This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft
File: zmNwmX29E9IOXsYWW1qe46KCprA.mft (raw, json)
Hash identifier: EnSwcCscBFwCIRpuTpHMHDxAkqc7G/oQvvDEnVG0/nU=
Subject key identifier: 70:3A:C2:06:A6:F5:9A:E2:24:25:CC:A7:EC:B5:69:64:71:92:4D:C1
Authority key identifier: CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0
Certificate issuer: /CN=A917ACA8/serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0
Certificate serial: 01A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft
Manifest number: 0193
Signing time: Sun 25 Jan 2026 02:56:16 +0000
Manifest this update: Sun 25 Jan 2026 02:56:16 +0000
Manifest next update: Sun 01 Feb 2026 02:56:16 +0000
Files and hashes: 1: zmNwmX29E9IOXsYWW1qe46KCprA.crl (hash: Sd0LzSGBEe0F0Ws9MbjeI/pu+z8tfKS74gcW/x24k6g=)
2: CC389424E71D11F0959F3B7B706F56BC.roa (hash: XrkvDZl305JjEZHdxRpAIZsUCABh+4O4F2uA7YcPSEo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl
rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416 (0x1a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ACA8, serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0
Validity
Not Before: Jan 25 02:56:16 2026 GMT
Not After : Feb 1 02:56:16 2026 GMT
Subject: CN=69758650-5cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:cf:33:39:42:b9:ce:0f:ac:e1:b2:79:26:
29:35:1b:1e:fa:cc:c2:59:ed:fc:c1:27:2f:d7:a4:
7e:a7:8b:6e:c7:bc:6c:c8:4e:83:cc:0f:c6:73:17:
bc:c0:9d:ba:50:e9:1b:5c:a0:25:d7:21:7a:28:43:
77:ed:85:12:a1:5a:01:ca:40:d7:33:bf:9e:f5:14:
53:92:c3:17:48:0c:8a:10:4e:b8:cc:72:50:d4:dd:
68:fc:27:26:8d:7c:3e:3e:52:c9:44:49:02:f2:b7:
4f:a4:9b:88:e7:29:4c:4c:f5:41:33:b3:8d:4d:f4:
b6:02:4f:4f:14:1e:f9:d3:dd:8e:31:26:dd:2a:0c:
1a:46:54:65:82:52:ad:a1:90:44:7c:3d:6a:eb:6f:
f2:5a:9d:b6:db:1f:bd:31:cd:88:c7:e5:c5:83:63:
85:8e:e1:25:d5:b9:c6:6b:e3:a4:61:bc:51:26:5c:
d7:2e:88:f9:7f:52:63:94:c9:c4:ce:53:25:e7:af:
fa:2a:43:ca:83:92:41:39:28:a0:92:ba:66:3d:7c:
e3:fd:fc:f2:2f:ca:f2:de:4d:86:08:b3:a9:57:66:
1f:a7:22:6f:4b:fe:b5:71:78:d8:35:18:79:1e:a7:
8b:f4:e6:35:8f:4e:c0:90:57:e9:bc:be:63:06:c4:
f0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3A:C2:06:A6:F5:9A:E2:24:25:CC:A7:EC:B5:69:64:71:92:4D:C1
X509v3 Authority Key Identifier:
keyid:CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:8f:d3:50:40:8f:ed:b4:e8:fb:96:fb:1f:c4:a0:91:bf:be:
34:20:e4:0b:2a:dd:b9:1c:85:a4:e6:97:ab:5f:2b:a3:40:55:
94:df:2b:51:9d:c3:9e:6d:7d:a1:69:19:df:28:4b:28:48:f3:
54:bb:0b:6b:07:7e:04:a2:e7:4e:67:bb:13:4b:dc:23:8b:62:
e4:c1:1a:ef:1b:0a:63:23:0c:b7:88:99:a8:60:27:ae:c4:e4:
c3:52:40:5b:3d:94:4c:8f:ee:ce:10:5d:de:03:42:85:ef:2b:
2c:4d:47:ff:bf:07:0c:19:6e:34:3e:6f:32:8a:34:4e:4a:28:
4f:97:0a:e3:00:a3:ed:d1:f8:a9:a1:03:f3:de:f1:ff:ba:68:
8e:c9:b0:de:ed:50:91:49:64:41:de:d7:1d:d8:b3:dc:4c:f2:
b6:e7:1b:4c:8a:9c:fa:c5:69:35:e5:ff:8d:bc:dd:55:4c:c9:
6f:b9:44:26:b9:bb:0d:76:3d:ae:7e:e2:53:4e:d4:53:de:7b:
63:ba:0d:52:a0:a1:38:f4:ac:01:ca:2d:c5:27:f6:af:4e:c5:
a6:91:df:61:6e:97:f8:7b:1b:77:85:30:13:53:1f:88:1e:3c:
15:a3:85:f3:d3:2b:a8:25:e0:41:d7:f1:b2:37:04:9c:6d:e9:
67:e5:1c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:48:11 2026 by rpki-client