This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft
File: zWXmdAuufrM71eU4ye5t6LM1RDE.mft (raw, json)
Hash identifier: FPCeV3LVUwkdLCY3QoUV67y0+5vfVxLDjyRp74bMnOo=
Subject key identifier: 36:62:63:BA:0A:4A:DE:44:0C:5F:AA:B4:AE:88:DE:7B:55:0E:A4:14
Authority key identifier: CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31
Certificate issuer: /CN=A916FA49/serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431
Certificate serial: 01A5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft
Manifest number: 019E
Signing time: Sat 24 Jan 2026 16:33:01 +0000
Manifest this update: Sat 24 Jan 2026 16:33:01 +0000
Manifest next update: Sat 31 Jan 2026 16:33:01 +0000
Files and hashes: 1: zWXmdAuufrM71eU4ye5t6LM1RDE.crl (hash: BFIse2ruYtS8ZhamDH4lcX/EUGjWgZAkWTc2r25tfM8=)
2: 74F996F62F2511EF8D78DC62C4F9AE02.roa (hash: TReNRUcB9Slmh+4MFPwcv7z0b4ojdmnvbTh9IbkrL54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl
rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FA49, serialNumber=CD65E6740BAE7EB33BD5E538C9EE6DE8B3354431
Validity
Not Before: Jan 24 16:33:01 2026 GMT
Not After : Jan 31 16:33:01 2026 GMT
Subject: CN=6974f43d-d867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:1f:7b:aa:cb:e7:c3:51:fc:f9:7c:ee:4d:
83:a2:83:28:5e:28:a7:59:6a:1a:f4:67:94:36:1b:
5b:66:f7:ee:48:c0:9b:17:d7:60:9f:2d:87:c4:01:
c2:86:6a:99:c7:de:4a:d2:59:91:2b:e6:86:86:26:
a6:55:da:2a:08:3b:84:cc:e9:78:9a:ec:cd:5f:6d:
b2:21:d0:7c:5f:6a:6f:0d:3c:69:3b:2b:37:02:60:
76:36:24:6f:de:4b:23:cc:87:48:08:18:3e:29:c0:
56:89:01:c6:6e:b5:42:2e:09:5b:7b:15:a6:71:e0:
80:0c:2e:3d:f4:fb:7b:9a:9c:4c:41:ef:dc:78:ad:
5b:86:fb:2b:57:b5:29:4d:16:5a:b7:91:b2:f8:b0:
ae:55:71:91:45:94:d2:ca:9a:c5:d5:38:78:f7:dc:
47:2a:72:a0:a7:37:48:c8:fb:ac:3c:17:58:3a:6b:
96:84:13:36:37:1b:e6:2d:a9:b4:07:ec:a3:7b:9f:
49:c4:de:ee:a2:d8:e4:dd:3b:45:ff:df:27:03:08:
5c:e9:3c:0c:b9:04:b9:60:33:3b:c5:ee:48:19:d4:
8b:4a:b1:52:26:0b:1b:9e:7f:71:3c:90:58:4a:d1:
57:37:b4:98:9f:14:a1:f9:38:0a:11:2d:1f:3b:17:
f0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:62:63:BA:0A:4A:DE:44:0C:5F:AA:B4:AE:88:DE:7B:55:0E:A4:14
X509v3 Authority Key Identifier:
keyid:CD:65:E6:74:0B:AE:7E:B3:3B:D5:E5:38:C9:EE:6D:E8:B3:35:44:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zWXmdAuufrM71eU4ye5t6LM1RDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/A4C0CA96900911EE9E54A033C4F9AE02/zWXmdAuufrM71eU4ye5t6LM1RDE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:1c:72:23:df:4f:f9:96:41:b5:17:11:4e:d3:44:30:e2:6b:
f9:89:46:1b:af:88:ac:b1:18:21:34:8b:22:b4:cd:f4:b7:df:
19:23:44:21:39:c4:cb:a1:61:00:2e:8e:fa:e1:5b:1a:9f:40:
37:d2:d5:39:e8:b5:d2:c8:26:1d:ed:72:c2:09:ad:aa:e8:0d:
39:7c:5d:2e:0c:88:03:b2:04:7a:9b:59:cc:8a:e8:0b:5b:96:
6e:1e:4b:44:74:cb:c2:ed:ab:c5:6f:71:52:98:0f:bb:84:4c:
b6:ca:43:62:11:9b:82:09:30:58:36:c3:49:68:6e:0d:dd:82:
30:54:9b:5b:6d:a4:32:eb:48:3a:40:e7:0a:14:f4:c5:88:fd:
94:51:69:67:52:4e:ee:7c:97:21:1a:0d:71:38:bd:8b:b9:75:
0b:1d:a9:79:28:d4:e1:d1:2f:05:2c:a0:df:eb:96:df:b0:a4:
6f:b9:e9:11:48:e6:a1:4a:bf:d2:d4:dc:23:4d:91:87:0a:1d:
27:7a:0a:9b:92:ba:a8:6b:45:61:b3:cd:91:ac:00:96:f4:b7:
66:20:f2:83:81:af:40:2b:50:72:1b:da:a9:ab:c0:0b:b0:32:
64:12:2c:78:ed:41:e3:c7:3b:c2:4d:cd:dc:da:76:aa:f0:2a:
c8:0b:0e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:42:35 2026 by rpki-client