This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
File: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft (raw, json)
Hash identifier: k7JEgxKQtlQqXyh8br2G8V6rjjUPlGSUoSJPw4c7P9E=
Subject key identifier: 00:D5:23:44:C2:FE:AC:53:BC:8B:5D:07:B0:13:F3:E3:FF:E4:98:FA
Authority key identifier: E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04
Certificate issuer: /CN=A919F207/serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04
Certificate serial: 0914
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
Manifest number: 08F3
Signing time: Sat 24 Jan 2026 19:46:29 +0000
Manifest this update: Sat 24 Jan 2026 19:46:29 +0000
Manifest next update: Sat 31 Jan 2026 19:46:29 +0000
Files and hashes: 1: 5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl (hash: Yn7gdEtTD5TPUni9uUJ0UstU8+cMUV5LDQZ1toO9wF8=)
2: FE5523767A4111EB9E76B867C4F9AE02.roa (hash: CVJgpgajxXp0nfuwvvTtpQWL1YkwrnLOPz0dX0Da2i8=)
3: 9F95B0B4232811EBB98A6C1AC4F9AE02.roa (hash: GSjiN54ewIGr1b61gD43aUHOWLJAe+Bq3TA3yh28IwU=)
4: D661BF1821E111EB85E9C824C4F9AE02.roa (hash: XkWTXb6PHytvZUY7EAUhHe4Q0yrK6oVBVW0wC1ENUcY=)
5: 0A00EE7EC2A711EAB8D9B426C4F9AE02.roa (hash: GmMG2dURnElUOnQiq0F5h7Z6METNWOktXhEJ+2ZzA/g=)
6: 0A88715AC2A711EAB8D9B426C4F9AE02.roa (hash: 0NHrksBzZ1sw6KKMUlk4z1DIMariid2PsdJfHN0oQM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl
rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2324 (0x914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F207, serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04
Validity
Not Before: Jan 24 19:46:29 2026 GMT
Not After : Jan 31 19:46:29 2026 GMT
Subject: CN=69752195-bd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:1d:59:80:37:91:3a:97:cd:44:5e:d7:ca:
06:1f:7b:5a:3c:a0:fe:28:51:56:ba:f5:11:cd:23:
2c:62:41:bf:b6:74:5b:38:0c:7b:35:19:0c:9c:b0:
1b:a6:e4:ad:f7:a3:a5:d8:ba:4a:09:a9:04:a5:16:
08:e6:91:d8:b0:60:d1:8e:ed:88:ff:d6:53:29:96:
98:e0:48:07:5a:05:db:f5:b6:b6:78:8b:48:a8:71:
9b:64:56:91:f0:60:2a:91:1f:29:35:7c:c5:94:32:
b0:08:8c:72:f3:77:f8:32:6b:4d:30:d4:50:e9:70:
f4:69:df:04:87:6b:7b:db:be:13:5b:95:79:9b:34:
d2:3a:19:60:94:04:ce:c7:3b:a6:81:15:87:3f:77:
f4:55:bc:a6:b6:36:8a:11:0e:2a:45:a5:e6:68:66:
58:1a:12:46:b2:47:3d:e6:50:c3:0c:b6:ce:ba:37:
7e:60:2c:0c:4c:49:60:24:6f:56:88:6b:7e:00:ca:
98:c5:17:90:80:23:4a:89:a6:c2:44:f4:54:6d:46:
2a:09:12:98:2f:27:1a:e1:42:6c:f5:54:b0:14:eb:
a6:da:9b:22:38:8a:e0:f2:4c:70:57:d3:23:e2:36:
4c:33:22:31:45:f4:30:11:2d:13:96:0b:6b:14:96:
3b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D5:23:44:C2:FE:AC:53:BC:8B:5D:07:B0:13:F3:E3:FF:E4:98:FA
X509v3 Authority Key Identifier:
keyid:E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:5a:df:2c:d4:98:72:c8:72:80:22:6b:cf:0d:04:25:56:0a:
d8:76:73:a5:c9:ac:ec:29:0d:46:91:e3:f9:65:0a:26:a0:ed:
4b:24:f2:34:70:2e:85:96:16:15:d1:d7:90:12:9d:5f:3c:f8:
fb:59:d6:5e:72:90:7d:70:89:09:6b:4c:28:14:3c:69:76:dd:
88:0c:1b:70:03:f5:b5:53:a3:4a:c6:df:14:7a:a6:cf:63:6c:
04:e3:fd:1c:85:27:9d:35:d6:e4:8c:ac:8c:10:95:c6:d9:66:
e9:12:8d:77:c1:c5:fe:f9:18:b4:67:a9:ad:82:73:6f:2c:e6:
b6:6e:a6:82:5e:8c:fe:47:5f:56:dd:01:2c:93:b4:a6:58:e2:
2c:a4:1b:16:73:4c:bf:8b:64:2d:75:fa:ce:06:34:00:b7:d7:
38:f9:8e:ee:95:38:07:be:d5:f8:3e:ae:22:c3:c9:02:32:cc:
6a:5c:dd:4f:de:3a:ef:cf:b9:7f:02:bf:fa:65:4d:97:11:60:
25:dd:bf:6a:6c:e2:f1:1a:f3:1e:74:93:c6:36:92:fe:f4:89:
6f:77:da:9a:ee:05:28:b5:43:57:5d:94:f4:8f:ed:d4:59:a4:
20:61:3e:69:35:2c:61:3d:6d:ac:90:ac:d5:45:bd:e6:41:06:
41:ef:ad:a2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUYyMDcxMTAvBgNVBAUTKEU3M0E3OTQ0MDQ0NEZFMzRDMzEwRjc4NDg5NEM0QUIy
MUVBQ0FBMDQwHhcNMjYwMTI0MTk0NjI5WhcNMjYwMTMxMTk0NjI5WjAYMRYwFAYD
VQQDDA02OTc1MjE5NS1iZDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtAgdWYA3kTqXzURe18oGH3taPKD+KFFWuvURzSMsYkG/tnRbOAx7NRkMnLAb
puSt96Ol2LpKCakEpRYI5pHYsGDRju2I/9ZTKZaY4EgHWgXb9ba2eItIqHGbZFaR
8GAqkR8pNXzFlDKwCIxy83f4MmtNMNRQ6XD0ad8Eh2t7274TW5V5mzTSOhlglATO
xzumgRWHP3f0VbymtjaKEQ4qRaXmaGZYGhJGskc95lDDDLbOujd+YCwMTElgJG9W
iGt+AMqYxReQgCNKiabCRPRUbUYqCRKYLyca4UJs9VSwFOum2psiOIrg8kxwV9Mj
4jZMMyIxRfQwES0TlgtrFJY7BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADVI0TC
/qxTvItdB7AT8+P/5Jj6MB8GA1UdIwQYMBaAFOc6eUQERP40wxD3hIlMSrIerKoE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjIwNy8xMkYyQ0MwQUMy
NjExMUVBOTg2RUVGNDFDNEY5QUUwMi81enA1UkFSRV9qVERFUGVFaVV4S3NoNnNx
Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzV6cDVSQVJFX2pUREVQZUVpVXhLc2g2c3FnUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjIwNy8xMkYyQ0MwQUMyNjExMUVBOTg2RUVGNDFDNEY5QUUwMi81enA1UkFSRV9q
VERFUGVFaVV4S3NoNnNxZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC7Wt8s1JhyyHKAImvPDQQlVgrYdnOlyazsKQ1GkeP5ZQomoO1LJPI0
cC6FlhYV0deQEp1fPPj7WdZecpB9cIkJa0woFDxpdt2IDBtwA/W1U6NKxt8UeqbP
Y2wE4/0chSedNdbkjKyMEJXG2WbpEo13wcX++Ri0Z6mtgnNvLOa2bqaCXoz+R19W
3QEsk7SmWOIspBsWc0y/i2QtdfrOBjQAt9c4+Y7ulTgHvtX4Pq4iw8kCMsxqXN1P
3jrvz7l/Ar/6ZU2XEWAl3b9qbOLxGvMedJPGNpL+9Ilvd9qa7gUotUNXXZT0j+3U
WaQgYT5pNSxhPW2skKzVRb3mQQZB762i
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:13:22 2026 by rpki-client