This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
File: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft (raw, json)
Hash identifier: z1Ouo1NcqbUN8x05hj7N6MjYswV7xEPUkcdmySTss/w=
Subject key identifier: 43:18:2E:9D:D6:3C:A5:13:01:64:7D:2E:3B:79:C5:39:A5:DA:F0:AF
Authority key identifier: FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8
Certificate issuer: /CN=A914A8CB/serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8
Certificate serial: 1B9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
Manifest number: 1B87
Signing time: Sat 24 Jan 2026 16:03:17 +0000
Manifest this update: Sat 24 Jan 2026 16:03:16 +0000
Manifest next update: Sat 31 Jan 2026 16:03:16 +0000
Files and hashes: 1: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl (hash: mIqSzdPDpaPvwsFnQKjR82vyMKyDsIa43WZ6rUhIUbY=)
2: 90C8D27021C211E786829418C4F9AE02.roa (hash: SG/JJrCv6+bEqjSz1EdPiULof9NKJsxI6no6f7rqWm0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl
rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7071 (0x1b9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A8CB, serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8
Validity
Not Before: Jan 24 16:03:16 2026 GMT
Not After : Jan 31 16:03:16 2026 GMT
Subject: CN=6974ed44-6749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:4d:a7:c0:c1:05:0a:12:dd:7a:62:bf:33:
f7:76:7c:30:e3:9f:16:a6:62:8e:21:4d:15:d4:3a:
1c:e0:dc:c5:13:ab:9f:66:ad:c9:88:a1:ec:18:32:
96:ba:bf:aa:cf:05:c9:4a:27:da:2d:72:6e:f9:6d:
88:5d:9a:99:8e:1e:ce:30:e7:97:fb:1c:a9:5b:f3:
33:f4:d0:7f:4d:9f:3b:18:9a:d0:cb:af:b1:9c:03:
c9:6d:fc:04:cc:30:6a:ab:ad:bb:45:1d:11:0a:ea:
af:fa:32:84:5d:2a:a3:1e:89:c5:2c:57:45:3a:46:
65:b9:59:d0:05:6d:3e:cc:eb:2e:d8:6c:e3:5d:1f:
e3:79:5b:d6:2a:09:de:7f:87:0e:f4:87:d1:e6:52:
d5:46:3a:2e:9d:73:56:d9:df:32:c8:cd:ce:17:6f:
c2:f5:67:d0:64:a1:64:81:80:ce:a5:21:c1:eb:01:
78:ab:6c:16:02:d9:67:3d:7b:7e:6e:6d:3d:f8:eb:
c3:22:6e:b7:fd:a5:fb:f5:3a:58:3e:2a:ae:04:ed:
6e:03:49:64:23:bb:25:c2:b3:50:4a:4e:77:3f:70:
22:f8:6c:d1:1c:0c:d6:c9:25:18:8f:7d:95:46:de:
5f:32:e5:bf:c9:3a:b3:86:f4:4e:be:20:fa:87:0b:
4c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:18:2E:9D:D6:3C:A5:13:01:64:7D:2E:3B:79:C5:39:A5:DA:F0:AF
X509v3 Authority Key Identifier:
keyid:FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:2b:11:82:13:14:f4:4a:90:9b:3f:e7:a5:ff:4e:94:9f:9d:
8a:66:1d:27:5f:9a:46:d5:79:a9:c2:70:67:76:ce:87:2c:9c:
63:72:50:40:eb:d9:97:b7:42:06:e0:3c:39:0f:1d:45:e5:03:
47:f9:f7:82:99:f9:d4:5f:8d:c0:1e:18:f2:00:b3:22:a6:fa:
1d:2f:0d:d6:12:ac:e8:a4:60:da:5d:2d:1a:0e:e2:b5:23:af:
3e:38:ec:3f:9d:e5:eb:b5:ce:08:6c:e5:46:ff:05:3e:94:d6:
ac:70:d1:fb:23:df:3e:8c:26:88:8e:cb:0b:73:6b:0f:75:01:
2e:6b:12:87:3a:8a:98:12:42:47:86:7e:69:be:fd:f0:bf:ee:
b1:4a:21:d0:70:ae:12:d8:43:91:58:58:ab:e7:5a:6e:80:5d:
c8:6f:14:8d:83:6b:6e:52:20:88:b4:ef:72:7a:f7:6c:5d:c1:
ec:67:3a:8c:13:e9:a8:24:bd:6f:31:ec:8b:15:25:89:43:91:
25:4d:3c:0e:ed:24:a1:53:d7:82:3a:ae:e8:dc:30:08:21:67:
8c:77:af:5d:13:bb:88:36:e6:b5:2b:7d:3d:40:2e:6c:1d:39:
f7:de:db:39:96:06:f2:d1:65:24:34:80:e9:9e:e2:f8:e2:91:
84:b5:3e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:19:31 2026 by rpki-client