This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
File: zupmODV1Y6xVdo8A2E0nezpjxEk.mft (raw, json)
Hash identifier: pQ+bkm42EDFwXk5WlPBQ8+r1Fw183OgQoa1pSjh/7ag=
Subject key identifier: 1C:AA:68:8E:E2:A0:E2:5E:BC:B0:15:11:C7:DC:8D:3F:C3:99:FE:B5
Authority key identifier: CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49
Certificate issuer: /CN=A91F2F18/serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
Manifest number: A7
Signing time: Fri 23 Jan 2026 05:22:51 +0000
Manifest this update: Fri 23 Jan 2026 05:22:50 +0000
Manifest next update: Fri 30 Jan 2026 05:22:50 +0000
Files and hashes: 1: zupmODV1Y6xVdo8A2E0nezpjxEk.crl (hash: ib+lCyOaFV3kHxZuLjFyNhIOINQCmkHSKhevDpd3jVQ=)
2: 65FCC030FB6511EF88F1AD24C4F9AE02.roa (hash: j+8HJa2cqS8hZG5kU32nJ71/58f4q/tWtbKGQi9EvM0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl
rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 05:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2F18, serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449
Validity
Not Before: Jan 23 05:22:50 2026 GMT
Not After : Jan 30 05:22:50 2026 GMT
Subject: CN=697305ab-da10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c7:c8:05:6d:79:6d:04:bd:7c:47:16:2a:b9:
c5:fa:82:a0:9c:e6:45:d1:4c:02:2f:9e:5a:4c:b0:
be:02:c6:f7:e4:3d:57:0c:c5:4a:13:ff:89:82:94:
e7:5f:3b:b4:ad:a4:e0:2f:14:cf:f4:d7:42:6f:49:
f1:d0:77:4a:a3:a2:42:30:60:c2:ec:17:0c:7d:f1:
c5:ec:67:52:0a:ad:9d:d3:b1:b2:21:c4:be:99:ec:
b0:5f:7c:6d:01:6f:f1:8e:bc:e0:87:a1:15:78:99:
a8:a7:71:06:65:7f:2a:44:a1:4c:6f:39:32:11:73:
c2:58:24:6c:c7:24:c6:43:8d:1e:07:02:a6:a3:cc:
cb:61:cb:70:d6:c2:24:80:cd:67:4f:51:a7:8d:0b:
c6:7a:2b:89:4d:f0:b5:94:c3:86:f1:a1:70:47:1d:
21:bd:9f:64:f4:8d:a5:40:5c:d1:e4:db:02:ee:db:
7c:5f:e7:c5:3b:5e:8d:3d:79:58:34:df:dc:5b:90:
99:69:1f:d9:f4:66:34:ba:ff:32:ec:d4:46:19:a4:
1a:d9:4a:85:81:78:17:aa:3b:f1:c0:cf:5e:ca:ca:
c1:a2:2f:8b:65:ed:80:cd:51:79:55:23:4c:7e:61:
a1:10:13:ab:a5:7b:61:72:57:14:8e:b3:c5:ec:60:
f6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AA:68:8E:E2:A0:E2:5E:BC:B0:15:11:C7:DC:8D:3F:C3:99:FE:B5
X509v3 Authority Key Identifier:
keyid:CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:40:41:b9:d0:17:73:12:ad:95:b4:5a:97:b5:1e:8b:c0:cd:
65:26:84:9c:33:dc:6b:a5:f9:37:ad:06:82:b1:cf:37:23:56:
0d:09:16:ff:ac:92:03:34:bf:fc:14:de:2d:8a:a6:63:2d:c8:
1b:ce:46:41:13:bf:5d:be:fe:44:51:2f:9a:ff:84:f3:dd:2c:
8d:52:07:5b:c9:d5:ca:44:36:43:fd:ec:73:ee:3c:b2:57:ae:
ec:ff:29:33:58:b9:53:b8:a1:53:ba:cd:74:3b:6d:9f:9e:92:
a5:0e:d5:79:09:3d:6c:7a:8f:f8:ae:49:45:c8:61:b4:25:0a:
79:fa:7c:41:92:53:27:ac:3f:54:f3:d2:11:89:27:ec:32:25:
77:cd:8e:a5:0c:d2:3a:82:8e:ea:c8:87:48:09:fc:b6:d1:43:
54:4a:4b:84:75:d7:82:92:94:63:ef:4e:88:fd:79:7a:4d:d9:
3a:8e:64:60:32:cc:50:a7:e2:f5:04:70:ff:97:57:34:0a:7f:
e5:89:9d:29:ba:ce:d3:ab:59:90:e2:30:9f:5c:f8:fd:51:0b:
18:0e:fb:3a:96:c4:84:2b:65:8b:bc:bc:6e:e9:47:8b:d6:e5:
f5:0e:73:10:4e:01:9b:78:38:07:9f:62:7f:d3:25:53:84:c2:
98:31:bd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:03:46 2026 by rpki-client