This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
File: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft (raw, json)
Hash identifier: gu3cPs8tmvRbQgF69dRhLfy+RgEoOc0PK9ofM7JLWrg=
Subject key identifier: FC:BF:62:31:70:33:7B:37:A3:4A:A7:0E:FC:DC:9C:10:5B:74:A0:3B
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Certificate issuer: /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial: 0210
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
Manifest number: 01FD
Signing time: Wed 21 Jan 2026 01:49:34 +0000
Manifest this update: Wed 21 Jan 2026 01:49:34 +0000
Manifest next update: Wed 28 Jan 2026 01:49:34 +0000
Files and hashes: 1: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl (hash: rycRqWl1KswMAlp6A5+hWvCCg6rh2uuC58XeCdbyE14=)
2: 9EF724BE2A4911EE81BCF50FC4F9AE02.roa (hash: p1hx0JAvoUZNCyNLxkGOZobDFPFcvMCBUo+ATzPH1eI=)
3: C2C37E56153A11EF9E378A14C4F9AE02.roa (hash: yjaZ99oQRgWTeZ7xT1aV5GOpJg30nNhsZqbegZgAfi8=)
4: 309A0AEC073D11EE94A9410CC4F9AE02.roa (hash: +M2JBKtW+roKuZ/jpD/VQtCPQT7ODj2M3CQ12tFkNNA=)
5: 282CA82C023F11EEB716134FC4F9AE02.roa (hash: EZKiMh/sF6QW/YuQ9Jj6CurdVfECSg1QmQNC9QvCJbw=)
6: A90DA1C0C71611EE9465BF5EC4F9AE02.roa (hash: z2r7wPyO35kHvr0Idk1WJbUtXEqg34/eESnybLJ0qdg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 01:49:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 528 (0x210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911710E, serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Validity
Not Before: Jan 21 01:49:34 2026 GMT
Not After : Jan 28 01:49:34 2026 GMT
Subject: CN=697030ae-6fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5a:5e:06:55:7b:ed:07:97:54:4b:53:a6:a3:
7b:de:92:f6:cc:0c:5f:65:4c:b3:ca:ab:27:ff:04:
72:2e:74:33:60:44:25:76:5c:7d:ef:b8:db:8b:58:
77:a9:c2:30:f6:4d:af:20:f0:72:92:b9:c1:b2:b5:
4a:68:11:1c:a3:27:52:45:62:89:e0:69:8e:d1:6f:
c3:a8:aa:bf:9e:2a:7f:55:66:6c:d2:59:5e:da:a3:
b6:c0:05:23:c0:4a:70:c8:71:d6:69:3b:b8:3d:ec:
1b:01:c7:ef:76:65:7b:bc:60:10:85:15:44:78:e2:
ce:ae:0b:88:30:77:af:bf:cb:68:7b:ce:08:ca:12:
5e:ae:d6:88:13:ac:61:77:10:51:38:88:43:dc:17:
67:3b:a8:42:90:02:0b:9c:f8:9a:3c:77:a3:29:9a:
f2:7e:0b:8b:9c:7b:b7:6c:2b:49:6a:6a:db:86:7e:
d3:16:9b:1a:30:42:9a:fd:b8:f1:d5:fa:5c:e7:54:
dd:63:db:57:34:b6:33:f0:9b:76:6b:1b:7b:be:f7:
cc:8f:c1:c7:9a:2f:73:fe:e2:d1:c4:b3:5c:e9:b4:
0b:98:29:6a:26:24:be:be:8a:74:5d:7c:4c:2f:d7:
90:1e:96:3d:85:e2:a3:d1:f3:5e:1c:a2:a4:16:f8:
8b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BF:62:31:70:33:7B:37:A3:4A:A7:0E:FC:DC:9C:10:5B:74:A0:3B
X509v3 Authority Key Identifier:
keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:a9:6c:d4:f5:ab:05:65:20:87:5f:27:d8:9d:54:72:92:9b:
c3:cf:6b:71:ff:84:ef:71:b7:85:8a:61:69:ff:7a:56:ea:3c:
f2:16:6a:9c:e2:bc:80:ef:22:23:eb:4b:a9:83:06:43:6a:cc:
16:08:cf:a0:ba:eb:99:93:05:52:2f:05:c1:a6:f5:2c:a0:a1:
b1:d3:b8:e4:17:b2:1c:a3:e1:ea:f1:29:fc:db:13:68:02:26:
dc:6f:14:5a:15:89:8f:71:a8:97:54:8b:6f:b3:6a:0c:af:a3:
f5:97:4d:76:d2:53:97:3d:5a:97:e5:95:a1:33:3f:1c:b8:b7:
be:da:63:76:7f:b0:41:08:6c:19:8d:67:44:01:18:4e:f0:6e:
59:f3:62:5c:bc:1a:48:8d:bc:41:97:54:3c:5a:2d:60:25:a3:
c1:f2:b8:b9:dd:64:5f:eb:39:45:98:47:d5:1b:26:e4:f0:84:
e3:a5:38:48:17:98:07:5e:ca:84:30:e8:a4:74:c0:dd:68:e9:
57:dd:16:2f:06:83:28:f0:92:1a:bd:28:2f:0a:86:46:a1:13:
f3:98:12:59:7f:d1:51:6b:b2:30:a7:71:c1:2d:ca:c9:73:a3:
a9:72:f1:4e:00:da:32:66:8d:3e:f3:3b:a7:c1:b0:75:b2:21:
b2:93:70:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 04:55:54 2026 by rpki-client