This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
File: mZujdBECimL7UV3PAozaLcmrydE.mft (raw, json)
Hash identifier: yw1DbyyUtTm9H4STauZLujzKbZOD+gTjmf8tUcv7RDk=
Subject key identifier: 58:31:98:5A:9C:AC:8A:1A:1F:96:30:FC:4E:B5:84:71:13:F8:D1:AE
Authority key identifier: 99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1
Certificate issuer: /CN=A9184359/serialNumber=999BA37411028A62FB515DCF028CDA2DC9ABC9D1
Certificate serial: 0208
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
Manifest number: 0204
Signing time: Sun 25 Jan 2026 01:41:25 +0000
Manifest this update: Sun 25 Jan 2026 01:41:25 +0000
Manifest next update: Sun 01 Feb 2026 01:41:25 +0000
Files and hashes: 1: mZujdBECimL7UV3PAozaLcmrydE.crl (hash: KBpVqdm5y+LkFPy3fkeB4Pq6eQp2uF7ALyQJnGIpI60=)
2: F27BE0E2E4CC11EDBAFF045BC4F9AE02.roa (hash: 2aRPKdC2caR+1nzmwQGCZ8933jgrgaw6kF4+sg+Y8jg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.crl
rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:41:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184359, serialNumber=999BA37411028A62FB515DCF028CDA2DC9ABC9D1
Validity
Not Before: Jan 25 01:41:25 2026 GMT
Not After : Feb 1 01:41:25 2026 GMT
Subject: CN=697574c5-15b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:7c:b8:24:0c:80:90:39:f7:93:a5:c0:e0:
44:db:7c:22:17:61:86:77:75:55:af:97:9d:d1:6f:
c9:46:f1:38:59:95:19:e5:5d:fd:10:ee:3a:10:e6:
61:56:5a:96:b0:50:03:de:79:01:d3:ae:33:d2:b3:
26:d5:5f:8a:68:8e:d2:05:4a:81:43:7e:1b:7a:09:
b1:ec:05:46:8f:2e:4e:5e:f3:4d:f9:4b:68:9e:e5:
f1:4b:50:28:39:b6:b6:d9:8c:d9:11:70:27:a5:ee:
42:be:fd:3d:1e:d5:46:08:fd:0b:da:ec:a8:f2:f5:
51:78:e0:a6:2c:d8:3b:fa:fb:d4:3a:e7:cc:c5:fb:
d3:30:ca:a3:cd:79:ab:2c:ce:8b:18:f9:85:5d:28:
b8:a3:b1:b7:a7:3b:3b:4c:17:42:09:31:5c:42:58:
28:6e:dd:c5:67:39:2c:c5:03:fe:84:cf:2a:51:dd:
16:a9:52:70:5a:36:ac:5f:5c:57:4a:ad:40:68:57:
79:c0:1b:f4:6c:08:fe:dc:76:76:62:1d:8f:5c:d2:
64:33:a1:34:82:12:f5:ff:94:07:70:3b:bf:1c:a3:
5d:56:fc:26:b9:a8:55:e4:32:9f:59:69:0c:af:36:
3b:30:d0:82:b3:67:23:34:d2:80:44:8d:30:49:84:
39:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:31:98:5A:9C:AC:8A:1A:1F:96:30:FC:4E:B5:84:71:13:F8:D1:AE
X509v3 Authority Key Identifier:
keyid:99:9B:A3:74:11:02:8A:62:FB:51:5D:CF:02:8C:DA:2D:C9:AB:C9:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZujdBECimL7UV3PAozaLcmrydE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184359/335E6562E4C811EDBAABC55CC4F9AE02/mZujdBECimL7UV3PAozaLcmrydE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:53:58:f0:27:19:03:a1:d7:f2:37:02:83:8f:6b:7a:65:12:
be:a8:81:35:92:b1:11:bc:07:ed:8b:47:c3:3a:ec:2c:7e:42:
26:71:23:12:73:bf:e2:bc:18:06:ad:ba:96:0e:d5:e2:fa:3f:
95:0c:1b:3b:a5:fd:65:d4:32:9b:e4:f9:c0:18:8e:b7:c6:dd:
4b:b7:b2:95:38:31:8c:36:9e:aa:81:d3:77:f0:d1:99:40:05:
31:87:d7:d6:08:64:7e:15:79:f0:61:11:2c:34:65:15:a7:d7:
a8:20:8e:b8:dd:eb:7b:b9:15:e9:d4:db:c9:9a:bf:be:90:f7:
0a:db:01:0e:02:98:e8:ef:61:9c:38:e7:d8:a8:51:50:1e:1f:
a7:b5:e5:db:75:33:e5:c0:4b:24:43:a7:5b:70:78:03:29:52:
a7:96:df:ed:5e:09:74:8f:9b:ce:3d:45:75:ba:3d:af:08:52:
7f:89:e9:0f:f1:69:36:b5:df:b1:9e:c8:f5:83:66:31:37:9a:
13:a0:a9:45:fe:83:b8:70:e8:27:37:ca:07:56:54:d4:bb:2c:
1b:bb:a6:b2:93:85:a6:01:18:46:77:83:e2:46:84:53:fc:01:
fa:8a:2e:d4:28:3f:f9:62:62:40:ef:b9:3b:aa:25:b2:a4:77:
0a:bc:f2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:25:05 2026 by rpki-client