This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
File: PzbQyAdues-oPQS3IwcXKogp1bM.mft (raw, json)
Hash identifier: 2kcn8tmIJav/R0x0P2ACRuJZTiOmtLmQJegfTd0E898=
Subject key identifier: EE:57:80:4F:EA:09:FA:56:24:62:42:E6:59:34:FA:8D:B5:F5:31:23
Authority key identifier: 3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3
Certificate issuer: /CN=A9172B65/serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
Certificate serial: 0122
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
Manifest number: 011F
Signing time: Sun 25 Jan 2026 04:02:04 +0000
Manifest this update: Sun 25 Jan 2026 04:02:03 +0000
Manifest next update: Sun 01 Feb 2026 04:02:03 +0000
Files and hashes: 1: PzbQyAdues-oPQS3IwcXKogp1bM.crl (hash: SyhKJgato2++AUTEMpDT4iyGl3GMMHTr2DoPoox1+jQ=)
2: 76C3F7C645B711EFA2F0C732C4F9AE02.roa (hash: aCVP0X/9Z8ofCrDnxKwhn3zCeNoQ7d2oYMrk7SMurU8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl
rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172B65, serialNumber=3F36D0C8076E7ACFA83D04B72307172A8829D5B3
Validity
Not Before: Jan 25 04:02:03 2026 GMT
Not After : Feb 1 04:02:03 2026 GMT
Subject: CN=697595bc-1682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:29:48:fd:15:b1:33:c3:09:18:42:d5:fd:4c:
dc:69:78:1c:c4:e8:b2:ad:cc:21:4c:3d:9e:a7:1b:
ef:7c:fe:cb:aa:86:95:84:12:85:04:9c:aa:94:cd:
16:52:c8:a9:d8:94:85:ea:fd:ba:6a:5c:1f:d1:11:
1e:6e:b1:04:2a:55:c2:78:1f:3d:e8:be:e0:c0:b9:
43:ae:d8:f9:ba:c6:90:cd:50:2f:18:09:b9:51:4c:
ab:d6:e0:32:dc:7e:1c:8d:50:e8:5f:a7:a4:80:bc:
28:c6:68:b4:a5:ba:26:95:90:fc:4d:32:4c:f3:c4:
33:0d:ba:78:16:f9:6a:6a:3c:3b:01:f8:3a:b5:89:
7e:37:98:74:50:4d:e9:5d:54:a7:b8:0f:4d:8d:55:
8d:27:c3:17:06:d0:a1:4a:81:36:72:3b:9e:42:82:
87:12:5c:be:4a:1c:22:09:0c:83:a6:26:16:75:56:
48:5a:d8:74:10:10:28:2e:d9:ca:08:d2:96:95:9c:
c3:34:f1:00:56:b3:d0:c6:5a:c2:0c:27:f7:6a:2b:
1d:b4:d1:b5:63:f5:72:a9:68:37:3e:0e:a8:86:c2:
cc:0d:49:3a:89:11:e5:2c:af:0a:2c:98:0a:a5:83:
8b:32:ae:86:ff:23:77:c3:0a:15:77:04:9a:62:ce:
32:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:57:80:4F:EA:09:FA:56:24:62:42:E6:59:34:FA:8D:B5:F5:31:23
X509v3 Authority Key Identifier:
keyid:3F:36:D0:C8:07:6E:7A:CF:A8:3D:04:B7:23:07:17:2A:88:29:D5:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PzbQyAdues-oPQS3IwcXKogp1bM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B65/015F6DEE45B711EFA59E1332C4F9AE02/PzbQyAdues-oPQS3IwcXKogp1bM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:50:2f:c4:f5:b7:db:42:a6:6a:18:3e:ab:82:5f:1d:e0:aa:
73:dd:d0:f6:f3:58:6d:cb:21:c9:e9:48:14:e9:94:cd:12:f8:
64:5d:6b:b4:be:d9:13:0b:64:60:93:35:b3:e4:3b:cd:33:c1:
04:d2:97:96:d8:57:75:7b:c6:4d:e7:8c:d1:59:c6:c1:3d:93:
30:f9:a0:af:d0:10:8f:92:60:67:11:6f:88:d3:ed:0c:52:7e:
bd:74:03:11:11:01:5c:8b:f7:b3:8c:1f:c3:f3:f3:06:40:9a:
6b:50:03:86:8f:d4:24:66:9f:c2:71:4d:e2:c4:03:a7:7f:57:
1f:65:b4:d8:0a:6c:ab:1b:69:14:d5:3a:1b:6b:56:cd:60:86:
b4:14:58:d4:14:ac:6e:88:aa:aa:85:0b:37:ee:14:c8:91:32:
1a:18:69:f3:b0:fe:8a:15:8a:f2:02:4c:7d:45:af:26:22:ea:
46:1b:37:df:d3:bb:f8:03:4d:7d:9c:fa:94:cb:19:ef:09:d3:
7c:73:bb:45:8d:d4:86:ad:8d:84:6a:e6:9a:7e:6b:df:54:96:
5b:6d:5c:93:37:c3:a3:a1:96:67:34:0c:2c:79:93:2b:9a:88:
09:21:05:0d:a5:53:24:a0:b0:e7:a4:51:d8:b2:0c:51:31:56:
7e:39:f3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:36:08 2026 by rpki-client