This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
File: ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json)
Hash identifier: +WL9kaylZyeQzArAU6/hwtjXAjJUyu2/IQt7AqWk9oM=
Subject key identifier: E6:9E:90:6A:BA:33:9B:6D:15:8C:05:D1:5D:49:E0:28:3E:33:6D:BF
Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A
Certificate issuer: /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
Certificate serial: 23D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
Manifest number: 23C3
Signing time: Sat 24 Jan 2026 15:39:06 +0000
Manifest this update: Sat 24 Jan 2026 15:39:05 +0000
Manifest next update: Sat 31 Jan 2026 15:39:05 +0000
Files and hashes: 1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: TNST2fKZF9Z7i4OV93sx7BYtl/15DLJq5UHrfwLxZAg=)
2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: t1L0x630yQa4hGh6M1pmfIUnzXsdAFVhjHyDc0Opc6I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl
rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:39:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9172 (0x23d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91269B8, serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A
Validity
Not Before: Jan 24 15:39:05 2026 GMT
Not After : Jan 31 15:39:05 2026 GMT
Subject: CN=6974e799-a3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d2:35:e1:ee:67:d2:42:9d:87:73:b9:1b:df:
e8:09:a6:6b:80:85:60:32:31:98:dc:17:54:33:54:
cb:1c:9f:b1:c9:48:94:06:4f:2a:b6:7d:15:25:fd:
ff:b2:26:1d:8b:4d:17:47:79:84:a3:01:2e:cd:ee:
1d:42:86:8e:6a:cf:ba:aa:e1:0b:c1:bb:34:af:f1:
9a:37:61:cc:a1:13:cf:67:6b:8f:6b:21:43:f2:71:
bb:ce:c6:1f:f3:c3:3d:fd:3f:99:74:19:b0:96:63:
6b:f2:5d:0d:66:31:18:27:a4:9b:87:5c:a9:50:e6:
fb:a2:6a:3f:02:7b:80:1e:ee:22:d0:32:94:25:2b:
42:16:6d:ff:73:84:e8:c2:28:3d:04:53:3d:a7:17:
3e:54:04:fc:09:f0:61:de:0b:94:a7:fa:18:4b:31:
0b:f5:de:76:a5:18:18:3f:91:ac:32:81:17:83:e6:
35:d6:92:c4:ce:63:89:db:b1:cc:24:66:a4:36:68:
37:5f:55:51:1e:06:8e:42:83:9a:db:0e:cf:5b:7c:
60:c9:df:ea:26:e9:ac:49:df:25:c8:99:62:59:66:
27:7a:4d:ea:de:cb:54:b4:1c:e5:68:2d:68:95:88:
af:ff:14:74:d4:ed:e4:f1:90:45:7c:d7:fd:34:ec:
27:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9E:90:6A:BA:33:9B:6D:15:8C:05:D1:5D:49:E0:28:3E:33:6D:BF
X509v3 Authority Key Identifier:
keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:08:e6:65:71:51:19:2c:c3:ac:27:49:3c:d9:7b:3f:e2:09:
b2:17:2a:b8:60:60:aa:11:b2:05:bf:51:3c:a0:70:d6:19:dd:
ba:59:bd:99:b0:53:45:d3:f8:0a:b0:7e:a9:49:ea:77:e1:a0:
f7:bc:6b:df:6b:73:49:05:b9:2c:48:8b:47:dc:56:bd:87:fe:
38:bc:20:d5:eb:0a:69:07:53:cf:3b:5b:86:d7:fc:ff:45:6f:
ea:fb:10:ed:78:e8:b0:22:58:c2:c0:55:d0:5c:49:42:7d:a4:
bf:f1:b4:a8:15:8b:e9:4b:9b:09:76:3a:d6:d6:b7:97:91:66:
26:db:8f:3f:56:fe:99:83:29:55:99:a9:df:69:49:d1:0d:ee:
48:c4:23:d6:44:5b:e0:7c:7e:c2:62:45:e9:82:8e:4b:05:4d:
7f:cb:59:9b:c7:8f:1a:99:2c:b5:3a:0d:e6:84:ab:c9:dc:5b:
17:37:13:74:7b:00:8a:ad:ae:8e:37:44:70:8e:3a:51:12:cf:
7c:87:d3:bd:a8:81:b7:2f:16:de:4f:ba:a1:5d:f8:39:52:2f:
1c:6a:3e:8d:e0:b4:cb:20:01:b3:52:0d:06:e0:9c:c0:e7:4b:
b8:c8:e7:e8:12:a6:42:e1:9a:f6:a2:ac:c5:17:56:b0:c3:83:
e4:cd:d7:00
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICI9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjY5QjgxMTAvBgNVBAUTKDY2MjdDQ0FCNkRDMkU5NTg2RTJDQzExQjI3OTU3MzVB
MzFGRDlCOEEwHhcNMjYwMTI0MTUzOTA1WhcNMjYwMTMxMTUzOTA1WjAYMRYwFAYD
VQQDDA02OTc0ZTc5OS1hM2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAydI14e5n0kKdh3O5G9/oCaZrgIVgMjGY3BdUM1TLHJ+xyUiUBk8qtn0VJf3/
siYdi00XR3mEowEuze4dQoaOas+6quELwbs0r/GaN2HMoRPPZ2uPayFD8nG7zsYf
88M9/T+ZdBmwlmNr8l0NZjEYJ6Sbh1ypUOb7omo/AnuAHu4i0DKUJStCFm3/c4To
wig9BFM9pxc+VAT8CfBh3guUp/oYSzEL9d52pRgYP5GsMoEXg+Y11pLEzmOJ27HM
JGakNmg3X1VRHgaOQoOa2w7PW3xgyd/qJumsSd8lyJliWWYnek3q3stUtBzlaC1o
lYiv/xR01O3k8ZBFfNf9NOwnFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOaekGq6
M5ttFYwF0V1J4Cg+M22/MB8GA1UdIwQYMBaAFGYnzKttwulYbizBGyeVc1ox/ZuK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjlCOC80QUJBRkVERTgz
OTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZWaHVMTUViSjVWeldqSDlt
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ppZk1xMjNDNlZodUxNRWJKNVZ6V2pIOW00by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NjlCOC80QUJBRkVERTgzOTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZW
aHVMTUViSjVWeldqSDltNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB1COZlcVEZLMOsJ0k82Xs/4gmyFyq4YGCqEbIFv1E8oHDWGd26Wb2Z
sFNF0/gKsH6pSep34aD3vGvfa3NJBbksSItH3Fa9h/44vCDV6wppB1PPO1uG1/z/
RW/q+xDteOiwIljCwFXQXElCfaS/8bSoFYvpS5sJdjrW1reXkWYm248/Vv6ZgylV
manfaUnRDe5IxCPWRFvgfH7CYkXpgo5LBU1/y1mbx48amSy1Og3mhKvJ3FsXNxN0
ewCKra6ON0RwjjpREs98h9O9qIG3LxbeT7qhXfg5Ui8caj6N4LTLIAGzUg0G4JzA
50u4yOfoEqZC4Zr2oqzFF1aww4PkzdcA
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:19:10 2026 by rpki-client