This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
File: pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft (raw, json)
Hash identifier: uwn2krct3U7JA+Pwsdi6sfIxFuMfefkbwfc4XCMPwtc=
Subject key identifier: 3B:AA:B4:12:7B:F2:4B:E6:1D:0C:07:EC:38:F4:27:A6:6A:85:7F:8E
Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94
Certificate issuer: /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694
Certificate serial: 02BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
Manifest number: 02B9
Signing time: Sun 25 Jan 2026 00:36:31 +0000
Manifest this update: Sun 25 Jan 2026 00:36:31 +0000
Manifest next update: Sun 01 Feb 2026 00:36:31 +0000
Files and hashes: 1: pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl (hash: eudld4EVODrOYEUjvfDRzbRXbOioUO2ksGLnjNiO0rg=)
2: FF037E8C242A11ED9547B486C4F9AE02.roa (hash: MgFm4THdmwL6zytdxmjk3HXdtQyd16HyCuxXpvALrxs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl
rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 702 (0x2be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918016E, serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694
Validity
Not Before: Jan 25 00:36:31 2026 GMT
Not After : Feb 1 00:36:31 2026 GMT
Subject: CN=6975658f-ecd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:ba:b1:5d:4b:dc:f6:14:e9:c1:e6:c2:f9:
1c:6d:f7:a1:55:e1:7e:96:eb:d6:d1:6c:e6:1d:3d:
60:44:08:e5:a1:55:6c:bb:0b:20:e3:d6:2a:2c:87:
ac:91:4e:39:40:5b:7b:53:71:06:55:6a:76:2b:40:
40:fe:e7:e5:79:55:51:23:6d:55:2a:2e:aa:b7:70:
34:d0:a8:da:fb:af:41:aa:8d:73:4f:fd:61:25:68:
1e:f6:02:72:f4:5b:9e:45:a5:a0:25:2c:43:fb:dc:
5d:6f:b0:42:bf:43:f6:d1:1c:48:d7:a0:95:70:2f:
a2:e4:37:dd:d2:ab:54:7f:70:ff:60:ba:60:7f:f8:
45:80:9a:e3:c9:7d:14:c7:8c:48:6e:a7:ed:d0:31:
4e:1c:28:4c:c7:a2:52:dc:82:ad:63:1e:e9:d8:fd:
1e:d8:81:0e:4a:66:48:ff:0b:36:95:3d:b5:41:ad:
a5:6a:16:f5:8f:7d:a2:b0:c3:81:e9:2d:f7:9b:58:
e2:88:fe:33:e4:cb:5c:da:ea:49:b9:0d:d3:cf:12:
ab:26:d5:32:d8:ad:99:b5:3d:89:6c:c4:24:7c:8a:
34:ed:cd:2c:ba:fa:cc:3e:1b:fd:39:34:5b:5c:24:
40:42:8a:e2:a1:d2:6b:34:ca:1e:26:c3:df:54:e6:
6f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AA:B4:12:7B:F2:4B:E6:1D:0C:07:EC:38:F4:27:A6:6A:85:7F:8E
X509v3 Authority Key Identifier:
keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:6c:c3:4b:31:df:72:b6:36:b4:91:61:11:78:d9:eb:e0:fe:
55:fd:e8:2d:a1:fd:0d:08:7f:92:f9:26:31:56:bf:b3:a4:8e:
e4:13:e0:25:a6:6e:83:ce:91:c3:19:14:9b:84:06:d9:54:18:
0c:20:06:c1:44:08:d7:20:ce:61:63:ff:04:81:7f:0a:69:f8:
72:5a:7d:a1:84:7d:6a:a4:df:12:11:ef:c4:c0:b5:e4:e3:68:
76:95:a8:e6:c4:3f:0f:00:e2:65:e4:2e:06:f1:70:07:6c:86:
c2:ea:e8:6c:24:f2:32:5d:25:5b:2a:f0:37:f3:87:c8:5d:e3:
79:64:66:c4:47:df:29:82:e3:be:71:f3:c4:ef:7d:54:fe:8e:
01:72:5e:e9:0b:aa:ae:6c:50:15:2c:5f:6b:c5:8f:4a:35:06:
9f:27:c1:6a:4f:9c:79:62:9a:88:78:61:a8:35:33:bf:78:5f:
a9:3c:7c:0e:c5:1b:d7:96:84:43:9e:0d:fb:cb:fb:87:24:31:
5c:9b:92:70:42:65:30:d6:c9:a5:57:b3:8c:32:7d:5b:75:19:
31:0a:00:19:4b:2b:05:70:22:a1:51:85:00:6d:b1:f1:67:61:
78:30:1e:a5:f2:aa:a5:98:9d:f5:e3:4f:7b:0b:32:ac:d1:40:
14:51:76:07
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAxNkUxMTAvBgNVBAUTKEE3M0E5Q0Y0OTk5NjBCQTBBNDZDRDE4RkJFNDE5RTk3
RDk4Q0Q2OTQwHhcNMjYwMTI1MDAzNjMxWhcNMjYwMjAxMDAzNjMxWjAYMRYwFAYD
VQQDDA02OTc1NjU4Zi1lY2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwGG6sV1L3PYU6cHmwvkcbfehVeF+luvW0WzmHT1gRAjloVVsuwsg49YqLIes
kU45QFt7U3EGVWp2K0BA/ufleVVRI21VKi6qt3A00Kja+69Bqo1zT/1hJWge9gJy
9FueRaWgJSxD+9xdb7BCv0P20RxI16CVcC+i5Dfd0qtUf3D/YLpgf/hFgJrjyX0U
x4xIbqft0DFOHChMx6JS3IKtYx7p2P0e2IEOSmZI/ws2lT21Qa2lahb1j32isMOB
6S33m1jiiP4z5Mtc2upJuQ3TzxKrJtUy2K2ZtT2JbMQkfIo07c0suvrMPhv9OTRb
XCRAQoriodJrNMoeJsPfVOZvBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDuqtBJ7
8kvmHQwH7Dj0J6ZqhX+OMB8GA1UdIwQYMBaAFKc6nPSZlgugpGzRj75BnpfZjNaU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE2RS83QjFCREMwQzI0
MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2Q2tiTkdQdmtHZWw5bU0x
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3B6cWM5Sm1XQzZDa2JOR1B2a0dlbDltTTFwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDE2RS83QjFCREMwQzI0MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2
Q2tiTkdQdmtHZWw5bU0xcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCdbMNLMd9ytja0kWEReNnr4P5V/egtof0NCH+S+SYxVr+zpI7kE+Al
pm6DzpHDGRSbhAbZVBgMIAbBRAjXIM5hY/8EgX8KafhyWn2hhH1qpN8SEe/EwLXk
42h2lajmxD8PAOJl5C4G8XAHbIbC6uhsJPIyXSVbKvA384fIXeN5ZGbER98pguO+
cfPE731U/o4Bcl7pC6qubFAVLF9rxY9KNQafJ8FqT5x5YpqIeGGoNTO/eF+pPHwO
xRvXloRDng37y/uHJDFcm5JwQmUw1smlV7OMMn1bdRkxCgAZSysFcCKhUYUAbbHx
Z2F4MB6l8qqlmJ314097CzKs0UAUUXYH
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:35:32 2026 by rpki-client