This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
File: zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft (raw, json)
Hash identifier: vcYknBnVgm+A37xjKhCd/m3w5wjdOSI7qHrpyBBBJ0E=
Subject key identifier: 67:4B:83:00:29:01:92:EA:D9:78:31:00:F7:3A:95:E9:A8:DA:44:54
Authority key identifier: CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
Certificate issuer: /CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Certificate serial: 0801
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
Manifest number: 07EA
Signing time: Sat 24 Jan 2026 20:34:20 +0000
Manifest this update: Sat 24 Jan 2026 20:34:20 +0000
Manifest next update: Sat 31 Jan 2026 20:34:20 +0000
Files and hashes: 1: zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl (hash: qkRZNj9Qp9pkztET4zmVQqDXrs3mI6+Vwb1IBJ6gl1w=)
2: 0CACB5AC198E11EBBDF60275C4F9AE02.roa (hash: g57FwhkXQlNtbgCZ9eTxeYlEqsu00SG/NfOG9n/2VFM=)
3: 303C97563EB611EBA4FCB055C4F9AE02.roa (hash: 2hifAdeE8mQFU3ltmyQ47TeuxjT7Ow0BtDeX7YdYQwc=)
4: 78AFDDB84A8211EB8760D667C4F9AE02.roa (hash: l3tkrogo0VTxG1PVP/z14nG/NFFYWC8iV/QnSfCptRk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2049 (0x801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918054D, serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Validity
Not Before: Jan 24 20:34:20 2026 GMT
Not After : Jan 31 20:34:20 2026 GMT
Subject: CN=69752ccc-9d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e7:25:3c:00:42:60:91:e1:80:cf:93:5f:c4:
45:a7:e7:1a:d6:3f:f1:9d:9f:76:4e:ac:9a:e0:23:
84:09:10:f2:1e:7b:dd:99:1d:56:23:ee:f4:1c:2a:
61:3b:8b:40:dc:3f:ce:0a:80:e4:99:c6:27:ea:35:
93:0d:e3:8a:2e:76:38:e4:00:89:c4:63:ad:47:1c:
69:e6:bc:fb:87:c1:df:4b:ef:7b:3c:ed:46:1a:06:
6d:1d:45:f3:63:18:81:b5:51:a8:90:44:b2:59:24:
62:ec:7a:7e:d9:04:1d:52:fa:a1:07:7c:1e:42:10:
95:c5:f8:25:96:b2:84:e5:96:60:52:7b:4c:a3:37:
7f:03:ca:82:f9:27:e1:ac:61:1b:86:f1:e0:ae:43:
56:bd:90:c0:2d:84:f1:c5:3b:26:c3:8b:13:4d:dd:
10:e8:20:94:cb:1f:ed:af:20:e2:b2:1f:0e:1c:f3:
6a:98:69:bf:cb:02:83:49:8c:31:f0:27:e1:87:38:
1e:8f:d4:53:c6:59:e6:ba:1b:0b:ac:ec:86:dd:57:
8b:b1:fd:f2:23:f0:36:f3:49:bd:56:2d:dc:cc:df:
7b:33:1c:72:43:40:4c:d3:ca:22:f7:86:f7:75:e8:
3b:95:ce:f9:e4:f3:f4:d4:15:17:53:a2:bc:2b:e5:
dd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4B:83:00:29:01:92:EA:D9:78:31:00:F7:3A:95:E9:A8:DA:44:54
X509v3 Authority Key Identifier:
keyid:CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:f3:00:fe:92:81:38:44:35:6e:42:b8:0f:24:5f:1e:26:02:
46:cc:f2:d7:fe:e7:8b:e0:58:6d:c9:ce:36:14:16:14:f9:b3:
65:67:03:41:67:14:96:fa:ba:27:51:3a:1f:6c:89:ad:88:5f:
b8:ca:b5:db:72:7f:31:f5:08:3f:b7:41:d0:e6:91:75:6f:13:
03:eb:40:de:0d:6a:64:cd:e3:00:01:7a:d1:0e:72:e7:24:24:
ba:b3:15:56:1f:ca:8c:ca:1a:72:6f:9b:1c:9a:db:ad:62:18:
33:ca:74:7f:4d:03:05:c9:77:b4:7d:d3:d4:34:c2:87:9b:97:
28:9f:7c:1e:1e:24:99:36:74:87:14:34:66:54:00:a8:4f:34:
36:ce:4a:bb:a0:d8:fe:8a:69:db:06:30:a4:ce:7b:92:c0:ef:
7a:aa:e4:5c:82:5b:56:0c:f6:1a:68:91:a7:83:01:7e:f9:17:
84:fa:19:9f:b9:c7:b4:10:63:76:16:a6:e3:6d:33:0d:95:4f:
51:0c:d9:75:4c:d0:a7:1e:af:8f:a3:4f:1a:bc:8a:6c:6e:5a:
ea:06:2c:a1:16:57:58:13:33:67:1b:f1:9a:25:dd:90:00:93:
e1:7b:06:0a:47:ad:3b:be:b8:8d:fc:31:a7:9a:cf:17:79:39:
d9:f9:b8:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA1NEQxMTAvBgNVBAUTKENEODI3QkY5NjQ1ODM2MUY2MDk4QjIyRjc1ODU0OEQ3
RUFFRkExNjgwHhcNMjYwMTI0MjAzNDIwWhcNMjYwMTMxMjAzNDIwWjAYMRYwFAYD
VQQDDA02OTc1MmNjYy05ZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArOclPABCYJHhgM+TX8RFp+ca1j/xnZ92Tqya4COECRDyHnvdmR1WI+70HCph
O4tA3D/OCoDkmcYn6jWTDeOKLnY45ACJxGOtRxxp5rz7h8HfS+97PO1GGgZtHUXz
YxiBtVGokESyWSRi7Hp+2QQdUvqhB3weQhCVxfgllrKE5ZZgUntMozd/A8qC+Sfh
rGEbhvHgrkNWvZDALYTxxTsmw4sTTd0Q6CCUyx/tryDish8OHPNqmGm/ywKDSYwx
8Cfhhzgej9RTxlnmuhsLrOyG3VeLsf3yI/A280m9Vi3czN97MxxyQ0BM08oi94b3
deg7lc755PP01BUXU6K8K+XdGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdLgwAp
AZLq2XgxAPc6lemo2kRUMB8GA1UdIwQYMBaAFM2Ce/lkWDYfYJiyL3WFSNfq76Fo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU0RC82RTA4MjNCMDE5
OEMxMUVCQUZDQjk0NTlDNEY5QUUwMi96WUo3LVdSWU5oOWdtTEl2ZFlWSTEtcnZv
V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pZSjctV1JZTmg5Z21MSXZkWVZJMS1ydm9XZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDU0RC82RTA4MjNCMDE5OEMxMUVCQUZDQjk0NTlDNEY5QUUwMi96WUo3LVdSWU5o
OWdtTEl2ZFlWSTEtcnZvV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAZ8wD+koE4RDVuQrgPJF8eJgJGzPLX/ueL4Fhtyc42FBYU+bNlZwNB
ZxSW+ronUTofbImtiF+4yrXbcn8x9Qg/t0HQ5pF1bxMD60DeDWpkzeMAAXrRDnLn
JCS6sxVWH8qMyhpyb5scmtutYhgzynR/TQMFyXe0fdPUNMKHm5con3weHiSZNnSH
FDRmVACoTzQ2zkq7oNj+imnbBjCkznuSwO96quRcgltWDPYaaJGngwF++ReE+hmf
uce0EGN2FqbjbTMNlU9RDNl1TNCnHq+Po08avIpsblrqBiyhFldYEzNnG/GaJd2Q
AJPhewYKR607vriN/DGnms8XeTnZ+biL
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:27 2026 by rpki-client