This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
File: rzCJXc48ZcI77FTLCJhY66Fhic4.mft (raw, json)
Hash identifier: jq1FMfodl32HQikfZwXHF3xxDyaFAU1Bp1Gpk5PgjYE=
Subject key identifier: 87:5B:8C:28:0A:23:F8:12:15:08:1C:1F:E5:70:87:B6:70:05:EB:50
Authority key identifier: AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE
Certificate issuer: /CN=A91CA294/serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE
Certificate serial: 46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
Manifest number: 41
Signing time: Fri 23 Jan 2026 06:28:42 +0000
Manifest this update: Fri 23 Jan 2026 06:28:42 +0000
Manifest next update: Fri 30 Jan 2026 06:28:42 +0000
Files and hashes: 1: rzCJXc48ZcI77FTLCJhY66Fhic4.crl (hash: l9CSvIIYcN3U9VIMg8LjXSwAyGNMp5pSC9RAn99yVsU=)
2: 44D1A4E69DAB11F0A7401064C4F9AE02.roa (hash: rrG273YrKP30bIP6LI9pQgElPTdMGXNtxru1G29zetU=)
3: 7CCBF066A2F811F09235B919C4F9AE02.roa (hash: zhniOmksUDRXONnEcT5JY0KumHd8uj/NZx0Y0gByQxQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl
rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA294, serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE
Validity
Not Before: Jan 23 06:28:42 2026 GMT
Not After : Jan 30 06:28:42 2026 GMT
Subject: CN=6973151a-6d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:94:7d:53:23:23:d7:e7:b5:a6:8d:3d:35:2b:
c7:f6:c7:b7:64:b1:45:f8:53:54:29:0b:d0:6c:81:
89:c2:0d:e1:62:ae:6d:aa:ac:15:ee:f1:6b:af:d5:
35:37:67:d9:6e:4b:ee:04:85:50:ef:83:6d:c0:da:
ae:71:25:2f:f0:01:52:05:74:0b:f9:e5:07:5b:31:
7a:d3:80:ab:1f:fe:95:14:5c:44:2e:cd:8a:0d:50:
b8:50:59:fb:6e:28:c8:fb:18:7c:19:77:0b:09:69:
c9:74:a2:78:d7:11:08:0c:8d:ff:f0:4c:35:15:55:
07:26:49:7d:06:d1:1e:01:2c:1f:ee:1d:da:85:ce:
fc:6f:df:4c:9b:17:01:36:1f:8e:a8:34:6d:8a:de:
8d:d4:e1:53:f0:ed:82:53:8f:68:10:aa:a1:73:7f:
19:87:85:22:c9:ff:b5:c0:87:d2:8c:97:35:ed:40:
13:0d:15:04:6e:24:27:82:60:3a:41:0a:88:49:6f:
5c:09:9f:a9:18:cf:30:a9:f5:d9:83:7b:d4:74:21:
cf:36:23:23:f4:91:9d:8e:92:69:18:cd:9e:6f:fe:
73:c7:4e:84:86:a7:e4:d0:d5:eb:dd:f3:0f:91:b3:
20:ab:c4:f4:b5:9e:c7:ab:ce:26:01:4e:2a:71:a5:
c8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5B:8C:28:0A:23:F8:12:15:08:1C:1F:E5:70:87:B6:70:05:EB:50
X509v3 Authority Key Identifier:
keyid:AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c5:c9:a6:7e:1a:90:76:e2:21:08:08:4d:40:6a:5d:d0:97:
92:9b:a7:96:fa:eb:52:4e:da:26:53:8b:bf:10:0d:64:2b:4b:
12:3a:39:36:b1:6f:42:d4:d4:28:f5:e5:18:aa:16:03:94:f0:
db:b9:ae:08:8c:3f:38:fc:db:71:ec:4f:93:7b:e3:ea:92:51:
e2:44:1c:42:e6:dd:9d:86:8c:1d:83:3a:96:c0:1a:a3:70:ca:
37:71:8c:31:57:6c:c3:8a:b0:a0:8f:ce:0c:9b:b9:be:3f:66:
91:4d:05:24:03:1a:fc:17:8c:ab:fb:89:97:bb:6e:c5:2d:e2:
91:44:60:69:b5:ca:99:89:97:31:69:9d:98:d7:33:97:20:65:
35:b1:b3:b3:71:0b:58:da:98:61:eb:1b:12:8b:4e:57:67:fb:
fd:1f:89:29:62:35:21:e9:74:08:5f:b0:9b:4d:2b:61:33:bf:
8b:17:5d:33:e4:83:ea:8e:70:95:6b:bf:93:55:ac:86:48:4b:
34:72:80:b9:99:f0:ae:0f:53:58:c0:c3:ce:6f:49:87:8a:7a:
2c:57:38:6a:c8:85:20:a8:81:b2:79:68:83:51:3b:b9:32:f2:
c9:57:f7:e9:58:fe:46:ca:a1:34:84:00:85:69:1a:c1:90:b1:
fd:88:3d:00
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
QTI5NDExMC8GA1UEBRMoQUYzMDg5NURDRTNDNjVDMjNCRUM1NENCMDg5ODU4RUJB
MTYxODlDRTAeFw0yNjAxMjMwNjI4NDJaFw0yNjAxMzAwNjI4NDJaMBgxFjAUBgNV
BAMMDTY5NzMxNTFhLTZkM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDSlH1TIyPX57WmjT01K8f2x7dksUX4U1QpC9BsgYnCDeFirm2qrBXu8Wuv1TU3
Z9luS+4EhVDvg23A2q5xJS/wAVIFdAv55QdbMXrTgKsf/pUUXEQuzYoNULhQWftu
KMj7GHwZdwsJacl0onjXEQgMjf/wTDUVVQcmSX0G0R4BLB/uHdqFzvxv30ybFwE2
H46oNG2K3o3U4VPw7YJTj2gQqqFzfxmHhSLJ/7XAh9KMlzXtQBMNFQRuJCeCYDpB
CohJb1wJn6kYzzCp9dmDe9R0Ic82IyP0kZ2OkmkYzZ5v/nPHToSGp+TQ1evd8w+R
syCrxPS1nserziYBTipxpcilAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUh1uMKAoj
+BIVCBwf5XCHtnAF61AwHwYDVR0jBBgwFoAUrzCJXc48ZcI77FTLCJhY66Fhic4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBMjk0L0M3QUZBNkEyOURB
QTExRjA5NjQyMEI2M0M0RjlBRTAyL3J6Q0pYYzQ4WmNJNzdGVExDSmhZNjZGaGlj
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcnpDSlhjNDhaY0k3N0ZUTENKaFk2NkZoaWM0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB
Mjk0L0M3QUZBNkEyOURBQTExRjA5NjQyMEI2M0M0RjlBRTAyL3J6Q0pYYzQ4WmNJ
NzdGVExDSmhZNjZGaGljNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJ3FyaZ+GpB24iEICE1Aal3Ql5Kbp5b661JO2iZTi78QDWQrSxI6OTax
b0LU1Cj15RiqFgOU8Nu5rgiMPzj823HsT5N74+qSUeJEHELm3Z2GjB2DOpbAGqNw
yjdxjDFXbMOKsKCPzgybub4/ZpFNBSQDGvwXjKv7iZe7bsUt4pFEYGm1ypmJlzFp
nZjXM5cgZTWxs7NxC1jamGHrGxKLTldn+/0fiSliNSHpdAhfsJtNK2Ezv4sXXTPk
g+qOcJVrv5NVrIZISzRygLmZ8K4PU1jAw85vSYeKeixXOGrIhSCogbJ5aINRO7ky
8slX9+lY/kbKoTSEAIVpGsGQsf2IPQA=
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:54:27 2026 by rpki-client