This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft
File: z7B65d0AqScU2zWnIQRdnS644xc.mft (raw, json)
Hash identifier: EXXmkxnyMivXLLiH6AvbcyXnjZv8ukBVdHOoC0nDF2c=
Subject key identifier: 6F:D3:53:82:DD:FB:59:66:CB:F6:00:7B:5D:DC:A6:1F:71:3C:C4:73
Authority key identifier: CF:B0:7A:E5:DD:00:A9:27:14:DB:35:A7:21:04:5D:9D:2E:B8:E3:17
Certificate issuer: /CN=A9189A9F/serialNumber=CFB07AE5DD00A92714DB35A721045D9D2EB8E317
Certificate serial: 7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft
Manifest number: 04BD
Signing time: Sat 24 Jan 2026 23:28:18 +0000
Manifest this update: Sat 24 Jan 2026 23:28:17 +0000
Manifest next update: Sat 31 Jan 2026 23:28:17 +0000
Files and hashes: 1: z7B65d0AqScU2zWnIQRdnS644xc.crl (hash: bcmULBdbDRhSXO0aJ2Z5qR4R+BF5FucPSrujcpdjG5o=)
2: 42A92B3C3BAC11F0882B5B62C4F9AE02.roa (hash: 3kUfpfWFsRQio/I2rlN7rqdOffzKtu9waWZ7PwEcB0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.crl
rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189A9F, serialNumber=CFB07AE5DD00A92714DB35A721045D9D2EB8E317
Validity
Not Before: Jan 24 23:28:17 2026 GMT
Not After : Jan 31 23:28:17 2026 GMT
Subject: CN=69755592-337b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d7:b7:3b:19:2b:38:0a:24:a8:82:a3:f3:bd:
71:ee:07:9f:fb:58:48:c9:3a:c7:d0:93:52:bc:97:
ba:08:73:f0:2a:68:ff:ea:74:77:d2:e1:19:0d:cb:
e0:89:4c:94:23:39:4b:2d:f4:96:5f:51:7e:76:3b:
86:a3:63:e2:3b:4e:b6:00:df:1a:2a:7e:02:92:ce:
a9:95:63:47:08:f9:7a:27:c3:72:00:92:1c:03:fc:
01:59:64:d9:73:77:ed:09:93:92:ee:86:b9:37:68:
a4:33:e2:87:e2:89:3a:69:7d:51:a1:1e:62:3d:d4:
f9:03:48:96:87:68:bc:5a:2a:08:c0:a5:ad:70:9c:
77:0d:bd:30:37:e0:31:eb:7a:1a:57:c9:93:40:40:
a6:60:5d:14:65:cb:3f:f2:bd:0f:0c:fd:e6:4b:dd:
a8:8d:de:ae:59:66:c6:46:7b:26:86:a1:37:ea:fc:
c4:b5:72:93:0b:aa:7b:87:99:cb:55:33:87:f4:61:
08:49:1a:76:db:2a:ae:9f:df:f3:e8:c2:fd:d5:a5:
1c:5a:17:40:92:d3:7f:fd:57:9c:7b:2a:ad:a0:1a:
00:e2:1d:bd:6a:e6:01:a3:0c:8f:39:4b:6f:2b:11:
bd:85:01:81:a0:06:0b:ba:60:5f:86:a1:52:88:08:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D3:53:82:DD:FB:59:66:CB:F6:00:7B:5D:DC:A6:1F:71:3C:C4:73
X509v3 Authority Key Identifier:
keyid:CF:B0:7A:E5:DD:00:A9:27:14:DB:35:A7:21:04:5D:9D:2E:B8:E3:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:88:19:7d:88:4a:9f:37:1a:78:3a:2f:7b:17:0e:52:bf:51:
03:c5:ae:1f:af:9f:56:59:7f:b4:21:74:1b:92:b1:18:2a:92:
49:f3:23:8c:0b:d0:f1:e2:d0:fc:b4:49:19:de:cb:77:ee:0f:
72:8e:07:97:d5:7c:73:72:e6:c4:41:7f:d8:3a:02:ed:46:ee:
d2:47:b5:eb:95:c5:e1:95:14:ca:fb:50:55:e0:e1:f9:d5:8b:
f9:4e:c0:d2:d6:7d:bd:ad:95:67:dd:da:66:a2:ae:7f:46:60:
81:39:a6:b4:0d:6d:9e:c8:d1:df:88:cd:1b:3e:94:ea:15:1b:
74:62:7a:9d:b7:e8:11:12:69:70:45:a9:25:e7:7c:a6:09:68:
28:43:e8:a2:d0:51:28:c3:52:4f:ee:b4:0c:1f:41:0a:f9:bb:
96:d5:7c:b1:a2:5d:50:ed:eb:f1:49:b9:cb:04:10:e2:37:df:
58:3d:1a:0b:a8:5c:d7:5b:84:99:ea:90:59:70:62:51:0e:1e:
65:e4:5b:d0:10:41:e8:f4:f8:d7:32:08:2f:b0:70:97:f6:7c:
b1:77:db:45:7d:cd:a8:18:cb:bc:7a:07:f4:b6:5c:1e:ad:85:
84:b5:84:80:3c:bf:23:c8:3d:3d:93:e8:36:fb:82:96:57:a9:
79:b4:f0:4a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
OUE5RjExMC8GA1UEBRMoQ0ZCMDdBRTVERDAwQTkyNzE0REIzNUE3MjEwNDVEOUQy
RUI4RTMxNzAeFw0yNjAxMjQyMzI4MTdaFw0yNjAxMzEyMzI4MTdaMBgxFjAUBgNV
BAMMDTY5NzU1NTkyLTMzN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDF17c7GSs4CiSogqPzvXHuB5/7WEjJOsfQk1K8l7oIc/AqaP/qdHfS4RkNy+CJ
TJQjOUst9JZfUX52O4ajY+I7TrYA3xoqfgKSzqmVY0cI+Xonw3IAkhwD/AFZZNlz
d+0Jk5Luhrk3aKQz4ofiiTppfVGhHmI91PkDSJaHaLxaKgjApa1wnHcNvTA34DHr
ehpXyZNAQKZgXRRlyz/yvQ8M/eZL3aiN3q5ZZsZGeyaGoTfq/MS1cpMLqnuHmctV
M4f0YQhJGnbbKq6f3/Powv3VpRxaF0CS03/9V5x7Kq2gGgDiHb1q5gGjDI85S28r
Eb2FAYGgBgu6YF+GoVKICC8bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUb9NTgt37
WWbL9gB7XdymH3E8xHMwHwYDVR0jBBgwFoAUz7B65d0AqScU2zWnIQRdnS644xcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5QTlGLzgwNTZCQTU2OEE5
MDExRUM4QzFCMEQyMkM0RjlBRTAyL3o3QjY1ZDBBcVNjVTJ6V25JUVJkblM2NDR4
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvejdCNjVkMEFxU2NVMnpXbklRUmRuUzY0NHhjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5
QTlGLzgwNTZCQTU2OEE5MDExRUM4QzFCMEQyMkM0RjlBRTAyL3o3QjY1ZDBBcVNj
VTJ6V25JUVJkblM2NDR4Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAH2IGX2ISp83Gng6L3sXDlK/UQPFrh+vn1ZZf7QhdBuSsRgqkknzI4wL
0PHi0Py0SRney3fuD3KOB5fVfHNy5sRBf9g6Au1G7tJHteuVxeGVFMr7UFXg4fnV
i/lOwNLWfb2tlWfd2mairn9GYIE5prQNbZ7I0d+IzRs+lOoVG3Riep236BESaXBF
qSXnfKYJaChD6KLQUSjDUk/utAwfQQr5u5bVfLGiXVDt6/FJucsEEOI331g9Gguo
XNdbhJnqkFlwYlEOHmXkW9AQQej0+NcyCC+wcJf2fLF320V9zagYy7x6B/S2XB6t
hYS1hIA8vyPIPT2T6Db7gpZXqXm08Eo=
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:15:01 2026 by rpki-client