This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft
File: 0Z0h9lpMk802wwczAhMPTmW38Ok.mft (raw, json)
Hash identifier: unkyWFzWufzPC1gU5GyRTZJjyt5axYp0AOdN+HWcZzg=
Subject key identifier: 56:3A:B6:DB:C7:C9:69:E8:10:F5:CA:33:EA:2A:63:E2:A9:43:1F:54
Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9
Certificate issuer: /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9
Certificate serial: 01FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft
Manifest number: 01F5
Signing time: Sun 25 Jan 2026 01:53:09 +0000
Manifest this update: Sun 25 Jan 2026 01:53:09 +0000
Manifest next update: Sun 01 Feb 2026 01:53:09 +0000
Files and hashes: 1: 0Z0h9lpMk802wwczAhMPTmW38Ok.crl (hash: euEy/Vlw0PsiVo3iDKkiS9cbFMw73gu1wYt+seNRY9k=)
2: 4C30AA30B08411EFA29E6722C4F9AE02.roa (hash: DrYkymHZyiAQw1Bqzltyrk4HKF4mxO309GHL6Bkb9ho=)
3: 5CBE3872145C11F0BFD6B347C4F9AE02.roa (hash: /WHhFE8HR2/iD7xp6rQgZmxwAGaC9m5vwnf8mgyK/js=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl
rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:53:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511 (0x1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91765CB, serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9
Validity
Not Before: Jan 25 01:53:09 2026 GMT
Not After : Feb 1 01:53:09 2026 GMT
Subject: CN=69757785-9d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:7c:da:3f:11:b6:f3:bb:4b:5c:32:70:9d:
e9:35:4f:23:32:58:d7:e0:c8:ee:54:87:d9:88:bc:
57:48:84:6e:34:80:10:c5:fa:ca:30:98:b8:11:98:
0d:5b:65:b6:77:02:b0:6a:f2:15:47:1f:77:cf:f2:
20:e3:b0:61:a9:05:86:d3:d2:94:a9:a4:cc:bb:ba:
cd:ee:42:e9:5a:82:ff:cf:95:f5:81:de:6b:fc:12:
c4:66:64:3c:28:48:34:49:cf:fc:13:fc:45:83:ca:
eb:6b:3c:8a:06:ff:2c:bc:58:4e:1a:9e:72:46:77:
75:d1:e2:4e:b7:ec:db:89:d4:74:8c:dd:cc:f4:b2:
7c:fe:37:13:12:5f:2d:77:0f:dd:42:85:7a:f7:bc:
44:cb:3b:21:4f:79:6f:65:c0:cb:22:47:58:b7:7c:
33:aa:49:f7:f8:12:fe:f6:cd:58:cf:93:3b:06:0b:
52:94:67:e8:a0:6d:44:fb:f9:38:a4:07:c4:64:c7:
bf:ab:bd:bf:38:6c:da:15:02:ba:b2:a0:b2:99:c3:
6a:7a:e0:71:52:6e:9c:75:1b:db:bd:f4:83:1d:4b:
27:ad:79:2c:bd:b3:17:21:0a:c1:63:0b:76:ea:c1:
8d:ef:a6:cb:76:be:e6:8c:ca:97:28:98:32:b1:0e:
ed:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3A:B6:DB:C7:C9:69:E8:10:F5:CA:33:EA:2A:63:E2:A9:43:1F:54
X509v3 Authority Key Identifier:
keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:a0:1b:17:2a:5c:d6:01:71:c3:07:4a:46:10:0a:5b:4e:ce:
a3:0c:21:e3:7f:a7:10:0a:fd:e8:f1:cb:b1:4b:2e:a3:8d:84:
21:06:c7:ab:8c:ca:56:8c:7f:89:01:c5:f8:0d:4d:60:b5:18:
ca:a1:c8:32:e7:95:3d:fd:1d:29:77:cf:a0:29:e4:d2:83:09:
89:7d:b3:b4:68:29:59:7e:57:06:92:13:ac:d1:19:28:18:26:
2d:99:3a:5d:42:93:70:3c:77:41:2a:94:ee:0f:36:71:2c:21:
f2:9c:56:3b:af:c9:e3:a0:2b:e3:9a:72:ba:4e:f6:33:f5:4f:
39:15:c3:08:3b:58:74:57:02:b2:a5:ce:86:5f:36:2a:52:9a:
15:82:4d:2e:1d:1c:d0:e9:a1:64:50:92:eb:d2:56:75:a9:b5:
83:05:6e:60:79:69:54:c7:7b:23:a3:73:3e:2d:91:4c:ca:55:
70:87:2a:b8:06:ea:ad:4d:5b:40:9f:5b:a5:02:3c:56:61:c1:
de:6d:5f:6b:4f:0c:86:10:84:0a:fc:53:01:7a:a8:8b:88:ed:
c7:49:6f:65:7e:5f:5f:6e:05:69:06:bc:50:c3:00:de:4d:c9:
cf:c0:f1:51:46:e1:6e:71:41:5c:ab:d8:46:98:50:fc:69:34:
c6:f9:53:a0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzY1Q0IxMTAvBgNVBAUTKEQxOUQyMUY2NUE0QzkzQ0QzNkMzMDczMzAyMTMwRjRF
NjVCN0YwRTkwHhcNMjYwMTI1MDE1MzA5WhcNMjYwMjAxMDE1MzA5WjAYMRYwFAYD
VQQDDA02OTc1Nzc4NS05ZDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAryF82j8RtvO7S1wycJ3pNU8jMljX4MjuVIfZiLxXSIRuNIAQxfrKMJi4EZgN
W2W2dwKwavIVRx93z/Ig47BhqQWG09KUqaTMu7rN7kLpWoL/z5X1gd5r/BLEZmQ8
KEg0Sc/8E/xFg8rrazyKBv8svFhOGp5yRnd10eJOt+zbidR0jN3M9LJ8/jcTEl8t
dw/dQoV697xEyzshT3lvZcDLIkdYt3wzqkn3+BL+9s1Yz5M7BgtSlGfooG1E+/k4
pAfEZMe/q72/OGzaFQK6sqCymcNqeuBxUm6cdRvbvfSDHUsnrXksvbMXIQrBYwt2
6sGN76bLdr7mjMqXKJgysQ7tNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFY6ttvH
yWnoEPXKM+oqY+KpQx9UMB8GA1UdIwQYMBaAFNGdIfZaTJPNNsMHMwITD05lt/Dp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjVDQi82OTU1MTVFMDA2
MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4MDJ3d2N6QWhNUFRtVzM4
T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBaMGg5bHBNazgwMnd3Y3pBaE1QVG1XMzhPay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NjVDQi82OTU1MTVFMDA2MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4
MDJ3d2N6QWhNUFRtVzM4T2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBGoBsXKlzWAXHDB0pGEApbTs6jDCHjf6cQCv3o8cuxSy6jjYQhBser
jMpWjH+JAcX4DU1gtRjKocgy55U9/R0pd8+gKeTSgwmJfbO0aClZflcGkhOs0Rko
GCYtmTpdQpNwPHdBKpTuDzZxLCHynFY7r8njoCvjmnK6TvYz9U85FcMIO1h0VwKy
pc6GXzYqUpoVgk0uHRzQ6aFkUJLr0lZ1qbWDBW5geWlUx3sjo3M+LZFMylVwhyq4
BuqtTVtAn1ulAjxWYcHebV9rTwyGEIQK/FMBeqiLiO3HSW9lfl9fbgVpBrxQwwDe
TcnPwPFRRuFucUFcq9hGmFD8aTTG+VOg
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:29:39 2026 by rpki-client