This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
File: ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft (raw, json)
Hash identifier: EGUO8b6YWlDSWQm1Tg27aEAOBmyfjRhYbomrSH31kIc=
Subject key identifier: 37:E3:AF:EF:1E:37:A3:45:9D:F5:BE:8F:19:86:DC:76:96:3D:BE:C2
Authority key identifier: 65:E0:AF:A4:D1:01:BA:A0:5D:42:5D:EB:7C:25:28:96:CB:8D:5A:86
Certificate issuer: /CN=A91E13CF/serialNumber=65E0AFA4D101BAA05D425DEB7C252896CB8D5A86
Certificate serial: 4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
Manifest number: 48
Signing time: Sun 25 Jan 2026 06:24:21 +0000
Manifest this update: Sun 25 Jan 2026 06:24:21 +0000
Manifest next update: Sun 01 Feb 2026 06:24:21 +0000
Files and hashes: 1: ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl (hash: NfvTJ5DfSOtCcEFYtqKy3B3lKTuA1D7oQMybLfMApNE=)
2: D88B7AD48E3511F0A7463923C4F9AE02.roa (hash: iBuE2y9jsCxNhDssZJLnYX+1LbXLRzvojv5ZS/EkcXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl
rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E13CF, serialNumber=65E0AFA4D101BAA05D425DEB7C252896CB8D5A86
Validity
Not Before: Jan 25 06:24:21 2026 GMT
Not After : Feb 1 06:24:21 2026 GMT
Subject: CN=6975b715-49c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d8:9a:d6:ad:33:92:8d:41:09:ad:fc:43:51:
28:43:39:0b:c1:d4:dc:6a:2d:5b:74:9b:f1:90:b7:
17:7b:13:5c:d9:87:42:da:f0:20:25:e1:e2:b1:67:
ea:aa:85:b4:42:ed:9b:64:25:28:ae:ac:e4:94:ee:
d1:2e:5d:3a:8d:6c:bb:ba:00:76:10:93:5c:48:06:
af:64:b6:22:b7:41:7a:9e:49:29:80:87:dc:87:65:
1d:ae:fa:24:fb:ce:81:df:3b:73:eb:a5:51:99:74:
72:03:71:55:f8:11:5c:4d:e3:43:0c:af:57:01:78:
03:bb:ff:8c:17:b5:0a:dd:26:26:87:8f:f0:74:67:
18:69:bf:24:38:60:f7:2c:8b:f6:f6:49:44:b0:2b:
1b:c7:95:5a:77:9d:5f:4c:65:f3:18:44:39:60:0e:
59:12:d9:3e:e6:8b:7b:ef:14:aa:bd:6e:f3:b0:ce:
09:99:82:0b:dd:78:76:f7:27:52:eb:61:3a:ff:22:
b9:62:c2:bd:3b:a3:c9:88:eb:b9:a8:4d:f7:bc:41:
65:82:90:e4:71:e1:f2:fa:96:56:70:13:ba:bb:60:
9f:05:5d:be:0e:6c:93:d3:3d:d5:56:ea:a2:4d:d7:
8d:9a:c1:2e:da:a3:3c:70:01:87:2f:f3:94:3d:5c:
00:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E3:AF:EF:1E:37:A3:45:9D:F5:BE:8F:19:86:DC:76:96:3D:BE:C2
X509v3 Authority Key Identifier:
keyid:65:E0:AF:A4:D1:01:BA:A0:5D:42:5D:EB:7C:25:28:96:CB:8D:5A:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeCvpNEBuqBdQl3rfCUolsuNWoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E13CF/1906AA4E8E3511F09E05E310C4F9AE02/ZeCvpNEBuqBdQl3rfCUolsuNWoY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4d:26:20:b1:db:4b:69:ad:f1:04:6c:4c:4a:8c:b7:63:28:
2d:a8:74:da:ed:54:95:ad:64:56:45:06:55:00:bc:5b:68:36:
93:ee:b5:d1:50:40:6a:e5:e9:79:51:be:d9:89:46:45:db:d8:
b7:00:40:29:48:cd:4e:a1:bb:4b:28:1e:af:bc:df:f2:0e:43:
70:3c:2e:da:4c:b0:dd:6e:c4:04:4a:80:44:3e:07:70:b0:80:
26:f0:88:8c:54:81:d8:9e:4f:5e:c4:86:55:7f:cd:b0:bc:f7:
5e:0f:6a:06:ca:ce:0f:ef:8d:f0:f1:57:3c:2c:92:ae:6d:43:
c9:38:9b:db:cf:dc:18:46:e0:6d:b2:85:77:b0:8d:c6:fa:17:
8c:cd:3b:c9:1c:8c:ba:61:2c:5d:71:a0:af:27:02:cd:7a:bc:
1f:ae:2c:1c:92:3d:4b:7f:44:cb:c5:1d:a3:a4:5b:ce:f0:8b:
19:e9:7b:9d:08:d8:b2:41:40:56:8f:b7:6f:6c:9c:35:81:e3:
d5:21:1c:21:f6:9d:6c:59:03:b7:77:eb:7a:b4:09:05:6d:8b:
04:5e:d9:04:7a:99:c0:da:a1:cc:a0:94:e7:35:90:1e:e4:ff:
07:65:af:f0:db:c1:a1:8d:8d:dd:56:fa:49:28:75:e5:5a:e6:
39:62:c7:b7
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MTNDRjExMC8GA1UEBRMoNjVFMEFGQTREMTAxQkFBMDVENDI1REVCN0MyNTI4OTZD
QjhENUE4NjAeFw0yNjAxMjUwNjI0MjFaFw0yNjAyMDEwNjI0MjFaMBgxFjAUBgNV
BAMMDTY5NzViNzE1LTQ5YzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCW2JrWrTOSjUEJrfxDUShDOQvB1NxqLVt0m/GQtxd7E1zZh0La8CAl4eKxZ+qq
hbRC7ZtkJSiurOSU7tEuXTqNbLu6AHYQk1xIBq9ktiK3QXqeSSmAh9yHZR2u+iT7
zoHfO3PrpVGZdHIDcVX4EVxN40MMr1cBeAO7/4wXtQrdJiaHj/B0ZxhpvyQ4YPcs
i/b2SUSwKxvHlVp3nV9MZfMYRDlgDlkS2T7mi3vvFKq9bvOwzgmZggvdeHb3J1Lr
YTr/Irliwr07o8mI67moTfe8QWWCkORx4fL6llZwE7q7YJ8FXb4ObJPTPdVW6qJN
142awS7aozxwAYcv85Q9XABtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUN+Ov7x43
o0Wd9b6PGYbcdpY9vsIwHwYDVR0jBBgwFoAUZeCvpNEBuqBdQl3rfCUolsuNWoYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxM0NGLzE5MDZBQTRFOEUz
NTExRjA5RTA1RTMxMEM0RjlBRTAyL1plQ3ZwTkVCdXFCZFFsM3JmQ1VvbHN1Tldv
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWmVDdnBORUJ1cUJkUWwzcmZDVW9sc3VOV29ZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx
M0NGLzE5MDZBQTRFOEUzNTExRjA5RTA1RTMxMEM0RjlBRTAyL1plQ3ZwTkVCdXFC
ZFFsM3JmQ1VvbHN1TldvWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAH9NJiCx20tprfEEbExKjLdjKC2odNrtVJWtZFZFBlUAvFtoNpPutdFQ
QGrl6XlRvtmJRkXb2LcAQClIzU6hu0soHq+83/IOQ3A8LtpMsN1uxARKgEQ+B3Cw
gCbwiIxUgdieT17EhlV/zbC8914PagbKzg/vjfDxVzwskq5tQ8k4m9vP3BhG4G2y
hXewjcb6F4zNO8kcjLphLF1xoK8nAs16vB+uLBySPUt/RMvFHaOkW87wixnpe50I
2LJBQFaPt29snDWB49UhHCH2nWxZA7d363q0CQVtiwRe2QR6mcDaocyglOc1kB7k
/wdlr/DbwaGNjd1W+kkodeVa5jlix7c=
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:11:43 2026 by rpki-client