This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
File: zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json)
Hash identifier: wiSe8hV48XLWjvDXtfDzIQp7iCaWFObciUhmcXNyEeo=
Subject key identifier: A3:CE:00:06:6E:1F:A5:46:AA:39:1C:1D:70:DE:3E:D1:91:A1:21:05
Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Certificate serial: 0796
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
Manifest number: 0736
Signing time: Sat 24 Jan 2026 21:28:55 +0000
Manifest this update: Sat 24 Jan 2026 21:28:55 +0000
Manifest next update: Sat 31 Jan 2026 21:28:55 +0000
Files and hashes: 1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: Us6OXLTgSvs9D38RTWduhJ9dyZPeI5Dkuv0uVNXU5ek=)
2: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: DH3qFOr/5LmLeaQZe1X+tvXblKWAvhplRZPm0TOvN8o=)
3: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: H+ty53+pDZduRc7DeeLzL7EepPnFDvog1ZjC+6CcwqA=)
4: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: mbvfRY70V57uQreQCGpE8MBwbcSS+3BOrVbu6LPmK2Y=)
5: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: 5AqFvgOp5LjdGxzS5FdfdkmklTxf6ffgUJ9yB6JJGsQ=)
6: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: zBHdHSF63R8mEEZ+rYJDH444w3w2BlTQcVaLo7TdbJw=)
7: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: zMwL2o0qIP7MqoUAkIZqBShoqRaxQilvIeI+/tTaDJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl
rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:28:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1942 (0x796)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14
Validity
Not Before: Jan 24 21:28:55 2026 GMT
Not After : Jan 31 21:28:55 2026 GMT
Subject: CN=69753997-4fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fd:cd:dd:d9:22:cd:73:6c:e2:4c:8a:fd:76:
f2:53:36:a4:c9:d1:29:de:58:73:60:cb:17:75:ee:
9d:1c:89:56:fa:29:94:37:5d:3a:c1:99:d0:ac:0b:
d0:65:1c:01:50:12:3c:e9:51:11:d3:d8:f0:68:36:
34:18:2d:25:4a:44:e1:9f:89:42:63:c7:2e:81:05:
5a:8b:cc:14:d3:b4:43:d1:77:b3:bc:a4:16:01:4b:
2f:90:0c:fb:18:de:1c:d7:57:fc:fe:a9:f1:95:22:
eb:31:96:0c:a3:dd:7c:4c:96:e6:0d:28:37:6f:cf:
89:c0:15:9e:08:82:15:a9:e1:1e:7d:38:72:9c:4c:
0f:bf:0a:9e:10:6a:b5:92:d7:94:82:e7:a4:99:87:
7a:34:14:37:da:a5:55:05:79:21:a8:e9:8d:f6:18:
bb:25:e4:9f:f1:ce:67:c3:7a:00:ee:d5:02:ad:3d:
01:53:86:ca:e0:02:a0:c0:55:d0:18:07:f2:b9:62:
0e:a0:a4:ac:df:08:52:08:c9:86:24:f1:a5:cb:ef:
15:e6:2c:5b:18:08:79:47:b4:24:84:5a:0c:9e:20:
70:80:74:36:30:1f:9a:c0:27:4f:60:58:57:00:89:
c2:a5:51:35:33:7b:ad:e3:27:5b:ea:f6:6d:80:d8:
a1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CE:00:06:6E:1F:A5:46:AA:39:1C:1D:70:DE:3E:D1:91:A1:21:05
X509v3 Authority Key Identifier:
keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:36:12:83:e0:b7:e2:cd:9c:3c:c9:b8:d7:c9:6d:53:12:3d:
81:fd:cc:33:77:c6:73:5a:c9:5f:c6:4a:fb:5c:c5:eb:eb:6d:
13:c3:f6:a3:ca:2a:fb:3a:5a:62:84:00:43:ba:75:ff:39:1c:
14:5b:fd:e5:8d:69:41:37:56:8d:1e:5f:f5:27:fc:8a:ad:2c:
b1:e4:4c:87:eb:06:7c:e0:0d:b6:bc:8c:f3:86:12:af:88:d8:
f0:41:7a:fe:c6:5d:ea:81:c6:e6:f6:24:fb:cb:05:6c:b1:3f:
86:0e:b0:af:1d:5b:5d:c4:ed:df:2e:9d:4a:dc:aa:46:b8:17:
bc:13:15:e9:bc:e8:c9:70:50:98:ef:82:7c:a7:f9:74:91:4e:
b2:9c:10:a3:d6:fa:93:5e:60:85:8f:7b:85:ad:e6:fb:f5:9b:
9d:56:27:8b:82:49:c2:ce:d5:31:b8:e0:df:d7:75:6a:e0:42:
49:1c:ab:fe:a7:c6:6f:d4:78:90:54:69:69:d3:58:7b:20:e6:
44:8a:53:25:0c:91:e8:fb:b0:3d:33:09:1c:de:4e:07:8c:0e:
31:97:e6:49:f0:c7:af:90:fd:1f:c5:98:b1:c5:64:76:51:10:
ba:0d:10:a1:8d:a7:5b:97:05:77:04:ce:f8:e7:31:43:78:1c:
d7:28:07:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:49:49 2026 by rpki-client