This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
File: z9EY2pb_YF-93yeqSqAmO072edo.mft (raw, json)
Hash identifier: UaxjCU9TkebAxmTkMaiIyzJFs5h+21RK2QfchFC6Y/o=
Subject key identifier: 22:32:BC:C4:03:C8:C2:7B:D9:F8:B5:25:E6:B9:8A:D7:FB:F7:25:EE
Authority key identifier: CF:D1:18:DA:96:FF:60:5F:BD:DF:27:AA:4A:A0:26:3B:4E:F6:79:DA
Certificate issuer: /CN=A91C9E82/serialNumber=CFD118DA96FF605FBDDF27AA4AA0263B4EF679DA
Certificate serial: 01B0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
Manifest number: 01B0
Signing time: Sun 25 Jan 2026 02:28:57 +0000
Manifest this update: Sun 25 Jan 2026 02:28:56 +0000
Manifest next update: Sun 01 Feb 2026 02:28:56 +0000
Files and hashes: 1: z9EY2pb_YF-93yeqSqAmO072edo.crl (hash: xRPMRgSz0jQE8owJqsCmyHjw/JjO3xw7x9G7ulrfxYU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.crl
rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:28:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9E82, serialNumber=CFD118DA96FF605FBDDF27AA4AA0263B4EF679DA
Validity
Not Before: Jan 25 02:28:56 2026 GMT
Not After : Feb 1 02:28:56 2026 GMT
Subject: CN=69757fe9-465c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:10:ad:d3:b1:89:21:7f:41:3d:e4:8b:d6:d1:
9b:df:1e:e9:9e:fd:7e:e7:cd:7f:6d:2c:32:cb:57:
83:6a:b4:ac:28:1c:22:d5:73:b7:7e:21:fb:fb:3f:
5d:f3:24:95:5d:8f:22:28:53:ff:e8:38:66:fb:4a:
11:71:9e:22:03:69:ff:02:14:0a:e9:73:1f:53:77:
f6:71:a0:44:b3:76:d4:c5:91:e2:5b:df:3d:f8:0e:
e2:ff:13:4b:96:da:26:ac:18:67:e7:e5:b2:0b:76:
60:8a:ac:e2:f8:c1:9e:65:5c:76:5d:ae:ee:91:ab:
2b:01:2c:67:f0:a6:e0:54:9d:c8:ca:dc:29:ff:72:
1a:65:5a:46:1d:fc:8f:11:ea:c5:0a:fd:8c:00:05:
86:7a:06:54:66:2e:ab:2e:c5:da:3d:7b:a5:e8:43:
44:6f:ff:66:31:a0:01:58:96:3e:10:24:19:1f:0c:
e1:f1:7c:fb:37:e7:9e:b2:b2:2e:9f:03:47:22:f9:
0c:da:30:20:ce:c9:e0:76:15:8f:f1:9b:24:e6:3f:
8c:79:b1:55:e4:54:20:6b:2f:09:ae:c0:f2:57:54:
89:93:8b:48:f3:af:4f:a1:39:7e:c1:cd:ae:8d:9b:
88:9c:7a:31:26:c5:b5:8a:d0:6f:22:6e:e0:84:d6:
7b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:32:BC:C4:03:C8:C2:7B:D9:F8:B5:25:E6:B9:8A:D7:FB:F7:25:EE
X509v3 Authority Key Identifier:
keyid:CF:D1:18:DA:96:FF:60:5F:BD:DF:27:AA:4A:A0:26:3B:4E:F6:79:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5e:dd:84:ad:7c:90:af:f3:96:74:3d:d8:90:27:ea:b8:76:
29:62:15:d2:0d:a0:9e:16:26:f9:60:92:68:70:d4:b1:05:4a:
e5:1f:a7:e3:95:0a:28:90:66:34:df:43:71:5c:49:bd:6c:82:
e6:99:72:f8:0b:1a:f7:50:fe:e4:e9:22:1a:17:29:97:d9:0c:
b0:bb:b9:06:ba:4f:b7:4b:30:42:35:68:1d:3a:75:ee:9c:cc:
d2:da:33:39:ac:1b:29:71:a9:f9:3e:c4:23:8e:60:45:08:dd:
3c:cd:a7:a8:f0:8f:10:81:e6:1e:3c:5b:c7:99:53:77:10:8c:
6b:6e:41:22:3d:48:42:52:3c:cf:f9:15:ce:79:16:d9:9c:b2:
28:86:b4:83:ff:c9:b3:fd:84:b5:e9:af:14:23:06:15:3a:fb:
0d:e9:96:0a:2f:91:0a:98:82:6f:65:c9:17:f0:6a:a7:54:94:
f9:e0:1c:7c:8f:d9:3c:e3:76:d7:3c:54:c9:8f:05:8e:94:e0:
0a:3f:a7:7a:b7:6d:a7:cd:eb:8a:8f:cb:f7:0c:83:36:fc:a9:
8c:12:d3:ad:2f:da:0f:18:d2:8a:fe:e7:c5:21:95:e9:e1:6c:
d3:6c:b2:c6:a5:4d:c6:4e:ee:f9:7e:c6:de:fc:37:63:f7:c2:
09:19:11:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:13:42 2026 by rpki-client