This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
File: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft (raw, json)
Hash identifier: zGJOHllr+yJEylQtu4YDgPXO6/XIIMM+aozkJlZD+q0=
Subject key identifier: 62:15:F1:5D:27:C0:07:7B:8F:BE:C6:47:10:04:4A:1A:47:AE:53:82
Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
Certificate issuer: /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
Certificate serial: D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
Manifest number: C7
Signing time: Fri 23 Jan 2026 05:09:09 +0000
Manifest this update: Fri 23 Jan 2026 05:09:08 +0000
Manifest next update: Fri 30 Jan 2026 05:09:08 +0000
Files and hashes: 1: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl (hash: C1KIfzEPNZqBGTX18j+Eoody6eLh6kx+RKQwNf0Mehw=)
2: 1FCC4B16E78911EF99A1A729C4F9AE02.roa (hash: ur0Y19RBZlSTMz351Bt1h0UOu7/4H8KcC7lP/9sLDBM=)
3: 48243250E78D11EF98760355C4F9AE02.roa (hash: H/VqLJG3It+odLKG96H1sbVkDmzdKmTeoPCyOU9UZ8o=)
4: A1F7F22ECEF211F09F0B2645C4F9AE02.roa (hash: qELOCsisC5h80weRL5N25yw+GcjDtQKTB0QyBuh6P1o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl
rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 05:09:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208 (0xd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
Validity
Not Before: Jan 23 05:09:08 2026 GMT
Not After : Jan 30 05:09:08 2026 GMT
Subject: CN=69730275-5743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:80:6b:a6:91:8d:a7:9e:4c:96:2f:9f:37:73:
19:47:7d:b1:4b:2a:bf:52:27:b0:25:38:82:51:27:
49:b5:ab:a7:9c:33:f4:bf:0f:6e:84:e9:57:88:95:
ef:e0:e5:22:f7:9a:49:e0:70:b9:0d:3a:2e:df:13:
93:45:d1:1b:3a:e9:67:27:2f:d6:6c:3f:6e:4f:f1:
35:25:e3:07:b8:96:5a:73:51:19:02:1e:22:2d:5b:
9d:e9:a5:ea:7f:6f:1a:1d:71:64:ee:f4:94:14:93:
ff:a9:a9:5d:1a:53:2b:5a:af:ee:6d:da:4f:56:79:
8c:bb:1f:2e:7a:95:d9:fe:af:bc:a8:87:41:94:83:
80:d6:59:f5:6c:77:cc:8a:67:95:88:c8:97:eb:1d:
d8:86:f5:25:7c:60:9c:f7:47:03:ce:f2:57:dd:f3:
bd:f4:70:71:54:1f:0b:44:48:f7:13:a8:f6:02:01:
31:da:b5:44:01:35:ff:6b:cd:4d:b5:d6:db:53:a4:
8c:6e:e5:06:3c:19:79:b0:a8:a3:a1:4e:7b:ec:b5:
d9:9f:0a:16:0e:b1:1e:5f:9d:84:85:ef:28:13:db:
07:a1:64:c0:94:e0:9c:e8:24:c7:51:93:87:69:32:
ff:ca:07:c3:b7:3e:3c:17:e3:64:de:f9:d1:3f:97:
61:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:15:F1:5D:27:C0:07:7B:8F:BE:C6:47:10:04:4A:1A:47:AE:53:82
X509v3 Authority Key Identifier:
keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:dc:9b:56:8a:ee:1e:9c:8b:14:4e:37:32:6d:db:8e:8e:76:
b9:c0:f9:77:e9:e5:2b:99:13:31:3a:1f:75:46:ea:fb:a5:91:
6c:78:9c:71:8c:0e:29:61:d0:8b:20:6b:e4:6b:09:7c:ed:35:
5b:16:65:3c:c9:83:f7:f4:94:11:5e:bb:b5:fc:c9:c7:b6:fd:
29:b5:0f:c8:38:63:77:e1:26:21:1e:39:0d:41:08:c6:25:46:
14:c0:00:61:bb:c2:22:b8:8f:b6:03:f0:31:5b:7d:2c:31:05:
c9:da:8d:65:5a:47:a6:df:0e:40:29:3b:e9:60:50:69:94:90:
4c:fe:c5:bc:b8:3e:83:4e:50:b2:ac:05:3b:b8:c4:41:54:d1:
54:3e:2e:fa:3e:52:51:30:bf:b8:90:43:09:20:09:ee:cd:66:
58:a9:75:e7:89:e0:00:e7:66:6c:2a:19:59:6d:43:09:71:b4:
4a:f4:72:9b:d3:5d:06:41:f7:1a:69:aa:dc:aa:76:5a:19:38:
63:93:8a:e0:8c:41:f8:09:a5:3a:ea:aa:84:ec:60:f4:d1:b9:
ee:cb:10:e1:3a:61:66:dc:f2:ba:be:8c:e0:b8:79:80:c3:c4:
91:03:5a:bf:21:da:19:9f:48:f1:5b:b4:47:86:39:d6:8a:48:
9b:01:d1:ec
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUQzNEIxMTAvBgNVBAUTKDY0Q0I2RUE3RDdEMEU1MUY0RDQyQjJENjg0NzI3NEFC
QjA3MzY1OTgwHhcNMjYwMTIzMDUwOTA4WhcNMjYwMTMwMDUwOTA4WjAYMRYwFAYD
VQQDDA02OTczMDI3NS01NzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8IBrppGNp55Mli+fN3MZR32xSyq/UiewJTiCUSdJtaunnDP0vw9uhOlXiJXv
4OUi95pJ4HC5DTou3xOTRdEbOulnJy/WbD9uT/E1JeMHuJZac1EZAh4iLVud6aXq
f28aHXFk7vSUFJP/qaldGlMrWq/ubdpPVnmMux8uepXZ/q+8qIdBlIOA1ln1bHfM
imeViMiX6x3YhvUlfGCc90cDzvJX3fO99HBxVB8LREj3E6j2AgEx2rVEATX/a81N
tdbbU6SMbuUGPBl5sKijoU577LXZnwoWDrEeX52Ehe8oE9sHoWTAlOCc6CTHUZOH
aTL/ygfDtz48F+Nk3vnRP5dhQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIV8V0n
wAd7j77GRxAEShpHrlOCMB8GA1UdIwQYMBaAFGTLbqfX0OUfTUKy1oRydKuwc2WY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDM0Qi9CM0RCNTFEMkRG
MzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVSOU5RckxXaEhKMHE3Qnpa
WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pNdHVwOWZRNVI5TlFyTFdoSEowcTdCelpaZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RDM0Qi9CM0RCNTFEMkRGMzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVS
OU5RckxXaEhKMHE3QnpaWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAI3JtWiu4enIsUTjcybduOjna5wPl36eUrmRMxOh91Rur7pZFseJxx
jA4pYdCLIGvkawl87TVbFmU8yYP39JQRXru1/MnHtv0ptQ/IOGN34SYhHjkNQQjG
JUYUwABhu8IiuI+2A/AxW30sMQXJ2o1lWkem3w5AKTvpYFBplJBM/sW8uD6DTlCy
rAU7uMRBVNFUPi76PlJRML+4kEMJIAnuzWZYqXXnieAA52ZsKhlZbUMJcbRK9HKb
010GQfcaaarcqnZaGThjk4rgjEH4CaU66qqE7GD00bnuyxDhOmFm3PK6vozguHmA
w8SRA1q/IdoZn0jxW7RHhjnWikibAdHs
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:33:43 2026 by rpki-client