This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
File: Znvt9oJs9x83Ba2x89T7FITwiBQ.mft (raw, json)
Hash identifier: bU4te94aOO+ApMikoNkqpJiJseO9kGSyXiJr3yzvZBg=
Subject key identifier: 1D:C3:A9:02:DA:CF:B5:22:86:6A:81:20:FD:A2:6F:1F:AD:CB:E6:7E
Authority key identifier: 66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14
Certificate issuer: /CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814
Certificate serial: 03E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
Manifest number: 03E1
Signing time: Sat 24 Jan 2026 23:45:09 +0000
Manifest this update: Sat 24 Jan 2026 23:45:08 +0000
Manifest next update: Sat 31 Jan 2026 23:45:08 +0000
Files and hashes: 1: Znvt9oJs9x83Ba2x89T7FITwiBQ.crl (hash: LkFh9oMbvORPhS/yE+c8nmk/DPM90HzViGG6wmzORGI=)
2: 6108822AB03C11EC918CBA0EC4F9AE02.roa (hash: 1IbCI6SUsnpFHSypZmjM58SN3Uz6QJzWDA0ZH6CaOF8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl
rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 998 (0x3e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB39A, serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814
Validity
Not Before: Jan 24 23:45:08 2026 GMT
Not After : Jan 31 23:45:08 2026 GMT
Subject: CN=69755985-32b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:79:cc:ef:b6:5c:76:b8:e0:4c:0a:86:cb:
b3:b5:71:75:61:5b:1f:e9:fe:ca:e0:9d:ae:07:37:
b4:c3:9d:16:00:c2:e7:0c:45:41:fe:a7:56:88:d9:
19:ed:02:5b:9b:df:41:06:e4:3d:77:e8:d2:03:d0:
aa:29:ec:2f:e4:63:ec:d0:c2:38:7a:cb:71:73:a3:
39:f1:5f:15:c8:37:f9:1c:b0:82:12:27:17:ea:54:
75:20:60:05:e5:69:9c:b1:07:fd:e8:cc:63:95:4d:
04:86:53:a4:01:a4:41:eb:0c:89:f3:5b:4a:36:b6:
fa:bc:a8:8a:a3:52:aa:0d:a2:58:17:6b:f0:cc:c3:
92:ad:cb:c8:d5:06:2e:39:2b:41:6b:88:6e:92:da:
30:68:05:bd:6f:e3:2d:42:ae:87:70:dc:3d:ed:9b:
2f:2c:8e:1c:7b:2b:55:4f:5f:3d:7e:96:6d:7d:04:
6b:bb:4d:07:bb:3b:a6:d5:77:e3:2b:fe:d6:a1:ab:
f5:95:2c:59:9c:a3:ba:f3:a4:a9:bf:12:a2:f5:13:
ca:42:98:50:5f:7e:14:9c:45:7f:e2:e0:5e:f8:a4:
36:1f:2d:7b:41:c8:11:d8:87:b6:29:ed:3d:a7:e1:
4b:39:8d:db:2b:5c:90:ce:62:ed:d1:0b:01:b7:e7:
a7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C3:A9:02:DA:CF:B5:22:86:6A:81:20:FD:A2:6F:1F:AD:CB:E6:7E
X509v3 Authority Key Identifier:
keyid:66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:23:50:7d:4e:d4:10:33:69:6a:58:dd:2b:2a:4b:4f:be:90:
05:f6:53:7f:5f:61:2a:74:a7:7a:df:8c:55:45:bf:04:09:ec:
d1:8c:67:09:19:1b:9f:a7:33:72:29:92:a0:a4:7b:1a:23:b8:
c2:e3:1b:65:42:cb:69:67:09:57:81:6d:0a:9d:0a:90:e8:19:
0c:fe:5d:1e:27:c6:33:d6:6e:53:22:2c:fd:47:11:a9:8f:29:
00:37:2d:3b:d6:c1:cb:f2:cc:5c:13:20:b6:fe:87:34:e1:39:
22:96:06:87:bb:30:16:45:be:4e:4d:8f:82:c6:ba:df:c0:78:
18:5f:b5:7d:de:ac:58:10:af:92:a6:e8:71:fc:10:5a:b7:dd:
f3:5b:c7:86:55:94:da:c7:ee:3a:d6:14:70:33:89:11:91:ab:
8b:24:28:18:37:67:0e:29:2b:39:e4:d5:79:38:16:13:92:0f:
c1:aa:b4:6e:63:d1:ee:64:c0:01:91:b3:0e:c5:90:55:4b:8e:
85:84:f7:ec:4b:48:97:e2:97:14:ab:e5:9f:8a:cf:18:15:38:
d3:89:94:1e:e2:f8:c4:5d:3a:72:11:83:f3:1a:50:de:24:de:
c2:50:ea:b8:2c:ab:1b:e0:2b:bc:3b:e6:63:1f:9d:cb:64:22:
7f:d5:d6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:33 2026 by rpki-client