This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft
File: zFYtxSbsguOOtsIo8wMNGLYkwVI.mft (raw, json)
Hash identifier: uCM+/uWVXfUR8fE5He6ZCZu6hIu4Oh3DFWXlg+RN60M=
Subject key identifier: D3:50:FD:6E:B3:E4:94:6C:25:29:A5:36:0B:14:91:E7:03:FC:E4:88
Authority key identifier: CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52
Certificate issuer: /CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152
Certificate serial: 1B5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft
Manifest number: 1B2B
Signing time: Sat 24 Jan 2026 16:04:52 +0000
Manifest this update: Sat 24 Jan 2026 16:04:52 +0000
Manifest next update: Sat 31 Jan 2026 16:04:52 +0000
Files and hashes: 1: zFYtxSbsguOOtsIo8wMNGLYkwVI.crl (hash: vNfdXUNNGo7RDOf3jHOf/lY0vKdlbgYXhIP3511PqYo=)
2: 6C5BE410BD9F11EE963C753BC4F9AE02.roa (hash: E8poe511tT12mN3D43tSXFWw8+TubiylMLlGYceMw8k=)
3: B15CDE14707811E7998D782EC4F9AE02.roa (hash: UTFTTuxzbPbzERzizayzrI4dKSt6nHchSbLEcO10f2g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl
rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:04:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7005 (0x1b5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D048, serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152
Validity
Not Before: Jan 24 16:04:52 2026 GMT
Not After : Jan 31 16:04:52 2026 GMT
Subject: CN=6974eda4-5220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5a:f7:c5:61:e0:ea:2d:75:3a:ba:42:4a:bb:
ea:8e:d1:af:05:fe:33:3e:2f:60:70:75:5b:d9:e1:
a6:81:81:1b:03:3b:33:68:24:04:b6:99:c9:80:2f:
79:a0:b8:07:b1:fa:09:fa:a2:0e:27:5f:cb:35:8d:
e6:55:3c:e7:14:4b:5a:a5:e7:67:d3:81:90:16:06:
58:a5:f1:71:3e:0c:4a:2b:cd:e1:fc:be:22:93:f4:
06:eb:10:a6:19:27:92:6d:4c:c6:e3:ea:00:38:bb:
32:f1:89:93:6a:b3:cc:c3:cf:24:a8:cf:c0:9f:8a:
73:c0:31:e9:3c:58:85:51:cb:e9:b6:e5:8e:2c:09:
46:76:11:14:d7:62:31:48:52:86:c0:64:44:9a:9a:
74:f7:32:59:75:99:ca:25:b8:6e:c9:f0:b4:ef:ca:
31:4b:16:dc:7c:6c:91:ca:ba:6a:e3:35:b2:29:ee:
2c:27:32:ea:e6:d6:f3:55:bf:e6:9f:61:62:f4:a7:
15:c8:26:5d:23:dc:d5:13:d6:c1:e5:6d:5a:ac:99:
88:8d:6e:a2:cd:26:2e:3f:fa:42:c8:6a:a4:93:e9:
83:db:8b:85:4b:f6:f9:27:7e:08:23:1c:46:23:44:
e7:37:18:64:0b:8b:71:f6:9b:5d:89:87:1e:ca:12:
ab:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:50:FD:6E:B3:E4:94:6C:25:29:A5:36:0B:14:91:E7:03:FC:E4:88
X509v3 Authority Key Identifier:
keyid:CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e3:1d:b4:d8:d4:f1:9a:0f:17:79:8b:0c:c8:5d:70:e2:71:
5e:c0:24:2e:a6:29:24:fa:e3:29:62:0e:23:cd:57:52:78:0b:
20:5b:f4:38:72:c9:94:68:15:3e:09:f6:a0:c9:00:c1:36:d3:
14:c2:47:86:2c:77:88:2c:d5:38:71:d7:fa:83:83:da:95:aa:
9b:cb:93:f6:9b:a2:e0:8a:6b:40:a0:9e:5c:d8:db:d8:78:b3:
47:54:d8:a0:49:d1:e7:0e:80:6d:cc:63:e3:2e:3f:23:e4:8d:
dd:8b:dd:f7:b7:9c:31:d7:98:3b:55:b3:09:95:d7:43:44:0c:
98:7c:df:10:17:96:a8:e4:cd:ba:06:8b:11:6f:78:74:f6:c2:
20:52:3d:9d:a1:d1:72:50:87:2c:f7:57:fd:c8:75:cb:4c:28:
97:69:48:b2:d7:be:e2:ef:d3:b7:27:1a:07:dc:3a:60:6a:1a:
45:fb:84:59:20:f7:c3:c9:a2:79:52:c1:d6:c3:8e:70:ef:5d:
3a:31:c4:7a:ba:41:92:d2:76:08:4d:da:0c:02:72:d1:72:5a:
b8:9a:67:b7:1a:89:4f:48:9f:0e:7a:c3:ee:1f:bb:a8:c0:05:
96:90:2c:b3:06:d9:42:57:ad:66:11:2d:88:2d:ea:0c:10:6b:
56:cd:13:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:56 2026 by rpki-client