This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
File: _ZFHrvajMNGN1MnP2GQvDtqnuQc.mft (raw, json)
Hash identifier: /EC5D34S/a5ZqmiBoKKRJiRDQ1wuSitOdkw4f+LUIAM=
Subject key identifier: 53:99:70:20:D4:07:5A:66:15:D4:CD:60:AC:0A:15:9D:6B:44:EE:56
Authority key identifier: FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07
Certificate issuer: /CN=A91E1853/serialNumber=FD9147AEF6A330D18DD4C9CFD8642F0EDAA7B907
Certificate serial: 2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
Manifest number: 2C
Signing time: Sun 25 Jan 2026 06:43:36 +0000
Manifest this update: Sun 25 Jan 2026 06:43:35 +0000
Manifest next update: Sun 01 Feb 2026 06:43:35 +0000
Files and hashes: 1: _ZFHrvajMNGN1MnP2GQvDtqnuQc.crl (hash: 6tQqwuEl9AKpBpWEKCyWVX1DWzgxQom0/5inGyeY7Fo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.crl
rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1853, serialNumber=FD9147AEF6A330D18DD4C9CFD8642F0EDAA7B907
Validity
Not Before: Jan 25 06:43:35 2026 GMT
Not After : Feb 1 06:43:35 2026 GMT
Subject: CN=6975bb97-d39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a3:0c:c7:6a:91:89:6a:96:0c:3c:e8:cc:4b:
41:b6:f0:d1:b0:37:dc:4b:a7:e1:81:be:6a:f3:91:
56:e6:de:b7:6d:fe:6c:0a:9d:71:5e:48:b5:d3:cd:
75:8b:f1:6d:a9:cb:86:84:06:84:01:2b:cf:77:a1:
23:98:53:6c:f5:fd:76:e8:00:cd:3c:a5:ae:ae:48:
e3:d2:b3:38:fd:82:42:38:29:a7:23:91:72:7c:0b:
9c:9e:3d:1a:d2:8d:80:a7:70:13:e6:37:85:a5:3c:
8f:53:df:50:10:18:e2:aa:33:c5:99:a3:b8:43:9b:
12:31:79:1a:48:43:6a:70:51:48:77:80:be:26:43:
b7:9e:36:e4:61:25:f3:8a:98:c9:5a:33:61:ae:91:
4f:f2:1b:bd:f2:ee:6e:60:d1:46:c9:44:b0:26:77:
33:5d:09:ac:2b:e6:d6:2a:30:12:6e:38:2f:86:37:
c4:28:40:7a:e4:78:8a:98:47:51:7c:8c:35:e1:ac:
09:45:c8:13:69:7c:2c:f9:64:dc:d2:31:a2:74:38:
62:c4:52:ca:6f:c9:68:33:e6:96:2c:31:c8:81:b6:
2d:ca:35:dd:0d:f9:56:6a:81:8b:08:60:3e:c8:66:
52:64:37:83:13:ce:1f:82:88:01:e8:29:45:ff:07:
06:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:99:70:20:D4:07:5A:66:15:D4:CD:60:AC:0A:15:9D:6B:44:EE:56
X509v3 Authority Key Identifier:
keyid:FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2b:40:ae:52:fe:48:24:8c:8d:ff:f9:e0:78:54:38:40:42:
47:45:dc:e4:2f:83:3f:7e:20:11:5e:07:61:d2:5b:e6:5d:a0:
aa:05:d3:7f:e2:91:9b:8d:42:20:20:51:f7:58:2b:11:be:bb:
19:60:92:d9:49:23:3e:b6:5d:e9:c9:92:41:25:89:4f:39:b4:
10:d8:43:e7:bd:1a:56:20:5f:db:49:b9:a9:12:52:99:bd:2f:
8c:ea:ef:ad:28:ba:9e:00:29:fd:eb:82:ff:d1:b3:f4:ef:8e:
f3:69:62:80:8b:43:62:be:04:59:9d:06:90:d4:93:21:36:3f:
9c:a4:71:9a:af:46:ae:23:0b:2d:07:f9:b9:31:c4:7b:a8:52:
2f:6d:04:92:a1:e2:07:28:64:b7:03:a5:ab:4d:ef:f6:c9:0e:
55:13:9a:37:66:6f:a3:da:ce:d5:0c:7a:8d:01:3c:55:c5:2b:
d3:8f:22:2d:2c:f6:2f:6f:e2:a9:82:6c:04:fb:7a:8e:32:e7:
71:95:84:af:36:d4:ae:13:1b:40:94:ab:ea:90:e3:d0:68:76:
eb:cf:45:d5:fd:67:68:28:32:56:5b:d0:e0:e1:aa:b1:52:b6:
49:35:73:2a:98:d8:76:7f:e0:26:75:cf:59:9d:38:a7:4e:27:
c7:51:25:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:05:53 2026 by rpki-client