This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
File: Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json)
Hash identifier: TKrtg3mGXxF7F7h0DwM0ig9RXYI96lkWwuUECP+Xk6U=
Subject key identifier: 6D:18:E6:EF:3F:2B:DD:88:C8:A2:DF:5D:3F:2D:21:B9:7D:66:1A:B4
Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17
Certificate issuer: /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17
Certificate serial: 08DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
Manifest number: 08D0
Signing time: Sat 24 Jan 2026 19:51:33 +0000
Manifest this update: Sat 24 Jan 2026 19:51:33 +0000
Manifest next update: Sat 31 Jan 2026 19:51:33 +0000
Files and hashes: 1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: lLVX42Jy7HljPMpfg9FhiYmMuoZKi6fboYx18Jm55U0=)
2: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: gb3eIqGKtDZZMjsIarWLCbAcIGW3eUHFzm27i/K2y8U=)
3: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: Kko5Py9oYVoGdTuR3TmCVY6w0QuvDF7yamqA7Lq7XfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl
rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:51:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2270 (0x8de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17
Validity
Not Before: Jan 24 19:51:33 2026 GMT
Not After : Jan 31 19:51:33 2026 GMT
Subject: CN=697522c5-d1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c7:ba:e0:11:5e:f6:ca:35:78:ab:9c:3e:5c:
d2:5a:b2:c1:bb:1a:7d:9a:eb:13:d1:84:8b:a1:e6:
8f:a2:25:27:87:39:44:28:f8:68:8c:23:8e:e2:a1:
68:2a:88:9b:f1:7c:a0:fd:36:9b:8c:c8:a0:b2:50:
35:d0:7d:92:13:d2:e0:5c:d3:6d:3d:7a:ae:ea:47:
ed:e1:71:69:a5:ab:7a:ac:19:55:d2:b5:70:bb:93:
9c:0f:d1:1c:9f:20:62:5b:57:e8:ba:e2:23:be:76:
f9:8f:8c:01:93:82:5d:7d:c6:48:45:74:07:e1:a4:
27:0c:8f:67:4f:a0:08:f5:8e:bf:c7:5c:52:16:a3:
46:33:5f:73:47:88:d0:83:0c:95:71:ad:b9:b1:2e:
6e:87:26:8d:b3:5e:94:35:17:eb:81:2e:b2:37:81:
c1:62:3b:04:ba:2b:22:19:a5:eb:c0:f2:af:ca:a5:
06:ea:46:27:52:60:32:46:07:90:57:fb:25:c3:27:
1b:ad:d8:6b:0b:72:89:91:8b:d6:2f:b2:7a:da:a0:
c6:24:67:72:7a:6d:ab:12:90:f2:27:ed:6a:18:e8:
35:bd:80:98:d7:90:28:f3:b4:4c:64:9c:17:2d:29:
a7:73:78:43:5d:40:ee:d8:86:68:69:d5:41:e1:a6:
a1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:18:E6:EF:3F:2B:DD:88:C8:A2:DF:5D:3F:2D:21:B9:7D:66:1A:B4
X509v3 Authority Key Identifier:
keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:9b:38:ea:0b:df:df:99:db:42:bc:56:19:7d:71:34:58:bb:
10:d2:84:4e:8f:d3:28:23:19:a6:a1:de:2f:9e:4a:ec:b9:58:
aa:c3:eb:a2:5b:67:63:fd:34:4c:af:7c:da:eb:68:2c:44:81:
21:08:56:6a:47:67:8e:5e:84:57:34:8b:f0:ec:a1:b8:8d:d0:
32:52:28:8e:3d:1c:4d:e7:73:77:92:b8:94:de:99:f0:0f:c7:
3b:76:23:92:34:f0:45:ef:ca:30:b1:ff:d8:c1:af:cb:64:e2:
92:41:30:1c:64:14:21:2f:e8:96:33:a2:8a:ff:2d:38:ca:ce:
2f:72:17:f6:c9:0a:6a:1c:cb:a7:70:eb:bc:dc:7c:50:63:e3:
d7:7c:03:04:63:fa:85:fa:91:1a:46:6f:05:00:40:e7:ae:db:
60:05:cc:ff:bf:d2:8e:05:6b:3f:fd:28:85:bd:d7:38:2e:40:
bf:02:d9:1a:a8:45:66:90:19:2d:ea:9c:e2:f7:3d:be:4c:4e:
8d:cf:db:47:fd:28:3e:57:b4:fa:e6:f1:f3:72:9e:05:82:6e:
5c:a2:51:c2:ad:e4:b1:35:d7:57:e1:87:d3:64:68:02:40:64:
35:0a:c6:75:1d:12:48:f2:91:7c:8b:ea:0c:0e:87:ad:a9:50:
fa:83:da:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:52:06 2026 by rpki-client