This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft
File: ZTy4p1ENubbBon2HfSEh5t9CGYI.mft (raw, json)
Hash identifier: Fw434b+8PUOW7HLCGUwg0PgMxrABxpAGY/TGq8bBrFs=
Subject key identifier: 15:16:17:A2:9B:25:23:A4:C8:7E:05:56:14:3A:43:43:90:D7:7D:21
Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82
Certificate issuer: /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982
Certificate serial: 010F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft
Manifest number: FF
Signing time: Sun 25 Jan 2026 04:38:38 +0000
Manifest this update: Sun 25 Jan 2026 04:38:38 +0000
Manifest next update: Sun 01 Feb 2026 04:38:38 +0000
Files and hashes: 1: ZTy4p1ENubbBon2HfSEh5t9CGYI.crl (hash: 2wna7N+jR8JVKvgpEwwL6J+bmU30WR/MCYUMQa7T5r0=)
2: 6B7CC19C73B811F08DDFF784C4F9AE02.roa (hash: n+54z7fslNXJ7in5uQGFK69nm0/AotBzwzG1jXO7P88=)
3: 5462D9FECF7C11F099CF1F43C4F9AE02.roa (hash: 004AtrOuTefMPuXTTWiollgx+cVpx+/Sf/ZzYxXYME8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl
rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:38:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFC94, serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982
Validity
Not Before: Jan 25 04:38:38 2026 GMT
Not After : Feb 1 04:38:38 2026 GMT
Subject: CN=69759e4e-1c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b7:61:0d:39:56:5f:4b:3d:fd:1f:9d:fd:d9:
df:2c:be:98:36:a5:31:84:e5:36:c7:46:3a:c9:75:
10:61:7b:37:97:1a:d3:26:64:5b:9a:c4:21:db:ee:
e9:0f:5c:22:cd:78:b9:12:4c:63:9b:6b:42:a4:2a:
5e:ce:bd:d0:6b:03:dc:aa:ef:d4:b4:b9:2b:af:3b:
36:de:5f:a8:75:75:30:f9:1a:a9:48:84:8c:89:6c:
d1:30:dd:e2:85:af:06:d6:da:ce:13:11:25:22:b3:
76:86:ca:5a:64:97:4b:16:ed:79:16:db:48:b2:97:
3d:92:ef:6e:64:55:ad:6e:33:90:19:2b:7b:fe:c5:
4d:f5:b8:06:ca:e1:b2:4a:1e:06:d4:39:38:49:4a:
81:aa:ce:4a:df:ee:ca:27:83:bc:40:f3:89:b5:9e:
f6:21:99:89:2d:0c:83:be:c9:e7:b4:71:76:06:75:
ce:9a:ba:6d:69:3b:16:9b:de:ea:51:c7:08:29:81:
5b:6a:7c:fb:b1:6c:5e:8e:14:e8:a9:85:e7:b7:e1:
e2:a9:cf:3a:c2:fb:5e:a0:c7:4a:d2:84:b1:9f:f4:
3e:78:b4:b5:e5:a7:22:9b:68:35:45:dd:16:7d:c2:
b7:48:17:8f:3a:3a:77:b3:fe:43:72:93:4c:16:f0:
f0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:16:17:A2:9B:25:23:A4:C8:7E:05:56:14:3A:43:43:90:D7:7D:21
X509v3 Authority Key Identifier:
keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:d8:01:c3:b1:0c:a2:68:1a:79:8a:8b:ce:c9:dc:d0:e3:be:
73:e3:57:30:c2:6c:e7:6f:b1:7c:83:74:20:b5:89:e1:69:a6:
22:8d:48:36:2f:fe:e3:c0:26:5c:20:f0:13:a6:57:e9:54:d0:
c1:bd:32:31:6a:8f:80:39:4e:c9:3b:89:69:00:6a:d5:30:55:
c3:4c:3c:d5:6c:05:f9:26:d8:d5:4e:e0:3b:29:0b:0e:22:03:
ed:35:31:62:02:3f:c3:bf:6e:fa:cf:19:b0:97:a9:10:67:b8:
87:34:fd:1a:55:51:ed:39:94:3e:73:4a:02:c4:64:ba:9c:65:
ca:d0:73:71:28:10:0b:9d:4e:ba:a6:aa:fc:f7:d7:ff:1b:73:
15:ea:3f:00:f2:79:f1:aa:c9:0c:96:2c:16:56:3a:82:46:ab:
f5:b7:af:0f:64:e8:38:4a:a1:f5:ba:9e:9a:2d:9a:22:50:0f:
65:63:b6:9d:65:5e:ce:2e:2f:51:12:f9:fb:f6:3a:b5:76:da:
d4:89:7d:13:60:69:2e:40:76:79:9b:a8:7d:3a:8a:76:99:e8:
72:e0:4a:df:53:63:3a:8a:82:b4:9d:78:91:d7:c3:80:3c:4a:
ad:19:46:b0:85:3f:b5:26:16:3c:66:ee:d7:07:0a:39:a0:54:
1f:89:35:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:02:37 2026 by rpki-client