This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft
File: z6g6HLFaT2Y_z9bITI4K00wOBnM.mft (raw, json)
Hash identifier: +qkXMQYpvMfzG5UUZyQT3VeiaW1SUGEK1MJWPhDDr1Q=
Subject key identifier: 52:E1:0C:1F:B1:0C:13:09:0C:E4:4F:9A:40:D5:BE:82:4A:9B:3B:3F
Authority key identifier: CF:A8:3A:1C:B1:5A:4F:66:3F:CF:D6:C8:4C:8E:0A:D3:4C:0E:06:73
Certificate issuer: /CN=A91AA5F1/serialNumber=CFA83A1CB15A4F663FCFD6C84C8E0AD34C0E0673
Certificate serial: 36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z6g6HLFaT2Y_z9bITI4K00wOBnM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft
Manifest number: 35
Signing time: Fri 23 Jan 2026 06:32:27 +0000
Manifest this update: Fri 23 Jan 2026 06:32:27 +0000
Manifest next update: Fri 30 Jan 2026 06:32:27 +0000
Files and hashes: 1: z6g6HLFaT2Y_z9bITI4K00wOBnM.crl (hash: +Rz6FeB46+6TMBzEBoska3vo34dnmFINOsyjax9JvXE=)
2: C56E767CA89811F08959A364C4F9AE02.roa (hash: 3h7NekD5uJiBtHmPr+ql3V5I4Pzxe7a+UwFYXogXAM4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.crl
rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z6g6HLFaT2Y_z9bITI4K00wOBnM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA5F1, serialNumber=CFA83A1CB15A4F663FCFD6C84C8E0AD34C0E0673
Validity
Not Before: Jan 23 06:32:27 2026 GMT
Not After : Jan 30 06:32:27 2026 GMT
Subject: CN=697315fb-7213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:aa:08:8a:2f:4d:c6:cc:39:df:02:2e:98:12:
6f:78:e1:cd:ca:9c:13:fd:0f:e3:74:d4:e7:d9:91:
a4:96:01:c5:f0:46:9d:da:82:84:cd:9e:53:a4:84:
b7:9d:fa:88:aa:08:97:be:f4:ae:03:c9:ce:59:78:
e5:18:a0:81:59:19:d4:44:d1:1d:f8:8e:37:a4:4a:
51:b5:7d:a1:f9:d0:49:24:6a:a9:c9:dd:1d:ef:72:
f6:ba:3c:34:b1:02:63:b5:3f:63:d8:c8:a0:18:2b:
62:13:2a:c1:37:b7:a5:a2:11:93:db:be:f7:e0:17:
14:68:a0:3e:14:ac:5f:b6:cf:56:4d:e5:91:9b:80:
d3:a9:1c:54:a0:08:e0:8d:f1:53:c8:8f:63:93:3d:
85:c8:00:f9:5c:e8:09:df:72:2a:8a:76:ce:76:48:
c3:5e:25:5c:84:35:26:c4:14:b1:75:49:a7:5c:c1:
4f:5b:60:4d:ac:2b:1a:d6:59:3a:36:13:ed:23:c0:
b0:3a:97:af:90:24:51:a7:86:31:13:da:b8:d3:6b:
a6:6f:1e:fd:73:ad:44:08:c7:b5:f4:a8:61:30:e9:
40:53:37:9f:49:79:5a:4b:fd:a4:6b:49:a2:d9:3d:
e6:7e:c2:87:32:79:c8:ab:0d:8e:7f:55:6e:33:8d:
8e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E1:0C:1F:B1:0C:13:09:0C:E4:4F:9A:40:D5:BE:82:4A:9B:3B:3F
X509v3 Authority Key Identifier:
keyid:CF:A8:3A:1C:B1:5A:4F:66:3F:CF:D6:C8:4C:8E:0A:D3:4C:0E:06:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z6g6HLFaT2Y_z9bITI4K00wOBnM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:94:e3:db:52:47:02:4a:e3:2d:84:50:22:57:c3:69:95:54:
3a:e8:90:5f:ea:7d:06:d0:49:e3:de:b4:55:79:30:f8:b0:ee:
f2:b5:d9:26:3f:68:49:b5:de:f7:66:78:ee:86:27:b3:9e:18:
b8:82:c8:21:14:5d:68:91:27:f2:23:12:7d:fe:3a:eb:a4:a1:
9d:48:9b:7e:a1:d0:83:c7:30:7d:14:93:7c:4a:c1:d3:62:b4:
b5:8a:5a:6c:cf:55:9a:9d:26:ee:f5:51:0b:b6:d1:38:28:46:
0a:27:85:ce:41:75:d7:c4:22:ca:42:db:78:7f:05:ba:42:23:
a7:52:f1:c8:04:5b:1a:64:7c:9f:9a:8a:c0:3e:af:cb:8a:d1:
f1:c3:b5:59:06:d1:57:43:91:be:11:04:a6:59:6f:99:77:2c:
4d:6d:66:44:8e:8f:87:a0:53:c8:60:95:66:f0:26:f7:12:92:
a5:86:db:0e:a0:c8:79:3d:99:67:9a:11:eb:c8:c6:a7:8c:b1:
ba:e9:d9:d2:08:16:47:9e:a6:31:22:df:20:70:a7:b2:aa:e8:
39:b8:7c:98:78:cb:c5:ca:a6:b0:83:cc:8d:a4:2c:09:a1:bf:
4c:f8:4a:55:37:a1:ed:cb:d9:47:81:04:21:4a:45:98:28:5e:
83:88:26:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:24:50 2026 by rpki-client