This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
File: zXuGlWvtndYhW-SF8McVuSDJp3A.mft (raw, json)
Hash identifier: wS+q60dGO2AXNeYFajzhtMqQR+0uBvuROMTJ2Haffwk=
Subject key identifier: 82:AA:F0:01:D4:C3:DF:8E:7F:E6:45:BC:B8:9A:A4:F4:2D:84:34:9A
Authority key identifier: CD:7B:86:95:6B:ED:9D:D6:21:5B:E4:85:F0:C7:15:B9:20:C9:A7:70
Certificate issuer: /CN=A918B61E/serialNumber=CD7B86956BED9DD6215BE485F0C715B920C9A770
Certificate serial: 016A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
Manifest number: 0164
Signing time: Fri 23 Jan 2026 03:12:31 +0000
Manifest this update: Fri 23 Jan 2026 03:12:30 +0000
Manifest next update: Fri 30 Jan 2026 03:12:30 +0000
Files and hashes: 1: zXuGlWvtndYhW-SF8McVuSDJp3A.crl (hash: 3hxpUq7mf47e9BXY7beiZftTES3pke9udYEgx9LNs10=)
2: 60DF983AD54F11EE93ED1E3BC4F9AE02.roa (hash: hY+WBxth/lAZALcZKOl0NdDTBPt+g1JRrMamT62Ug8Y=)
3: 601B8CF6D54F11EE93ED1E3BC4F9AE02.roa (hash: ZMzt6+sDURZRj9SORwz4xyVEywoycXbQFfz3gvK4NSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.crl
rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 03:12:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362 (0x16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B61E, serialNumber=CD7B86956BED9DD6215BE485F0C715B920C9A770
Validity
Not Before: Jan 23 03:12:30 2026 GMT
Not After : Jan 30 03:12:30 2026 GMT
Subject: CN=6972e71f-8d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:06:8c:90:b5:55:c0:a8:cd:9f:11:f5:b0:85:
39:13:ea:50:95:31:fc:f5:d2:d9:24:32:36:69:0c:
fa:ab:40:3d:6e:4b:95:6f:cc:94:76:7b:8e:89:a4:
7f:a8:75:bd:7a:7b:a1:37:95:17:9e:79:d0:f3:86:
4a:cb:49:20:d6:f2:11:6a:e7:7a:af:7d:a2:2e:5d:
d3:de:a6:d0:51:97:6e:f5:6e:c0:b8:b6:7a:a7:db:
c9:9c:61:5b:f7:01:b9:58:68:06:20:44:9a:bc:50:
f2:9c:fe:f5:58:36:1f:83:e4:c3:84:f2:ef:57:76:
c1:76:0b:70:8d:d8:a9:1a:ae:bf:c8:a1:1e:cc:f2:
52:4f:bb:af:ef:4a:c4:c8:fa:21:31:3c:be:7c:19:
53:1c:0e:4f:3b:ca:1c:cb:6e:f6:bc:a8:b5:01:38:
72:c3:23:2e:e5:10:dc:f9:6c:f7:cb:f1:22:d3:ee:
56:f0:8b:5f:8f:11:22:16:48:85:b4:cc:32:b5:8e:
15:ea:08:69:f9:17:fb:39:5f:9f:29:aa:d3:f2:71:
19:d4:f1:bb:51:ad:91:a7:ee:a7:c5:37:81:59:d4:
2d:d6:f8:47:e3:16:04:1f:ea:e5:52:f8:1c:92:be:
fe:8c:5a:df:ec:19:9e:a2:a6:26:8a:8d:ef:a4:19:
1a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AA:F0:01:D4:C3:DF:8E:7F:E6:45:BC:B8:9A:A4:F4:2D:84:34:9A
X509v3 Authority Key Identifier:
keyid:CD:7B:86:95:6B:ED:9D:D6:21:5B:E4:85:F0:C7:15:B9:20:C9:A7:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f5:60:a5:17:7d:ec:09:b7:68:32:96:de:17:ab:29:53:5a:
b4:0a:cd:f6:c6:f6:ed:ff:0b:b1:6a:2a:40:4c:72:fe:6b:18:
77:c2:8f:d3:88:d1:7c:e6:bf:0e:b7:a9:df:c0:fa:eb:47:cd:
66:ac:4b:95:6f:78:d5:9c:b6:be:5a:ac:fd:07:0e:2d:8c:2d:
a2:c5:22:7f:05:1c:36:b1:b8:a4:fe:f7:2e:c7:a7:a0:87:21:
f5:e5:65:07:67:83:df:cc:52:8e:bf:b5:21:4a:e9:5e:9c:c6:
5c:74:c3:7f:ef:c2:3f:5c:30:da:da:27:9f:06:4a:50:ca:29:
6a:91:8d:e2:59:b1:0b:68:51:ea:de:aa:77:60:34:08:c3:c4:
5d:15:eb:38:be:e3:35:95:97:a5:e4:ec:32:4a:ca:e2:c7:b0:
70:08:fd:1d:8b:8c:63:f7:72:a0:a9:e7:ac:51:ef:c3:a8:ae:
12:bb:d1:a1:b9:55:f2:c6:ed:57:fb:84:c4:b1:02:6c:45:f2:
b6:b1:1a:25:69:32:57:b1:48:c4:dc:b4:e6:07:8b:9e:6c:75:
a5:2e:f4:5d:f8:f9:35:d1:c5:4a:94:32:c0:3e:17:6d:b4:5a:
62:b8:dc:87:69:95:d2:3f:2e:b6:3a:ee:ac:75:40:e9:78:3f:
62:1e:41:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:31 2026 by rpki-client