This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft
File: zI7F8Y4keEmlxwbphTthhkju8qY.mft (raw, json)
Hash identifier: wgkorkyUveU1m1jM6ImDjDsGs656agYbzHcnYOhJ/lo=
Subject key identifier: E6:45:45:57:50:83:4A:C6:43:0D:0F:31:B8:F1:C7:67:8A:9B:BF:43
Authority key identifier: CC:8E:C5:F1:8E:24:78:49:A5:C7:06:E9:85:3B:61:86:48:EE:F2:A6
Certificate issuer: /CN=A91B8C12/serialNumber=CC8EC5F18E247849A5C706E9853B618648EEF2A6
Certificate serial: 023C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft
Manifest number: 0238
Signing time: Sun 25 Jan 2026 01:15:13 +0000
Manifest this update: Sun 25 Jan 2026 01:15:13 +0000
Manifest next update: Sun 01 Feb 2026 01:15:13 +0000
Files and hashes: 1: zI7F8Y4keEmlxwbphTthhkju8qY.crl (hash: Pgr3llBELB1y4YPtYDncO3dY9yp/2LEk0hIFCl0KcHg=)
2: F9141F4891AA11EDBEE1242EC4F9AE02.roa (hash: g9yTbSsNaqPreIw0oU07/CNACl2sTNgPee6hfuDh8F4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.crl
rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 572 (0x23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8C12, serialNumber=CC8EC5F18E247849A5C706E9853B618648EEF2A6
Validity
Not Before: Jan 25 01:15:13 2026 GMT
Not After : Feb 1 01:15:13 2026 GMT
Subject: CN=69756ea1-aa0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:07:41:59:54:e0:58:ff:ed:a7:32:9b:d6:
cc:22:36:79:53:f6:b4:7e:7a:5a:5d:df:c7:df:b8:
0b:e1:a8:da:8e:ea:b6:75:bd:ef:15:50:dc:0a:91:
9b:c2:75:7e:80:f3:02:ce:eb:15:d5:58:06:45:58:
41:f7:cb:ed:97:05:de:81:8c:7e:30:70:b1:56:57:
19:81:71:21:45:ee:c2:ce:0c:3e:c8:e6:df:e0:4b:
42:84:9d:95:dd:92:32:0f:9d:38:07:48:05:87:06:
cc:0e:39:68:6e:1e:b7:40:ef:e9:d6:55:34:57:3f:
15:08:41:f9:fd:c5:c4:fa:5e:83:24:68:73:aa:8e:
59:7e:65:09:d6:3f:19:a2:16:bb:e2:a4:1d:c0:43:
63:e6:d3:96:56:d7:0a:cf:df:9d:9e:55:de:dd:f9:
ef:5c:42:89:9d:6c:00:b9:19:9d:a5:2c:8e:92:20:
6a:12:9e:5e:f1:ff:e1:a7:da:bd:aa:9e:3c:bf:0f:
85:75:24:c9:76:34:ab:9e:9b:3b:5a:49:dc:87:4a:
12:c3:21:25:01:2a:e8:a6:f4:14:31:41:d4:a2:38:
58:33:b4:76:57:e0:07:f4:87:9d:a4:dd:01:27:2c:
17:84:1a:d0:a7:d8:ae:f2:c4:39:8c:2e:27:f5:d1:
74:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:45:45:57:50:83:4A:C6:43:0D:0F:31:B8:F1:C7:67:8A:9B:BF:43
X509v3 Authority Key Identifier:
keyid:CC:8E:C5:F1:8E:24:78:49:A5:C7:06:E9:85:3B:61:86:48:EE:F2:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9f:38:5e:f4:ef:db:91:fc:de:27:34:35:80:9a:9e:ff:cf:
08:26:3a:82:d8:06:07:1f:49:89:5a:97:b5:59:30:54:d1:ea:
fc:25:0f:8b:29:56:7d:18:29:62:bb:21:e2:40:d2:c5:04:c5:
41:94:9a:d8:24:fe:a8:74:c5:3e:c9:3d:b2:be:95:10:bc:0a:
e7:48:48:bc:b2:17:01:67:42:c6:07:20:2f:6e:30:27:f4:dc:
54:d2:00:bc:e0:e9:d5:90:ad:6d:06:94:90:71:42:23:90:21:
c3:04:43:ac:a0:b6:5e:a8:67:57:e3:a8:d0:57:f5:df:9b:a7:
f3:c1:68:8c:f7:44:33:93:c8:97:32:b7:0f:9a:be:83:c7:a4:
75:60:d2:48:99:37:16:c6:19:e4:f7:12:aa:b5:21:a1:72:63:
fb:cb:e2:dd:77:c2:92:d2:e2:b4:8f:12:09:67:03:cb:af:f9:
74:8c:fc:6e:b6:da:48:91:ca:2f:f9:5c:f4:12:c3:28:9c:62:
e8:fa:dd:ab:33:95:eb:61:1e:16:d7:8b:c1:2d:4e:db:59:ad:
d8:96:82:25:61:04:ba:c7:24:bb:05:68:2b:3c:12:a4:de:d3:
90:bd:c7:21:05:82:0c:bb:ab:8f:05:b8:1d:54:f2:5b:54:70:
02:d0:33:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:33:47 2026 by rpki-client