This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft
File: A0ZyQIbx848yyqFygmhZGcfIu28.mft (raw, json)
Hash identifier: x/7q//PoyWaCa0tcq5KwtNlUKpy2ynucrPwRZ8MEXZE=
Subject key identifier: D3:5A:21:1B:10:B2:E6:4A:17:8C:F4:FF:1C:74:48:D5:8B:3C:9A:65
Authority key identifier: 03:46:72:40:86:F1:F3:8F:32:CA:A1:72:82:68:59:19:C7:C8:BB:6F
Certificate issuer: /CN=A9173591/serialNumber=0346724086F1F38F32CAA17282685919C7C8BB6F
Certificate serial: 0C3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0ZyQIbx848yyqFygmhZGcfIu28.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft
Manifest number: 0C39
Signing time: Sat 24 Jan 2026 18:17:10 +0000
Manifest this update: Sat 24 Jan 2026 18:17:10 +0000
Manifest next update: Sat 31 Jan 2026 18:17:10 +0000
Files and hashes: 1: A0ZyQIbx848yyqFygmhZGcfIu28.crl (hash: ECITIaZmkMriSCtDmdq3/CnK2G4dzVdqykEImpJlhOo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.crl
rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0ZyQIbx848yyqFygmhZGcfIu28.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3131 (0xc3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173591, serialNumber=0346724086F1F38F32CAA17282685919C7C8BB6F
Validity
Not Before: Jan 24 18:17:10 2026 GMT
Not After : Jan 31 18:17:10 2026 GMT
Subject: CN=69750ca6-7f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:8b:c9:2b:37:7d:65:e7:4b:4f:6c:e1:d1:
4a:15:55:dc:a3:d2:a8:03:a8:cc:62:1e:7c:9c:74:
90:13:54:12:41:1c:89:bb:53:e9:d9:ca:31:2b:57:
0f:23:d1:f7:40:e4:3e:d8:a4:e4:a7:c7:2e:0e:f8:
14:95:a4:e2:27:8b:19:bf:b1:2b:e8:bd:a0:76:84:
2b:26:77:25:6c:b5:f8:1d:5a:12:34:38:90:7b:77:
82:fb:06:b6:39:dd:ba:f8:8c:71:8c:ad:d8:b0:fe:
fe:39:32:f8:2a:37:a0:c7:af:d6:a6:cc:55:2e:7d:
bc:e8:6a:04:ff:66:45:41:78:bc:af:61:b9:75:9a:
c2:dd:f1:ae:bc:17:f2:50:2b:ac:25:54:e6:70:4f:
52:a5:14:77:4a:f1:66:ab:fc:27:e7:0d:de:48:65:
f8:7d:6b:73:d0:3e:24:43:a7:34:42:d0:ae:a3:05:
19:e0:b4:e0:40:74:bc:64:2b:91:e9:40:88:a2:af:
bb:40:c8:00:fb:3d:6a:0d:73:de:e8:13:c3:d2:5f:
f9:bd:4f:95:30:c5:b4:9b:1b:c4:40:93:88:17:8d:
1f:38:53:41:b8:2b:e8:a0:42:4c:59:34:c7:42:ab:
67:65:85:5b:cf:40:7b:c0:24:4f:93:67:27:4d:3a:
03:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5A:21:1B:10:B2:E6:4A:17:8C:F4:FF:1C:74:48:D5:8B:3C:9A:65
X509v3 Authority Key Identifier:
keyid:03:46:72:40:86:F1:F3:8F:32:CA:A1:72:82:68:59:19:C7:C8:BB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0ZyQIbx848yyqFygmhZGcfIu28.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173591/2768FBA61D6F11EA9B56E726C4F9AE02/A0ZyQIbx848yyqFygmhZGcfIu28.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:72:ab:05:94:9e:12:6d:47:12:46:a2:8b:3a:06:5f:a8:46:
ea:03:c3:80:c9:68:40:00:b2:3c:4b:07:dd:26:43:57:f5:b4:
8e:3a:7b:8d:5a:a1:45:0b:8d:51:41:1f:ff:4f:8a:65:85:53:
38:73:1c:0e:61:84:a0:62:41:77:91:a4:4a:79:35:1b:b4:78:
fd:90:52:93:d3:db:0e:2c:78:17:25:ab:a7:3c:79:d5:0c:57:
1b:ac:76:1b:ab:72:27:69:6e:6f:3b:4b:39:d5:54:a3:e0:53:
fb:40:a4:7e:bf:6a:de:fb:8e:09:fb:c6:53:fc:65:1e:00:ee:
31:ea:1d:a8:fa:7b:a8:4b:88:72:9a:bd:b7:92:02:6d:b7:97:
74:95:bb:73:96:c1:93:c3:a9:9c:4d:ca:bd:b7:b6:e1:65:f2:
7a:34:8a:b4:a1:02:d4:ad:9e:58:e8:e8:4a:c1:ce:5f:71:42:
a1:ff:e7:8f:49:c0:44:e7:ee:95:d2:ac:17:6e:d5:b2:04:65:
e6:0b:57:6a:c1:a2:d8:6c:78:08:a1:96:73:f8:4c:4d:f8:01:
20:54:0e:e7:13:70:05:6b:8b:54:a3:a4:f8:6b:18:56:61:db:
96:c8:c1:44:08:d3:fe:59:54:29:c7:39:fa:e4:70:b2:27:4a:
07:23:14:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:37:36 2026 by rpki-client