This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft
File: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft (raw, json)
Hash identifier: 5166JxLykUXdi/x9fD2QvUCH/3phUp4AaLn7Ix7FdOU=
Subject key identifier: 5F:8E:2C:44:FD:1F:B7:C6:C9:6B:38:A2:90:42:84:44:0A:F0:0B:03
Authority key identifier: 13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38
Certificate issuer: /CN=A91A8CB9/serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638
Certificate serial: 05E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft
Manifest number: 05DD
Signing time: Sat 24 Jan 2026 22:16:03 +0000
Manifest this update: Sat 24 Jan 2026 22:16:02 +0000
Manifest next update: Sat 31 Jan 2026 22:16:02 +0000
Files and hashes: 1: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl (hash: nRrP28v/dU4ZDJq3z0c9R5/EsibUcUfobE42M/CxV6w=)
2: BC009860E65811EBA233DC2DC4F9AE02.roa (hash: 28cqYpDkS7ffjOaohNb4/yfGYsfPYWi8FW01e9pRbCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl
rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:16:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1507 (0x5e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8CB9, serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638
Validity
Not Before: Jan 24 22:16:02 2026 GMT
Not After : Jan 31 22:16:02 2026 GMT
Subject: CN=697544a3-0e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9f:da:0d:a7:c6:ba:5b:b1:a1:5f:65:f1:55:
c4:96:ce:5c:bf:2a:1c:6f:27:40:48:3d:b1:69:62:
08:74:bb:33:70:b9:ff:23:17:5d:d0:bb:4e:c0:b0:
e4:d3:44:bf:9f:58:86:3b:1a:b8:dc:12:7a:b3:fc:
72:a8:3e:3a:68:5c:89:29:cd:69:72:ef:96:33:ee:
02:99:b3:aa:f4:87:d4:c3:11:c4:94:ce:d8:ed:0c:
4a:a4:f2:61:41:90:3a:5e:69:0b:4b:18:67:d2:ed:
b9:26:b1:a5:87:82:a0:ce:b2:93:30:81:b7:06:19:
85:f5:74:c5:04:9f:8a:5d:1b:df:af:42:17:65:51:
8c:48:e8:3e:bc:39:84:b9:c8:12:c2:d8:8a:e6:45:
a4:e9:08:6e:9d:3f:c1:0e:36:d3:c0:65:8f:d5:0c:
2d:7d:55:b0:36:04:fc:02:a4:b5:fc:3a:c0:ac:8d:
39:1c:d9:23:e8:cd:a9:e5:75:fd:33:28:ff:ee:2e:
29:d1:75:5f:6a:74:9c:e1:7d:b3:69:2a:e6:9b:83:
04:11:95:0a:d0:8c:15:a1:17:5b:dd:18:4a:73:0d:
45:4f:be:1a:30:62:6e:43:28:b4:72:6e:f3:d1:a6:
e1:66:88:dd:f5:b2:19:9f:18:31:90:6c:02:eb:53:
7b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8E:2C:44:FD:1F:B7:C6:C9:6B:38:A2:90:42:84:44:0A:F0:0B:03
X509v3 Authority Key Identifier:
keyid:13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f6:36:42:aa:bd:dc:82:63:62:ee:a9:0b:a2:71:19:a0:11:
37:2d:97:07:39:01:89:72:b3:fd:e0:bf:48:15:d5:4c:47:ff:
21:92:07:30:f1:52:04:4f:11:d2:5d:da:fb:cc:40:24:91:54:
bf:00:e5:37:4e:da:67:ee:9c:e3:41:bd:b1:9e:bb:9e:c6:b3:
0e:02:4a:71:00:b8:37:bc:31:36:dd:d7:86:11:a3:de:77:85:
2d:c2:97:e8:3f:24:25:ac:d5:b3:d2:d8:8e:fd:f0:4f:ee:30:
db:e8:bc:91:3a:7a:85:ce:a3:4b:52:a1:14:d7:e6:87:b2:4d:
7f:fb:e0:47:3a:9b:d3:2f:c1:9c:75:89:ee:b4:42:f3:9c:85:
ea:41:24:c5:89:52:10:3f:55:88:5d:61:59:46:41:5b:64:ef:
b5:f5:e9:61:b3:cf:80:bb:ec:32:18:58:8a:fa:ef:12:2d:30:
9c:93:93:24:6b:0c:8a:8e:0b:71:42:70:42:4f:e5:a7:68:64:
8f:8e:5e:23:d0:1d:8b:2b:0a:72:90:a0:71:69:44:da:67:42:
71:52:81:22:45:62:74:83:44:8e:48:90:9d:ac:fb:63:3c:32:
68:ca:1f:d9:c5:80:c3:67:93:f6:33:a9:dc:5e:78:57:ec:ea:
2c:70:7b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:54:55 2026 by rpki-client