This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
File: ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft (raw, json)
Hash identifier: NSZFQ6fGdrX9IeVZmuP1VHMuxvD9jPmG/aaASjUoFj8=
Subject key identifier: 5E:8F:66:64:EB:51:3A:17:37:04:6D:F7:6D:C8:63:19:B9:CA:9B:84
Authority key identifier: 66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8
Certificate issuer: /CN=A918969C/serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8
Certificate serial: 50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
Manifest number: 4E
Signing time: Fri 23 Jan 2026 06:18:03 +0000
Manifest this update: Fri 23 Jan 2026 06:18:03 +0000
Manifest next update: Fri 30 Jan 2026 06:18:03 +0000
Files and hashes: 1: ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl (hash: AJMcYltV25a+YKAN39AZu1qnOc5EO2jwO2F8HDRVz/0=)
2: 16732F92826D11F0B439C27BC4F9AE02.roa (hash: VeOkRBTtnPVxgdS7nS+oqKH6bah9raHqhmGVL/DThKE=)
3: 33B40FB8826D11F095A2E27BC4F9AE02.roa (hash: xv17VJj9Z62Ap1eQ6wyQIWX3LAvgQ0GTCnvzjSZOamo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl
rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918969C, serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8
Validity
Not Before: Jan 23 06:18:03 2026 GMT
Not After : Jan 30 06:18:03 2026 GMT
Subject: CN=6973129b-3d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:40:83:5b:96:5f:05:32:06:28:d1:73:e0:b1:
b2:99:32:b8:b6:59:c0:30:2c:ed:34:7e:09:ae:77:
63:bc:83:2a:04:d2:b2:54:30:b0:74:68:22:b9:c7:
c6:be:48:8b:77:96:ca:44:a4:52:49:67:1f:6d:b9:
a7:ff:2e:e5:f8:c2:05:34:cb:ef:fd:ac:6f:ce:ea:
8e:cd:b9:70:42:84:69:a7:07:9c:0d:12:63:12:a5:
e7:8c:71:ee:38:a0:ed:60:56:14:5a:b3:03:ae:da:
b4:a6:6e:9b:dc:58:3b:fc:9a:b5:9a:72:21:10:f4:
1d:04:1b:97:2c:5d:d9:53:88:ba:e7:a4:12:2f:43:
70:df:76:f3:2e:85:5a:7a:55:bd:d0:fd:57:0e:e7:
bd:0c:b3:32:87:f8:de:de:de:c5:81:21:28:c6:1e:
8c:8e:ad:3c:78:0b:fd:3c:b6:b2:0f:b7:bb:b5:ea:
78:20:2f:3d:30:bd:52:8f:b7:12:a2:c0:6d:25:d3:
94:ce:d4:32:0e:ac:a8:86:1f:e4:e1:4d:bd:0c:71:
44:13:70:96:ce:c6:9d:3d:65:e9:9f:51:f2:0e:8d:
7a:77:6b:36:dd:06:74:e1:a7:ea:a2:e4:bb:40:a7:
fc:b3:c3:66:56:f3:9c:67:bb:6b:f2:c9:f8:4f:25:
cf:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8F:66:64:EB:51:3A:17:37:04:6D:F7:6D:C8:63:19:B9:CA:9B:84
X509v3 Authority Key Identifier:
keyid:66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:04:ce:0c:0a:44:16:d1:7c:5c:99:01:a0:c6:0a:e6:30:2d:
c1:46:c5:cc:12:ee:ec:66:49:ec:d6:84:b2:b1:29:03:0e:98:
ea:18:9e:e5:23:90:1e:7c:56:8c:56:1b:ea:67:10:54:a4:1a:
3e:d7:92:6a:ca:e2:b2:c8:52:34:a8:ca:81:36:f5:c5:f8:49:
17:a0:2a:70:ca:c1:c2:21:64:10:a9:ff:9a:fc:a0:0a:97:20:
f3:18:a0:d6:1a:c7:68:4c:e3:56:b7:fc:9d:2c:15:61:b5:ae:
8a:42:92:0e:4b:90:40:d2:f2:57:3a:dd:78:93:c6:34:bb:fc:
07:d5:9d:f8:08:4c:db:85:ef:cd:ae:97:c9:f0:0d:53:c0:99:
bc:d9:09:98:9a:e2:df:0a:15:b7:c5:b7:33:08:89:52:6e:74:
c7:85:82:78:b9:8f:cb:0d:f7:ff:c1:19:36:88:82:cc:91:13:
c5:70:c1:65:7c:bf:da:00:dd:17:ef:9e:43:7e:75:08:7d:3f:
61:0e:bb:be:cc:59:d2:c0:5e:cd:e5:c9:32:79:42:07:e0:47:
b6:db:a5:6c:e1:e7:ca:30:81:e5:9c:4c:03:fe:aa:04:fa:81:
94:04:a6:90:36:f0:ac:14:1e:43:07:4b:43:b0:8e:98:96:64:
79:1c:8e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:24 2026 by rpki-client