This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
File: ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft (raw, json)
Hash identifier: Lf7yHxRW9tZl+4txOaRnI23WHaGPN1mIrV3pVREnmB8=
Subject key identifier: E5:6B:12:2D:F1:30:C0:FD:79:0E:E5:96:F9:CD:05:DA:D7:14:92:4C
Authority key identifier: 65:F6:16:1C:73:6D:1A:9C:41:91:FD:FC:C7:A4:F8:24:CE:11:23:2D
Certificate issuer: /CN=A91899BB/serialNumber=65F6161C736D1A9C4191FDFCC7A4F824CE11232D
Certificate serial: 06CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
Manifest number: 06C9
Signing time: Sat 24 Jan 2026 21:29:35 +0000
Manifest this update: Sat 24 Jan 2026 21:29:34 +0000
Manifest next update: Sat 31 Jan 2026 21:29:34 +0000
Files and hashes: 1: ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl (hash: U7XBclliwdwxDQ5mX8XLUhsg1ZK9k4jBwChmRaE8bg0=)
2: 54CB555C57A311F09664E82DC4F9AE02.roa (hash: +36ZiREOaXQ0L85WY9dsXKbxSFUahU97iWT+nNCGEQQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl
rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1740 (0x6cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91899BB, serialNumber=65F6161C736D1A9C4191FDFCC7A4F824CE11232D
Validity
Not Before: Jan 24 21:29:34 2026 GMT
Not After : Jan 31 21:29:34 2026 GMT
Subject: CN=697539bf-ea1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:28:7e:f8:b3:15:42:fa:07:3f:a6:26:4b:22:
65:76:38:a0:ab:40:6a:2d:22:16:12:a3:10:5d:74:
6a:25:03:b0:11:f3:2b:79:7a:33:be:0c:03:7d:e4:
5f:aa:3c:e6:e2:f0:7e:cd:fc:5f:75:ac:bc:ae:b7:
aa:e9:37:2d:75:42:1b:52:e9:39:57:35:34:17:ea:
40:98:e9:b2:89:a8:29:e7:33:d5:3c:6f:28:6c:37:
51:52:be:52:17:04:d6:63:b3:ed:9f:1f:89:6f:ad:
3a:0c:fc:a8:26:39:d2:75:eb:1d:e4:b6:9a:0c:b4:
ab:86:07:0f:28:f8:b2:39:b4:c5:7c:ba:71:52:00:
87:4a:36:69:de:d4:a2:4a:4f:c7:94:3c:a4:12:c8:
4c:eb:3a:77:7d:5c:4c:b9:db:f2:9c:3f:3f:99:76:
41:0c:51:bc:a0:7d:dc:1a:0c:3b:23:b0:82:93:b7:
b7:fa:91:9d:f1:15:5c:c6:6c:47:ae:26:c6:0d:f0:
00:79:51:f3:2e:65:33:3c:64:03:3a:75:a2:d3:85:
fc:4c:71:e4:3a:06:a6:97:10:7b:26:79:44:2f:1f:
25:73:31:78:2b:a9:d7:f4:6f:d1:e5:d0:5e:6f:a5:
9a:49:75:fc:cd:7f:46:0a:9a:1f:5b:81:3a:a5:1f:
b2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6B:12:2D:F1:30:C0:FD:79:0E:E5:96:F9:CD:05:DA:D7:14:92:4C
X509v3 Authority Key Identifier:
keyid:65:F6:16:1C:73:6D:1A:9C:41:91:FD:FC:C7:A4:F8:24:CE:11:23:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfYWHHNtGpxBkf38x6T4JM4RIy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91899BB/88C2F15E885811EB96CE6817C4F9AE02/ZfYWHHNtGpxBkf38x6T4JM4RIy0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:71:3a:a6:46:b6:e8:fa:7b:35:40:89:d1:a4:3c:19:02:0a:
7b:e5:93:ff:b8:66:6e:7f:e3:d5:8a:fd:a8:a1:61:c0:a8:16:
73:e0:91:b4:46:15:96:de:0b:71:ba:85:19:3d:f6:b8:5f:0b:
57:6c:44:ec:7e:98:9f:ee:e1:aa:58:db:ce:32:f7:ec:c7:69:
c5:3b:45:56:cd:2b:48:16:6e:be:4a:59:1f:3b:7b:73:01:a7:
79:75:87:67:ab:76:4b:d4:31:68:1e:ff:04:64:ff:ec:01:9d:
dc:55:50:44:61:79:fc:e8:1f:c3:86:6e:cf:ab:dc:a7:c6:a1:
30:03:2b:25:b7:ef:b4:78:d7:07:36:1a:3e:47:f2:fb:af:6c:
0c:36:bf:e2:57:d4:1e:b9:d4:4e:b0:3d:14:0b:bb:0a:85:2b:
f9:c6:58:c9:dc:04:35:c0:32:cd:b3:97:0d:50:e3:03:1d:b1:
07:e4:94:dd:a4:f5:7a:17:df:78:da:69:3e:9e:0a:33:1f:9e:
93:a8:68:88:20:93:78:03:57:6a:1f:46:c5:51:1d:34:57:47:
85:6c:3b:7c:6e:c9:0a:79:be:13:99:22:ec:91:8c:4f:f0:36:
e7:98:ec:49:1f:af:ea:36:ae:2c:ff:9a:15:08:30:84:7b:4a:
20:d9:85:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:03:19 2026 by rpki-client