This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
File: Z15jpMF4xvVmAmQCRHJGTrmOG10.mft (raw, json)
Hash identifier: Ca3mO/FVEFMLPEACafOh8TUenamKznTjNxNStFcJy9Q=
Subject key identifier: E4:09:7E:32:8D:4E:09:73:8F:CC:74:9B:C9:3F:51:6A:2E:AF:F9:7F
Authority key identifier: 67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D
Certificate issuer: /CN=A91B01FF/serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D
Certificate serial: 0505
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
Manifest number: 04FD
Signing time: Sat 24 Jan 2026 22:54:02 +0000
Manifest this update: Sat 24 Jan 2026 22:54:01 +0000
Manifest next update: Sat 31 Jan 2026 22:54:01 +0000
Files and hashes: 1: Z15jpMF4xvVmAmQCRHJGTrmOG10.crl (hash: kZryZfn3II0lemh11OjtEjn1rr546KcBi8+CKXn3Nho=)
2: CBCD0962B91511EE865E5E34C4F9AE02.roa (hash: cZhErBuJWTvRXCMGhnT1PF4hHeIUULRK1nW7jNBX110=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.crl
rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:54:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1285 (0x505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B01FF, serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D
Validity
Not Before: Jan 24 22:54:01 2026 GMT
Not After : Jan 31 22:54:01 2026 GMT
Subject: CN=69754d8a-d3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ab:26:e4:0b:98:95:20:e3:af:46:50:4c:4e:
c2:42:40:4a:e1:b1:60:c0:25:f8:b2:58:49:53:d0:
dd:fe:a5:ed:29:b1:74:cf:5f:57:1e:a5:fd:06:0f:
3e:8d:c9:9b:73:f9:d4:8f:86:39:15:db:de:93:e0:
c2:21:19:7a:53:8f:d2:52:ce:92:99:43:75:b4:c7:
4a:fa:24:4d:71:cc:e3:e0:d0:c7:3c:dc:03:3a:44:
87:5f:63:f9:e9:d0:3d:84:06:c0:73:d7:9b:5c:b8:
e6:a1:df:cf:16:c6:2b:3e:cd:fb:b1:66:94:10:db:
e4:78:f1:d4:8b:1b:57:91:b2:4f:84:bb:54:0c:66:
b3:b8:0f:da:33:4d:88:90:52:24:2e:f5:52:4c:7e:
6b:1b:40:0d:75:94:19:3a:f4:8a:88:2d:2e:42:02:
ed:24:e4:2b:8f:c0:bc:a0:5d:d2:e1:5b:8f:ad:28:
e2:ad:c4:f7:9b:ff:f4:1c:69:fb:8f:73:97:f8:60:
85:67:2e:a3:56:f5:30:fd:7e:e0:05:23:1a:60:40:
b5:9f:f5:f1:5d:1e:aa:72:7e:2b:1f:ae:bc:b5:6d:
b6:81:b8:3d:63:b2:16:a6:4a:69:c0:fa:98:58:f0:
71:b7:f4:af:82:0c:bb:03:c0:d1:d0:54:bd:60:aa:
28:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:09:7E:32:8D:4E:09:73:8F:CC:74:9B:C9:3F:51:6A:2E:AF:F9:7F
X509v3 Authority Key Identifier:
keyid:67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:89:a4:51:f5:73:49:f2:15:d9:60:64:80:5d:f2:6f:df:fa:
76:95:d8:26:90:35:99:fa:bc:6a:f4:e3:47:25:fd:8b:af:1b:
73:df:0d:2e:e1:7f:e6:ba:3b:60:09:6c:c6:cf:65:73:76:17:
13:03:61:be:45:16:e0:8e:f8:07:6f:ad:0a:61:e7:2c:e5:17:
51:e7:b8:7b:8e:3f:06:fd:02:01:18:75:dd:ee:bd:3e:d1:98:
ed:67:8d:63:14:2e:02:94:04:32:24:ca:30:f8:26:3e:72:ff:
28:9a:c2:c4:96:16:7d:51:30:69:20:cc:d3:3e:7b:57:2d:ee:
30:da:11:b6:4f:77:fe:4d:d6:4a:ea:fa:eb:8b:0a:42:54:c5:
07:82:68:7e:84:17:12:f7:ec:49:22:35:7d:0e:03:90:fd:02:
96:83:cf:39:04:5d:b0:ba:31:c7:27:96:7e:eb:ac:eb:5d:53:
9b:e2:99:0f:c6:c0:03:16:20:9c:c4:22:88:a1:9d:86:29:e8:
6a:09:81:54:39:2e:75:46:e0:57:e7:69:f6:a8:ba:35:b1:cf:
5d:ce:e2:55:80:82:a6:7e:76:44:ed:33:e6:c9:35:04:5a:d9:
5e:96:36:0d:b2:d3:a7:a2:42:4f:1a:7f:87:ea:de:86:b7:94:
f1:b0:b4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:24:24 2026 by rpki-client