This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
File: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft (raw, json)
Hash identifier: 6UVkR+x4RGrHtYkqVPtTUzFwHe0q3GZ3YjQ9fTKm3xo=
Subject key identifier: A0:1B:96:03:F9:AC:6B:69:A6:4C:96:7C:24:80:EF:CB:B4:AB:0E:DC
Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F
Certificate issuer: /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
Certificate serial: 0CCD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
Manifest number: 0CC2
Signing time: Sat 24 Jan 2026 17:53:06 +0000
Manifest this update: Sat 24 Jan 2026 17:53:05 +0000
Manifest next update: Sat 31 Jan 2026 17:53:05 +0000
Files and hashes: 1: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl (hash: EMxZlrSvtqXeUYhx6cTsCnBQZmsGku85UG0qUGSfe8Q=)
2: 5BF38D62058E11EA96051368C4F9AE02.roa (hash: DKAvDLUT5bnOSiug52PiVjjxuC7Hqw+mBPK6i01vUBo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl
rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:53:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3277 (0xccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A6CB, serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F
Validity
Not Before: Jan 24 17:53:05 2026 GMT
Not After : Jan 31 17:53:05 2026 GMT
Subject: CN=69750702-ff52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:da:e4:c3:81:cb:77:88:51:3a:60:ea:95:3f:
c2:88:a0:50:e7:13:d5:54:f6:5b:fa:3d:f1:4f:f6:
2a:82:cf:a8:0a:ef:9d:59:9e:c8:34:9c:a4:e6:09:
21:08:97:32:13:a5:13:84:9c:03:19:7c:c6:3b:53:
b9:69:f9:fc:84:a6:cb:89:cf:78:98:ba:16:3f:fa:
85:88:fc:7f:85:ed:96:cc:40:ce:db:4c:e7:14:a4:
21:ae:07:f5:da:64:e1:36:7b:1b:13:68:9c:c3:3a:
aa:9b:ef:a3:9b:ca:e7:8e:88:51:3c:54:81:1d:68:
4e:67:88:e5:81:a0:1c:2c:13:e2:8b:2e:cf:3a:fb:
8d:80:25:3d:23:58:57:77:d9:b9:e9:7b:6b:d7:c5:
d2:13:6b:e3:d5:42:72:b5:e2:92:f0:d0:00:6d:52:
0c:de:4b:c4:dc:9e:56:f6:71:e9:b8:5b:c6:b2:1c:
3d:c0:20:34:d8:d8:a8:c8:47:d3:5c:24:13:26:db:
36:56:35:be:bc:80:6d:03:79:fd:ad:c2:b7:50:d4:
df:80:de:25:10:33:2c:3e:71:9f:66:68:de:c3:c3:
e7:ed:91:2e:39:55:13:06:ec:81:7d:ea:29:12:c2:
1e:49:6a:ae:96:4f:49:ea:cf:5f:ae:3a:d7:78:4a:
01:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:1B:96:03:F9:AC:6B:69:A6:4C:96:7C:24:80:EF:CB:B4:AB:0E:DC
X509v3 Authority Key Identifier:
keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:53:28:9a:e5:0b:4f:98:02:2f:4b:4d:d5:cd:1e:39:2b:e0:
8e:80:78:85:f7:15:62:f1:0e:fe:c3:08:c5:57:96:70:17:b3:
8a:d0:c4:25:cb:41:63:32:cf:ef:26:98:da:75:21:55:47:46:
81:79:7f:90:99:ea:b3:a7:25:af:8d:e4:63:71:48:24:d6:c0:
03:5e:63:aa:99:e3:b9:5c:a9:2c:0a:3f:b9:ab:75:6e:ce:9a:
ac:d1:a3:37:a0:5d:4a:43:07:bc:4d:aa:e2:48:70:c9:2f:2a:
6a:41:1b:d0:73:fb:48:69:07:09:e3:70:79:44:16:17:6d:61:
f2:32:18:af:df:37:0b:f0:02:3f:7c:ea:60:4c:90:2d:bf:c6:
6c:a2:ee:6b:68:8f:fa:bc:c8:11:ac:86:f1:8c:1f:1c:03:04:
d7:5c:a2:37:67:ae:6f:67:d3:24:38:a5:8d:04:5b:5b:99:da:
a1:b7:98:38:43:50:f5:e6:51:18:d0:3e:a3:c3:3b:f5:33:32:
bf:82:ff:37:a1:fb:69:18:27:55:cb:54:55:55:35:9d:92:fa:
43:b5:d5:27:2f:b8:ec:8d:48:72:17:92:1c:29:b5:0d:1a:55:
75:d8:21:f8:49:82:53:62:5b:d6:d4:de:c5:76:cb:8e:7a:21:
80:19:ca:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:49:32 2026 by rpki-client