This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
File: zl8rQ5utW-vicqch6qzDj6rdSbQ.mft (raw, json)
Hash identifier: 1w3AJSG6JgQY4y4HRrApZp6xlYavZtg7782v/XWcLnY=
Subject key identifier: 44:83:3C:2D:CE:4E:4D:D2:13:82:02:57:40:15:25:F2:3E:0C:25:52
Authority key identifier: CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4
Certificate issuer: /CN=A91AB9A1/serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4
Certificate serial: 06C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
Manifest number: 06C8
Signing time: Sat 24 Jan 2026 14:37:29 +0000
Manifest this update: Sat 24 Jan 2026 14:37:28 +0000
Manifest next update: Sat 31 Jan 2026 14:37:28 +0000
Files and hashes: 1: zl8rQ5utW-vicqch6qzDj6rdSbQ.crl (hash: FJ3rkouinziwwwj92c0NgMUEqNZaoNRWqFxEXJnd2Ak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl
rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:37:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1736 (0x6c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB9A1, serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4
Validity
Not Before: Jan 24 14:37:28 2026 GMT
Not After : Jan 31 14:37:28 2026 GMT
Subject: CN=6974d929-8a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:14:5d:13:12:25:5a:c7:ba:5d:b0:fa:bb:53:
6d:82:81:b9:41:ba:bd:19:32:8d:8d:18:00:c8:7e:
88:2e:42:70:6c:5b:0c:92:52:38:1a:43:b9:51:0e:
cc:06:d1:b0:d8:95:fe:86:db:66:3c:c4:e1:f0:fc:
9c:eb:26:be:54:38:47:23:b8:2e:98:39:48:5b:48:
ac:93:4d:a3:cd:c1:fa:91:47:f3:99:a7:1c:a1:af:
4a:81:65:f1:0f:fc:48:03:d2:cd:62:0d:bd:df:ff:
d1:60:3e:e4:87:f3:42:e3:9d:66:dd:f7:6a:f6:12:
b3:73:58:9d:08:ff:46:2b:b7:f9:5a:ac:74:a9:24:
61:76:d4:a4:29:e5:82:5b:20:d3:94:4b:15:6f:23:
00:3a:df:ba:e5:7a:b1:e2:77:bf:21:11:0c:4b:81:
a1:f3:1f:21:3d:de:1d:50:0e:43:b3:51:d6:03:d7:
db:0c:5c:bc:fe:bd:4d:31:62:8d:b0:3a:94:44:6f:
e3:10:a9:c6:71:53:f2:98:d5:7b:5d:78:6d:67:51:
4c:e7:62:5a:47:f3:17:1c:4e:cd:93:97:2b:de:f1:
84:cd:ec:31:1d:92:3d:c6:51:76:07:0c:8c:21:2a:
52:f7:2c:b7:d2:00:f6:91:c8:b4:39:14:0e:1b:39:
44:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:83:3C:2D:CE:4E:4D:D2:13:82:02:57:40:15:25:F2:3E:0C:25:52
X509v3 Authority Key Identifier:
keyid:CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:65:5a:c5:40:8f:81:14:72:98:74:e3:f5:dd:b3:b9:0e:36:
74:63:1f:07:70:84:49:ea:f0:64:fb:bc:65:b5:cf:eb:c5:32:
19:e8:a2:4e:e6:67:d9:ee:7e:c6:95:1f:29:4e:46:e4:95:9a:
24:e4:36:c0:af:c3:dd:36:7b:c3:9d:c9:ac:02:db:e2:7a:f7:
03:44:18:75:b0:41:1b:c8:1a:01:04:3a:a2:b1:15:e1:ea:21:
98:32:19:bd:d4:a8:06:a8:80:f7:5c:34:00:95:1b:7d:99:7d:
f8:16:df:1f:16:e6:d9:75:d8:68:78:88:20:81:fc:4c:27:32:
24:38:82:7d:eb:92:29:f1:f1:df:a5:cb:a1:ff:f4:6e:3b:be:
1d:5d:39:aa:99:20:a6:b3:ac:fc:12:87:f8:73:f8:55:1d:a1:
42:f1:b7:23:8b:be:4a:5a:1c:ed:4f:7a:c8:25:2e:65:dd:14:
fb:42:2d:d0:bb:b7:2f:28:7d:a7:95:d7:97:fc:31:95:06:fa:
19:8d:ff:53:fb:95:91:6d:50:69:2f:ba:d4:15:83:a9:c0:f0:
d1:e1:bc:5f:0c:f0:7c:1a:3c:3c:8d:af:15:5f:66:90:0e:c7:
52:63:07:ed:6a:96:33:7d:0e:02:27:04:02:4b:b7:1c:a2:0d:
b8:df:0d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:59 2026 by rpki-client