75:20:55:69:bb:8a:39:d3:e4:dd:3a:ee:40:
aa:1e:a6:e9:f3:ee:ff:f6:6f:1b:d3:bd:6b:d4:d3:
56:cc:0d:ed:3d:97:58:13:78:0e:48:fb:5c:2e:a9:
cc:b1:1c:1c:cf:3f:98:93:e8:99:1d:50:de:3e:19:
13:0b:9d:58:4a:63:e7:9a:6f:1f:b7:de:05:0d:0e:
05:b2:86:01:00:c5:f3:96:ce:1f:de:44:07:e7:0e:
12:1d:b6:4e:26:a4:20:55:6a:47:56:94:7d:a3:82:
17:7c:2f:c9:5d:8c:94:95:ed:76:f1:81:c0:8b:ee:
d6:ee:b7:8d:0a:39:9f:c2:70:19:5a:03:b6:da:35:
0e:0f:e0:8f:a2:40:bc:a9:7a:bb:19:da:fd:fe:79:
0e:b5:c3:ee:1d:4d:1c:4a:64:de:ae:ec:43:eb:89:
74:2b:b9:84:7b:7d:d5:c6:f4:60:27:85:90:b5:fc:
4e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:15:01:D6:B1:DE:ED:7B:30:ED:C3:02:FF:CB:6E:76:63:44:96:17
X509v3 Authority Key Identifier:
keyid:66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d1:05:42:8a:46:d7:99:ff:ef:b3:50:4e:e0:a8:48:e4:40:
20:24:e0:bb:29:b8:be:d6:8c:a1:97:54:bc:4c:66:87:6f:63:
a9:22:dd:bc:d5:eb:c5:48:a4:29:24:79:a5:e0:0a:11:54:fa:
b9:a8:5f:ca:ad:ff:c0:bc:1a:3c:6a:fe:35:b6:96:34:23:5c:
aa:26:08:c2:b8:0b:fd:6a:33:f6:2c:5d:03:97:73:a8:cf:fa:
1b:fb:19:5b:85:00:26:75:93:8e:6e:95:19:9d:b2:53:09:2c:
1b:6b:43:65:2a:5a:f2:9d:d3:b9:36:07:04:a3:ad:bd:24:ff:
b9:9b:bd:04:2e:29:39:99:a7:22:d2:72:23:94:ed:ab:a0:66:
0b:a4:64:d9:2e:ba:63:44:ae:de:ac:f9:ee:cb:cc:67:50:8d:
ff:bf:7a:72:09:0b:7d:9e:11:25:b7:c1:37:5b:f0:9b:7f:41:
2c:93:81:7c:8c:dc:50:02:ed:b6:b0:a5:75:06:66:8c:4e:bb:
0e:13:8c:5c:97:68:66:6f:7a:f6:7b:86:4d:df:b8:b9:91:ad:
28:24:9a:e5:c4:41:6b:71:cd:a8:45:13:09:60:46:98:1e:be:
40:a4:d2:3d:9c:bc:0c:bd:3f:ba:db:99:c6:82:ee:51:71:cd:
c0:22:ab:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:08:25 2026 by rpki-client