This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
File: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft (raw, json)
Hash identifier: ysdQc/wPsfdIRI7F7lYubJdd9qkbd/O6AYqEPO6Bp3k=
Subject key identifier: B6:6C:36:27:7A:CA:E9:2D:CC:3C:8B:24:1C:A3:D0:F3:54:63:E5:5E
Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Certificate serial: 053E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
Manifest number: 04A5
Signing time: Sat 24 Jan 2026 23:38:10 +0000
Manifest this update: Sat 24 Jan 2026 23:38:10 +0000
Manifest next update: Sat 31 Jan 2026 23:38:10 +0000
Files and hashes: 1: zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl (hash: BjYKlJOrrHjzR053S7iYNN0PyYsJ9+E/jIAmOlsHaA0=)
2: 3050FB0E9F7511F085D9D70FC4F9AE02.roa (hash: vtLz424RDUbODXXpI7aufILsZ9HU4RZ81pkVr53F9BU=)
3: 8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa (hash: B2iTPnMxaly9ld+4G5qhnu/Dw0b6DsRttSqT1fc5gtg=)
4: 36DD8A88B68A11F09D04E950C4F9AE02.roa (hash: ePNogPPVbGEkJuQw5T0SxqhH/K2mvmcxCKSGqMSN+yc=)
5: 37D5EC8CB68A11F09D04E950C4F9AE02.roa (hash: z+J6k2WSDwVmDdFI9w7THPPX/Q7RFUW9LZQWuJzZEcw=)
6: 69A02F92B69011F0AFB90732C4F9AE02.roa (hash: sMRcWxChssn3H6D5qaChgdxh5gtjwzzrdc1dGQbN5+A=)
7: 5E009276B69011F0B54BD22FC4F9AE02.roa (hash: fEN+oTiCJkPlQnC5jC4xqdZ5XVmm/ET62fXwuVJ80pk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:38:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1342 (0x53e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC
Validity
Not Before: Jan 24 23:38:10 2026 GMT
Not After : Jan 31 23:38:10 2026 GMT
Subject: CN=697557e2-bb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:72:e5:04:c0:21:2a:65:94:43:84:23:c1:9a:
bd:3b:60:53:bb:09:81:75:25:ca:36:33:d6:26:3f:
64:99:d3:b6:3f:0c:08:a8:58:09:ef:af:fa:38:12:
9b:82:bc:4b:30:35:ec:fd:a3:e3:59:7b:62:61:0e:
22:23:f2:89:16:05:eb:a7:9a:d6:5c:5f:85:1a:c0:
8b:30:7b:c7:be:d4:a1:f2:c5:3d:eb:dc:74:56:0f:
af:06:ff:7b:2b:9e:42:10:02:06:58:14:87:7c:4d:
e0:5a:de:58:44:4a:49:18:a4:35:a0:ba:5c:1c:3a:
61:72:a1:b1:b9:18:4e:21:4f:c6:59:18:bb:72:a9:
16:cd:eb:be:40:63:b9:71:7a:11:1a:67:93:f1:c8:
0f:4b:53:5a:f6:92:7e:d8:46:1f:7e:31:67:67:ba:
3d:f8:67:5f:e6:72:9f:10:6d:ae:cb:d3:84:ac:34:
69:90:34:87:39:32:2c:71:45:67:75:b5:ba:d3:12:
e6:86:62:86:12:cf:f5:86:0a:72:0e:2b:e0:7c:2e:
2a:37:94:d4:9e:44:77:39:d9:b7:55:85:2c:a2:07:
90:2d:8f:92:74:73:05:c6:c6:9b:a9:02:d4:f3:2e:
87:04:9d:45:1e:11:bd:ef:b5:34:b3:b3:24:14:2a:
d0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6C:36:27:7A:CA:E9:2D:CC:3C:8B:24:1C:A3:D0:F3:54:63:E5:5E
X509v3 Authority Key Identifier:
keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:05:16:82:c4:31:4a:56:82:07:a3:0a:14:c3:2a:ae:60:d3:
82:c1:95:59:17:c4:08:22:e6:f0:ae:e6:d7:7b:89:01:6d:f9:
24:1d:c1:6a:70:33:32:8d:af:2a:e8:14:0f:ee:61:80:c9:a5:
e5:4b:77:44:40:19:96:ca:ae:64:3d:fa:5d:12:d1:bb:ef:02:
b7:28:45:41:09:bc:76:03:46:e3:ca:14:8f:42:d8:4e:02:a6:
3d:12:a4:60:dc:df:9a:5c:f9:e2:9e:ec:6b:76:6a:65:3f:3e:
f1:3a:f8:53:fb:68:26:f9:57:4d:e9:99:d9:75:a4:13:07:36:
50:2b:46:a6:f2:2e:64:79:33:04:34:0a:2a:95:52:9b:d9:d2:
c6:3a:76:9f:43:0a:ba:78:8f:f4:5b:dc:79:aa:61:d0:c7:c7:
e2:bc:1d:f4:40:5d:39:b1:58:ba:bc:33:ab:ab:ef:48:72:47:
09:d0:12:9c:84:a7:e7:e7:63:2d:fa:d9:9e:44:cf:26:93:06:
ec:83:13:6d:d3:23:01:18:f0:72:5f:21:5f:7f:17:26:79:d5:
62:e9:81:70:26:2f:e1:b7:6b:70:53:c9:3a:5a:48:82:35:17:
fd:8c:02:13:d0:62:4d:1d:a9:12:9c:0f:99:b2:e8:d6:d3:73:
8e:05:6b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:45:36 2026 by rpki-client