This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft
File: ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft (raw, json)
Hash identifier: /P0m0wRaedMktSsbFOWu1PeUw0zgTMX0Q/faKViEKqM=
Subject key identifier: E8:9A:42:D3:3E:E9:92:12:B4:D6:04:EF:9D:F2:3F:EA:F3:30:4F:4F
Authority key identifier: 64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61
Certificate issuer: /CN=A91CE0FB/serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361
Certificate serial: 0544
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft
Manifest number: 053F
Signing time: Sat 24 Jan 2026 22:40:43 +0000
Manifest this update: Sat 24 Jan 2026 22:40:42 +0000
Manifest next update: Sat 31 Jan 2026 22:40:42 +0000
Files and hashes: 1: ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl (hash: wXQ4CtMKjvn4hH3cLSOJf8VQT7JA59nOjqH2p1whCSQ=)
2: 47170244259D11ECA74AC10AC4F9AE02.roa (hash: Y+S7v1lT5zJbNq1zlpCJhhazIK4L/t7cDHpXVyy+Cr4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl
rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1348 (0x544)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE0FB, serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361
Validity
Not Before: Jan 24 22:40:42 2026 GMT
Not After : Jan 31 22:40:42 2026 GMT
Subject: CN=69754a6b-4aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:cc:9e:1f:2f:a0:8c:3b:d9:1a:43:08:4d:e2:
27:05:28:9f:46:49:be:f5:3d:70:5f:f5:13:6f:b2:
fd:ed:26:ed:27:64:40:43:54:7b:e2:6c:d8:f0:f4:
d3:e6:a4:b1:5b:6b:87:67:7b:6e:28:c0:74:f2:5c:
5f:30:46:fd:67:97:bc:48:52:bf:7c:87:47:25:dd:
19:d1:f2:eb:8b:e1:f7:61:9d:4d:16:50:f7:ed:bf:
c3:fd:9c:b6:bb:7c:d8:87:07:5b:2b:bc:68:e1:a7:
0f:a0:08:23:a5:57:db:1d:b2:1c:08:ce:3a:f0:33:
3b:31:09:80:a0:a0:92:9d:1a:66:06:88:21:3c:aa:
24:eb:7d:09:fe:01:02:4a:4d:78:c6:ff:49:da:90:
1a:2c:cb:29:f8:84:5e:be:e5:5b:09:d3:d9:d2:e2:
68:93:4f:62:84:2d:af:02:b0:2b:76:7e:f9:3f:d8:
7c:ab:17:fd:55:21:7a:21:b5:81:fc:0d:cb:7a:40:
cd:6f:82:c7:ec:51:96:1b:d6:07:15:47:44:81:79:
0f:94:b5:01:22:e7:bb:09:46:ba:a0:17:ad:e3:29:
2b:e7:bd:1d:9c:cf:6f:fa:b8:be:76:2b:fa:ae:da:
df:fe:09:2e:04:d7:2d:fa:57:71:1d:f7:30:7b:ae:
7f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9A:42:D3:3E:E9:92:12:B4:D6:04:EF:9D:F2:3F:EA:F3:30:4F:4F
X509v3 Authority Key Identifier:
keyid:64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:f4:fd:b3:ab:48:63:21:43:4a:3d:bd:26:ff:f8:03:bd:d8:
b6:a7:af:80:7a:4a:41:a5:eb:81:fd:b6:8f:35:b9:98:e2:23:
41:6d:ab:2a:9b:58:4c:3c:30:b4:de:2a:0d:11:be:5a:03:cc:
b5:ae:79:f6:af:ed:19:d1:e2:17:8d:04:c8:7a:30:f3:64:81:
ad:9f:b4:3d:c7:a0:d3:9d:51:22:2e:da:da:aa:65:28:0a:1b:
2f:2f:34:90:df:4a:fe:6b:0c:d9:cc:7e:6a:3f:9f:b5:34:1b:
2e:72:19:fb:ee:02:42:03:de:60:5e:29:6e:54:96:d9:29:a0:
c7:82:3b:93:a2:d5:fe:c3:cd:6b:0b:4f:1d:59:8c:57:aa:70:
5c:47:55:2b:e0:77:15:4b:9d:e0:f1:d5:65:79:e9:24:22:d7:
5c:52:ad:4c:6b:9c:34:e9:96:99:ab:c2:4d:50:d2:54:aa:0a:
d7:fd:98:7c:15:1a:bf:35:12:0c:93:e6:b0:99:ca:06:bc:cf:
8c:41:d1:08:04:39:78:04:80:0f:2a:d8:3b:8e:7d:63:87:74:
fc:c9:66:47:67:a2:aa:76:07:45:2e:07:e5:b8:61:63:2c:07:
71:e2:a1:e7:fe:95:c4:0c:63:6f:cc:af:24:e0:08:98:56:71:
99:4e:40:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:29:41 2026 by rpki-client