This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft
File: ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft (raw, json)
Hash identifier: 0yHh8CvdHkbCoMuO5XUq9UsFdxuJbrZfR2AXaDpQgfE=
Subject key identifier: 4D:43:79:C1:1B:DF:3C:B9:CE:0F:37:92:9E:31:63:00:A7:75:6D:46
Authority key identifier: 72:D6:5B:B3:CA:D4:A0:98:F3:6F:41:37:59:4C:C7:FE:C2:FA:28:A3
Certificate issuer: /CN=A913C91D/serialNumber=72D65BB3CAD4A098F36F4137594CC7FEC2FA28A3
Certificate serial: 10ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctZbs8rUoJjzb0E3WUzH_sL6KKM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft
Manifest number: 10E3
Signing time: Sat 24 Jan 2026 17:00:34 +0000
Manifest this update: Sat 24 Jan 2026 17:00:33 +0000
Manifest next update: Sat 31 Jan 2026 17:00:33 +0000
Files and hashes: 1: ctZbs8rUoJjzb0E3WUzH_sL6KKM.crl (hash: gbdlmHluaDrLvA4x7V6QUlVxp7dHXmuU+S7gg8+rmVc=)
2: 39C6EF3688BF11EABC04973FC4F9AE02.roa (hash: yd71n8eugD8WrOND6JHlcb+DlT4vihP97eJVROksTM0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.crl
rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctZbs8rUoJjzb0E3WUzH_sL6KKM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4333 (0x10ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C91D, serialNumber=72D65BB3CAD4A098F36F4137594CC7FEC2FA28A3
Validity
Not Before: Jan 24 17:00:33 2026 GMT
Not After : Jan 31 17:00:33 2026 GMT
Subject: CN=6974fab1-9eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ec:20:2d:a7:d8:c2:5f:15:55:b2:c9:53:7b:
31:74:9c:7c:76:eb:20:97:28:a8:47:7c:66:a8:97:
2b:81:8d:91:ec:62:03:eb:33:7c:25:23:cd:ec:8a:
48:b2:e1:22:50:c1:6e:0f:40:d3:c9:01:4a:66:c5:
25:57:04:cc:76:73:a4:0f:15:40:2a:1c:20:dc:f4:
81:83:f7:0f:19:4c:fc:7e:b5:41:21:0a:4d:fe:9a:
de:6e:b3:ff:95:be:8f:41:87:4e:3c:54:bd:f8:39:
ad:23:12:bc:ce:c4:7e:57:62:81:13:b7:3c:3c:c0:
cb:09:cc:db:fc:06:25:06:f3:5d:f2:4f:76:3e:ca:
41:cc:e3:d0:a6:22:81:a2:24:10:bf:82:99:09:73:
d1:96:5e:17:ba:25:17:b7:5d:1c:80:b9:70:4c:82:
99:5a:77:25:88:f9:3d:2e:a1:18:1e:1e:e5:08:74:
d4:a5:99:cb:44:b8:91:e8:ac:43:6e:b5:40:37:0a:
86:38:1c:e3:08:7e:99:4f:96:fc:a3:ec:33:6d:99:
e3:d1:d9:4b:02:76:8b:11:5f:f6:4d:82:9d:b9:97:
f7:cd:1f:7b:c3:e8:8a:2c:b4:65:90:0a:eb:c4:c3:
81:18:8e:d6:a3:18:59:d0:01:07:15:67:b8:d4:bb:
67:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:43:79:C1:1B:DF:3C:B9:CE:0F:37:92:9E:31:63:00:A7:75:6D:46
X509v3 Authority Key Identifier:
keyid:72:D6:5B:B3:CA:D4:A0:98:F3:6F:41:37:59:4C:C7:FE:C2:FA:28:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctZbs8rUoJjzb0E3WUzH_sL6KKM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C91D/D90CD874358411E99A990228C4F9AE02/ctZbs8rUoJjzb0E3WUzH_sL6KKM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:7d:3b:00:59:49:8b:60:6b:85:86:25:9f:4c:77:d1:e6:14:
19:c6:50:9a:5b:e1:dc:1b:a4:f8:c9:e9:bf:6c:f8:c6:25:9d:
16:44:53:2e:06:3b:0b:a0:cf:1e:6a:63:4b:0c:b6:97:89:63:
47:8a:d6:44:99:55:e8:07:db:93:5b:99:5a:c9:bf:02:31:78:
d9:33:98:14:4b:24:b0:eb:d6:3f:31:63:23:72:b9:3a:28:a0:
82:8e:e8:3e:0e:7e:6d:26:f7:6e:50:07:ff:e6:c8:cd:56:4a:
dc:18:05:30:05:e4:75:3a:8a:66:23:da:22:4b:56:ef:5b:ee:
08:71:23:59:97:9e:bb:34:88:25:04:b3:fd:8e:79:c8:cc:6e:
e5:eb:f8:79:36:5d:5f:0c:3a:3e:3a:eb:c0:b8:53:99:5b:ba:
b0:46:db:0b:fb:3c:6d:36:52:30:a9:aa:85:67:be:3d:b6:f8:
69:87:0b:80:80:7e:80:08:3e:b9:68:28:6e:55:d0:7b:e5:8e:
56:e1:60:95:d9:ee:d9:61:8c:a6:d1:d1:17:61:d4:c2:f2:6e:
de:39:bc:15:a5:88:52:33:7d:f0:37:ff:82:29:db:17:d9:b0:
b2:08:2f:5d:23:06:42:4c:52:52:71:04:f8:76:b1:6f:b8:62:
79:b9:80:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:33:23 2026 by rpki-client