This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
File: zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft (raw, json)
Hash identifier: yB53J3nXCYNDKPUPRMbA4N5bL4BgbghwP+K8Kv5V+s4=
Subject key identifier: D7:E7:47:76:B9:15:EC:F6:23:0C:4C:0E:DB:6C:62:E7:6A:AA:B4:8F
Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4
Certificate issuer: /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
Certificate serial: 0C5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
Manifest number: 0C56
Signing time: Sat 24 Jan 2026 18:13:42 +0000
Manifest this update: Sat 24 Jan 2026 18:13:41 +0000
Manifest next update: Sat 31 Jan 2026 18:13:41 +0000
Files and hashes: 1: zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl (hash: wM+NZxJwFe0Wxn01c0tSF+O0dLDXBLOdlkVUr5E0JPQ=)
2: 81C5BFF8192811EA9B88D87DC4F9AE02.roa (hash: jIAkh1NUrc1iwr2RioDBv/ZhY+w3mLjpabVAWwXAW9M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl
rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:13:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3167 (0xc5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EBCB, serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
Validity
Not Before: Jan 24 18:13:41 2026 GMT
Not After : Jan 31 18:13:41 2026 GMT
Subject: CN=69750bd5-ac7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:05:57:5d:0f:df:e3:45:e1:14:99:0c:f9:93:
61:c1:47:c1:ce:5f:cf:13:9e:b8:5b:f0:8e:6e:19:
a4:52:71:85:b8:15:d3:d0:8c:30:a9:6a:0a:5e:c9:
d5:38:ed:2c:af:a7:da:16:64:5c:8a:9e:5e:d2:d2:
68:6b:ed:9a:79:f4:e5:8a:29:42:36:c3:98:fb:c1:
7a:74:55:5b:a0:08:5e:c0:8f:f0:4b:80:2c:03:90:
1e:63:58:b3:33:19:b3:34:50:e9:da:2a:d6:03:bd:
55:f8:70:3d:9f:89:24:bf:01:0b:72:e1:ef:88:88:
73:d4:6b:58:7f:a4:e8:ef:2f:bb:a4:74:e6:ab:6e:
c4:c4:e4:69:42:a7:8c:72:53:b8:b3:4c:6f:4b:5d:
05:fd:64:13:f4:49:63:7e:aa:17:f6:4e:5c:e8:5a:
9a:d1:af:42:62:f3:38:91:ff:18:3c:02:97:39:8b:
0b:4a:98:01:47:d8:c1:6d:03:0e:1e:47:30:81:06:
85:49:53:e7:0e:43:94:b4:77:66:7e:0c:38:94:4a:
ae:28:f8:2f:66:93:f2:9d:c7:f1:43:d0:1d:b7:c9:
1d:bb:ce:fa:84:bd:84:d6:2e:a9:8f:9e:64:35:10:
c6:44:76:95:63:a3:c1:23:85:c8:2d:fa:0f:f3:a3:
d8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E7:47:76:B9:15:EC:F6:23:0C:4C:0E:DB:6C:62:E7:6A:AA:B4:8F
X509v3 Authority Key Identifier:
keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:71:b9:15:68:2f:8b:31:e7:c5:60:eb:b3:bd:6f:15:38:94:
27:de:d0:05:12:9d:71:8e:dc:b8:6a:7d:09:41:68:f4:80:aa:
b5:5f:07:b8:4e:53:ef:0b:9b:4b:19:33:d6:08:91:d4:1c:08:
cf:e1:16:03:c5:71:b5:4a:23:52:2f:75:a1:ba:52:cf:aa:47:
37:a5:be:55:44:85:de:0e:47:02:df:8c:5c:43:41:07:91:76:
71:86:92:75:32:ee:2c:43:1d:1a:e9:1a:e2:ea:32:a2:e8:74:
63:3d:fd:46:97:0c:f0:87:b5:19:75:86:bd:50:81:9f:4b:c5:
d9:26:07:41:ac:9b:6c:56:42:7d:a6:69:ac:e0:3f:48:56:ab:
3b:3e:e4:45:57:d7:d4:24:4c:45:a2:29:25:54:8c:5e:24:86:
57:30:c3:6b:81:c5:61:e3:f3:e2:c7:86:f5:06:d4:1f:ff:07:
8a:21:22:10:ea:4c:1a:51:8b:a1:6e:5d:98:d6:9b:f9:7d:12:
01:df:88:54:3a:6b:a3:b7:ae:aa:d2:de:6f:bd:e0:14:00:7b:
b7:33:d8:fd:13:2c:10:70:57:6e:e5:49:03:23:e9:db:83:92:
09:8d:70:f9:27:5a:6a:26:2c:69:cb:05:2b:36:c0:82:76:80:
89:cc:f1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:18:35 2026 by rpki-client