This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
File: N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft (raw, json)
Hash identifier: ZqdmOzwhIYKxQYmZNtpKPzSCYCZUslXzUAZTVSRBFpk=
Subject key identifier: 1D:5E:8F:24:E2:1D:90:7D:96:96:B7:11:12:02:17:22:E4:A4:FE:87
Authority key identifier: 37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50
Certificate issuer: /CN=A916DA1F/serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950
Certificate serial: 15F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
Manifest number: 15F1
Signing time: Sat 24 Jan 2026 16:29:34 +0000
Manifest this update: Sat 24 Jan 2026 16:29:34 +0000
Manifest next update: Sat 31 Jan 2026 16:29:34 +0000
Files and hashes: 1: N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl (hash: l+NWJqD9sf/q4XsFJ0pMy8qZ3jm7HjEjy0gTyHV4lk8=)
2: 2036C856362911E8B6C37C78C4F9AE02.roa (hash: VjPDMCTDAl0F+kUlLL83qcuxLts9GNlg09c0jF2guQg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl
rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5625 (0x15f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DA1F, serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950
Validity
Not Before: Jan 24 16:29:34 2026 GMT
Not After : Jan 31 16:29:34 2026 GMT
Subject: CN=6974f36e-9b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:03:58:25:66:3e:9a:61:34:97:fa:f2:a8:ed:
5a:ea:0d:cb:67:d2:24:37:22:26:f2:04:4d:43:dc:
13:a3:9f:07:ff:a9:6a:08:a1:5e:62:97:f5:d3:6a:
91:57:3a:6a:4e:a5:eb:5f:ed:d3:10:d5:03:53:93:
fe:48:99:f6:2c:98:be:0e:21:8a:9c:59:01:6e:13:
c9:1c:78:9f:ba:96:ea:7a:c2:c0:85:54:f9:70:4e:
b3:a5:35:f4:0b:e1:23:04:e5:83:a8:7d:7b:ed:64:
f6:3f:08:5e:19:88:d3:3b:42:92:19:ed:a9:7f:e3:
11:7d:8d:a6:3e:72:87:c1:0d:1c:83:2d:22:f1:51:
4f:f1:c5:e8:09:d2:49:ab:98:7b:e6:17:b8:71:df:
df:03:c8:4e:3c:76:0c:61:40:cb:78:20:5c:f3:10:
a9:13:24:41:19:a1:b7:9b:7f:26:e9:a2:b5:f8:50:
66:b2:70:ff:d1:9b:d6:c0:12:ce:40:e0:2c:a7:cc:
c4:35:c1:11:2d:0d:8c:e4:70:38:c7:59:4a:8b:ed:
f2:d1:5f:40:db:4c:c8:d5:3a:3f:54:92:53:d7:ce:
f4:1f:44:2b:2c:c1:a7:91:c5:84:47:f8:ee:f0:3d:
dc:94:e5:3f:0b:87:e8:2c:a4:a4:00:b8:ea:1a:37:
70:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5E:8F:24:E2:1D:90:7D:96:96:B7:11:12:02:17:22:E4:A4:FE:87
X509v3 Authority Key Identifier:
keyid:37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:c8:cf:c0:d4:99:04:02:79:d0:15:77:31:f8:b8:09:a5:d8:
7d:0c:80:e7:f9:d2:77:3c:15:b2:50:cf:eb:76:9f:15:a1:ea:
6b:ee:9b:da:9f:d4:64:09:d8:92:1c:d7:b4:04:a4:05:39:4c:
7b:5c:38:39:d5:4d:66:ec:a4:a0:70:72:94:e0:61:cf:c6:be:
20:3b:f6:dc:64:56:10:ad:68:07:be:49:37:92:af:a3:e6:d6:
fa:33:b3:05:df:f0:1e:d4:2e:b3:c2:85:2b:d2:07:ac:c3:74:
3f:ca:0e:55:ce:03:38:53:3a:bd:eb:83:b9:39:8a:f1:14:ba:
f8:09:bb:e2:ca:78:6c:27:0a:79:f7:3a:08:7c:a9:4f:17:6b:
3d:99:21:d7:83:c1:78:06:e3:e6:3e:d5:55:3c:7f:92:60:70:
e9:fb:98:c5:13:29:6b:65:27:f6:0e:60:7f:1a:8d:77:d4:5c:
dd:10:61:8c:dc:c0:a8:b2:b4:29:4c:f6:0e:d9:bb:04:a8:cc:
c9:47:1d:b9:6a:20:61:09:1e:68:dc:de:11:73:4f:91:92:9e:
87:e9:de:87:57:52:b1:e0:ec:98:0b:03:d8:44:e6:25:c4:e6:
bc:a2:7d:96:ce:75:71:5e:e3:88:d8:f7:f7:63:c8:d0:11:6d:
65:cc:67:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:42:46 2026 by rpki-client