This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
File: 1jZSRQ6nVZE88xr8-popIaSK4aQ.mft (raw, json)
Hash identifier: wR/rDIC7QBTv7uYzaE4ssyveEYh4QteOnVIOsW53J4w=
Subject key identifier: 08:9E:6A:30:6A:2C:E2:5E:82:AB:39:8D:D9:BF:AB:77:CC:6D:8F:50
Authority key identifier: D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4
Certificate issuer: /CN=A917BB1B/serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4
Certificate serial: 0467
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
Manifest number: 0460
Signing time: Sat 24 Jan 2026 23:21:49 +0000
Manifest this update: Sat 24 Jan 2026 23:21:48 +0000
Manifest next update: Sat 31 Jan 2026 23:21:48 +0000
Files and hashes: 1: 1jZSRQ6nVZE88xr8-popIaSK4aQ.crl (hash: gSQA6gIquY7r/8IafSdJ0zX0UsF3XrLclyOki0rCWaI=)
2: E69DB7E67F7911EC86DE4B56C4F9AE02.roa (hash: SCsr6a/OxC+h0TbqqqQWA1WP6sx9Kte4TE8O/kgTqE0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl
rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1127 (0x467)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB1B, serialNumber=D63652450EA755913CF31AFCFA9A2921A48AE1A4
Validity
Not Before: Jan 24 23:21:48 2026 GMT
Not After : Jan 31 23:21:48 2026 GMT
Subject: CN=6975540d-5c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:7a:bc:12:3a:04:f2:66:f7:e1:c9:94:95:
f0:b1:68:68:54:38:42:ab:36:3c:81:58:3d:ef:c8:
d5:43:ff:41:69:ae:7e:b7:61:86:36:5d:79:fe:97:
13:d8:c7:24:b1:6e:db:7d:36:47:08:8b:5e:f8:d3:
25:aa:51:fd:a8:85:3f:9a:b1:31:20:f9:15:21:68:
84:ed:66:a9:fa:00:0b:e7:3f:ca:30:48:45:95:94:
e9:e6:51:85:09:a8:16:d6:a5:8a:6f:9c:16:15:fb:
03:f5:df:8f:10:64:36:d8:bb:7e:41:e1:bb:d7:d6:
d0:12:67:73:de:51:f8:f2:56:65:2c:da:98:b6:db:
db:73:31:b1:15:77:6f:8e:80:e8:70:34:c3:6f:bd:
a0:ff:9a:5e:5a:9b:d4:8d:06:0d:8f:96:db:e2:50:
0a:e6:18:c6:c6:cb:24:4f:d1:b8:c0:bc:51:ca:cb:
0c:2f:07:bd:33:4e:ca:f3:5d:1e:03:88:4f:9a:7a:
11:20:43:40:d7:f7:62:26:54:78:08:a4:6f:d8:7b:
3c:ba:b8:b3:03:c7:a7:d5:ad:06:2a:e2:ef:49:24:
40:fe:8e:68:8d:10:70:f8:e4:48:fa:ee:b6:02:8b:
fe:9e:0b:0c:da:f5:8e:0f:2a:d8:ae:36:a8:c9:0b:
21:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9E:6A:30:6A:2C:E2:5E:82:AB:39:8D:D9:BF:AB:77:CC:6D:8F:50
X509v3 Authority Key Identifier:
keyid:D6:36:52:45:0E:A7:55:91:3C:F3:1A:FC:FA:9A:29:21:A4:8A:E1:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1jZSRQ6nVZE88xr8-popIaSK4aQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB1B/D9B9C88C7F3611ECA90BCA3AC4F9AE02/1jZSRQ6nVZE88xr8-popIaSK4aQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:a9:67:0c:e6:97:75:91:dd:6d:97:8c:d3:f3:15:82:7c:16:
ec:88:de:17:cc:8c:73:fc:00:08:69:ff:fb:7e:d8:a6:49:e7:
75:5a:35:51:a6:f9:c8:b4:4f:c7:cd:7b:02:c9:34:4b:82:a3:
56:e9:80:c6:0a:7c:eb:c1:4d:a0:26:68:fd:15:51:dc:c6:0a:
8a:1a:f6:c6:d6:17:33:6a:61:31:c4:53:17:67:a7:b4:7c:59:
13:6b:71:73:f4:1e:a4:44:55:4e:3a:08:da:1a:7c:38:2e:14:
90:35:bc:0f:52:cc:fa:47:f1:28:84:2a:5d:02:75:c7:79:44:
ca:ea:da:f8:10:0f:26:a0:b3:2f:aa:53:a5:66:e2:dc:37:09:
b3:b4:67:c1:54:3f:11:d0:de:62:3a:6b:10:49:3e:39:bf:52:
e5:c3:fb:a1:33:86:83:93:0b:df:58:09:7a:7c:06:08:4d:23:
70:5d:b5:98:38:93:a8:45:58:c1:42:59:33:12:02:0c:06:9b:
66:79:d6:5c:eb:bc:51:62:6a:23:72:05:df:71:74:68:44:19:
4a:8c:25:3d:02:a4:03:90:a0:af:53:f1:37:4c:ce:6d:c9:77:
d4:e2:4b:dc:77:55:5a:0e:d9:66:73:a3:7e:e5:7b:c7:52:8c:
87:ed:c5:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0JCMUIxMTAvBgNVBAUTKEQ2MzY1MjQ1MEVBNzU1OTEzQ0YzMUFGQ0ZBOUEyOTIx
QTQ4QUUxQTQwHhcNMjYwMTI0MjMyMTQ4WhcNMjYwMTMxMjMyMTQ4WjAYMRYwFAYD
VQQDDA02OTc1NTQwZC01YzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtKZ6vBI6BPJm9+HJlJXwsWhoVDhCqzY8gVg978jVQ/9Baa5+t2GGNl15/pcT
2McksW7bfTZHCIte+NMlqlH9qIU/mrExIPkVIWiE7Wap+gAL5z/KMEhFlZTp5lGF
CagW1qWKb5wWFfsD9d+PEGQ22Lt+QeG719bQEmdz3lH48lZlLNqYttvbczGxFXdv
joDocDTDb72g/5peWpvUjQYNj5bb4lAK5hjGxsskT9G4wLxRyssMLwe9M07K810e
A4hPmnoRIENA1/diJlR4CKRv2Hs8urizA8en1a0GKuLvSSRA/o5ojRBw+ORI+u62
Aov+ngsM2vWODyrYrjaoyQshmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAieajBq
LOJegqs5jdm/q3fMbY9QMB8GA1UdIwQYMBaAFNY2UkUOp1WRPPMa/PqaKSGkiuGk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkIxQi9EOUI5Qzg4QzdG
MzYxMUVDQTkwQkNBM0FDNEY5QUUwMi8xalpTUlE2blZaRTg4eHI4LXBvcElhU0s0
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFqWlNSUTZuVlpFODh4cjgtcG9wSWFTSzRhUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QkIxQi9EOUI5Qzg4QzdGMzYxMUVDQTkwQkNBM0FDNEY5QUUwMi8xalpTUlE2blZa
RTg4eHI4LXBvcElhU0s0YVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBIqWcM5pd1kd1tl4zT8xWCfBbsiN4XzIxz/AAIaf/7ftimSed1WjVR
pvnItE/HzXsCyTRLgqNW6YDGCnzrwU2gJmj9FVHcxgqKGvbG1hczamExxFMXZ6e0
fFkTa3Fz9B6kRFVOOgjaGnw4LhSQNbwPUsz6R/EohCpdAnXHeUTK6tr4EA8moLMv
qlOlZuLcNwmztGfBVD8R0N5iOmsQST45v1Llw/uhM4aDkwvfWAl6fAYITSNwXbWY
OJOoRVjBQlkzEgIMBptmedZc67xRYmojcgXfcXRoRBlKjCU9AqQDkKCvU/E3TM5t
yXfU4kvcd1VaDtlmc6N+5XvHUoyH7cWR
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:37:46 2026 by rpki-client