This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
File: ShevZqBI_IHa6FRffjXZ2qvUAnE.mft (raw, json)
Hash identifier: JGTLr5B0qkb9Ehfr9EPw2N9w1mRh3euFfxdm7eOT/9c=
Subject key identifier: 81:22:F1:32:74:65:AB:D2:33:71:97:E1:FF:5B:CF:30:1A:DE:F8:6A
Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Certificate serial: 12A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
Manifest number: 1273
Signing time: Tue 20 Jan 2026 16:50:23 +0000
Manifest this update: Tue 20 Jan 2026 16:50:22 +0000
Manifest next update: Tue 27 Jan 2026 16:50:22 +0000
Files and hashes: 1: ShevZqBI_IHa6FRffjXZ2qvUAnE.crl (hash: tPBLmlUXb/NgeOuz1BO6dlxLP92x2BNKaFtr9/gHxQQ=)
2: 2DDAF496ABD811F08750DA6CC4F9AE02.roa (hash: yqFNpSSmaxdNadip8sVOPzWdAXABErfvh2vCh2L72xg=)
3: 273538D8CF7A11ECB4E21125C4F9AE02.roa (hash: mZ42GzLjePORGPsx4cUiGS3yWSydLNxKAMaA/1jB8jc=)
4: 6470410AABD811F08E1F646DC4F9AE02.roa (hash: dPDIVkMTdtOEZEGNrrSKg00cxdj3q2OK74zNJlVoHRk=)
5: C37CCA126FE611EA9D9F5E67C4F9AE02.roa (hash: 7vUaCwhIHYmymYhzXLTd2mT71lJe+Jcy16L9hwRgmBQ=)
6: C16DCDDAB3B511EA8BFADC14C4F9AE02.roa (hash: h9ciRWLJSdS0atFvu++kaB1ITj06IUzdCtx5wytomjU=)
7: C0655836B3B511EA8BFADC14C4F9AE02.roa (hash: yc5Wpx2pnLB6guboninc18l3eTqDU3/v4bwKPQPqPjM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl
rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 16:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4777 (0x12a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Validity
Not Before: Jan 20 16:50:22 2026 GMT
Not After : Jan 27 16:50:22 2026 GMT
Subject: CN=696fb24f-cc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:79:a4:ce:d0:0a:cc:4f:15:0d:f4:98:cd:
b2:0e:2f:ed:9b:fc:3a:3e:ad:fb:51:74:e6:dd:3c:
6b:ba:99:db:74:d6:97:88:06:5a:de:b3:d4:6b:1f:
a1:9f:bf:45:d8:d8:f7:8c:6d:ec:e6:6f:ca:53:ff:
cc:7a:84:8f:23:b6:1c:bd:0c:16:32:5a:89:a1:72:
78:64:ab:ea:24:7d:10:e7:94:50:a0:d5:1a:1c:ca:
e0:f2:cb:66:7e:84:6d:cd:e7:af:12:b6:7e:77:9f:
0c:82:fa:1c:7b:ed:16:11:23:11:3f:6a:e3:7d:13:
55:66:ec:71:7d:af:45:70:1e:4f:84:55:ac:ab:06:
10:55:ba:f4:28:1e:e8:57:a6:43:1d:9e:c2:fc:1e:
fa:63:bc:c4:83:0d:53:10:c3:01:40:3c:5f:c9:b7:
57:80:f7:99:f7:25:e9:a5:87:bd:59:0f:d8:85:7a:
a6:ff:1d:48:30:1f:55:f3:84:d7:ee:c5:ea:ce:e4:
ca:e5:49:67:60:19:92:7f:77:9f:37:74:a9:36:bf:
b3:fd:ed:33:59:3b:49:e4:35:f8:34:fe:da:14:2c:
6d:0c:7f:3e:e7:69:8f:3a:56:57:3e:c4:09:e3:9b:
41:75:77:a1:92:5a:9d:bf:94:72:e4:4a:31:a0:5a:
b1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:22:F1:32:74:65:AB:D2:33:71:97:E1:FF:5B:CF:30:1A:DE:F8:6A
X509v3 Authority Key Identifier:
keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:36:76:8d:cd:53:c7:fe:90:9a:75:31:0e:c5:17:c2:08:1a:
da:2d:3c:18:50:a0:f9:e8:60:2c:91:b3:15:e4:f8:3e:5a:6d:
19:11:12:c0:6c:ee:01:4b:8a:9a:2a:ef:dd:cc:f9:8b:74:83:
82:1e:90:43:0b:f9:47:9e:7f:8a:85:62:4f:d8:4d:14:e7:18:
20:04:7a:fc:4d:74:16:fb:90:54:db:1e:09:ad:8b:60:fc:0b:
02:e9:08:ab:48:17:0e:72:3e:bc:ed:1d:a7:d9:f0:23:29:d4:
d2:4c:79:1e:64:3a:af:a2:f6:10:29:66:0d:a2:2b:df:ce:aa:
0c:91:29:ef:1e:ee:a9:d0:7c:c2:20:dd:e2:37:93:3f:72:22:
98:06:1e:1d:21:a1:be:c1:65:bd:d3:cd:ec:fa:0e:92:9c:ac:
a5:44:23:d8:d2:9b:7b:ed:aa:2f:40:fa:75:3b:e6:23:09:d7:
ac:e1:08:b4:ea:cf:6e:4c:ed:87:8f:05:cd:ac:08:62:c4:0b:
42:63:54:8e:40:a6:da:a8:96:0c:6d:58:1f:fe:87:19:5e:17:
92:66:bb:d9:e7:00:30:1f:13:c6:6a:c4:df:a9:07:6c:d3:ea:
b6:1a:1d:db:2b:a7:21:c5:2e:63:b8:9b:70:ba:6a:16:af:6c:
5c:0b:ac:1f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjZFNzMxMTAvBgNVBAUTKDRBMTdBRjY2QTA0OEZDODFEQUU4NTQ1RjdFMzVEOURB
QUJENDAyNzEwHhcNMjYwMTIwMTY1MDIyWhcNMjYwMTI3MTY1MDIyWjAYMRYwFAYD
VQQDDA02OTZmYjI0Zi1jYzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs855pM7QCsxPFQ30mM2yDi/tm/w6Pq37UXTm3TxrupnbdNaXiAZa3rPUax+h
n79F2Nj3jG3s5m/KU//MeoSPI7YcvQwWMlqJoXJ4ZKvqJH0Q55RQoNUaHMrg8stm
foRtzeevErZ+d58Mgvoce+0WESMRP2rjfRNVZuxxfa9FcB5PhFWsqwYQVbr0KB7o
V6ZDHZ7C/B76Y7zEgw1TEMMBQDxfybdXgPeZ9yXppYe9WQ/YhXqm/x1IMB9V84TX
7sXqzuTK5UlnYBmSf3efN3SpNr+z/e0zWTtJ5DX4NP7aFCxtDH8+52mPOlZXPsQJ
45tBdXehklqdv5Ry5EoxoFqxowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEi8TJ0
ZavSM3GX4f9bzzAa3vhqMB8GA1UdIwQYMBaAFEoXr2agSPyB2uhUX3412dqr1AJx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkU3My9GNDFENDBGMkVB
MDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9JSGE2RlJmZmpYWjJxdlVB
bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NoZXZacUJJX0lIYTZGUmZmalhaMnF2VUFuRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NkU3My9GNDFENDBGMkVBMDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9J
SGE2RlJmZmpYWjJxdlVBbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB9NnaNzVPH/pCadTEOxRfCCBraLTwYUKD56GAskbMV5Pg+Wm0ZERLA
bO4BS4qaKu/dzPmLdIOCHpBDC/lHnn+KhWJP2E0U5xggBHr8TXQW+5BU2x4JrYtg
/AsC6QirSBcOcj687R2n2fAjKdTSTHkeZDqvovYQKWYNoivfzqoMkSnvHu6p0HzC
IN3iN5M/ciKYBh4dIaG+wWW9083s+g6SnKylRCPY0pt77aovQPp1O+YjCdes4Qi0
6s9uTO2HjwXNrAhixAtCY1SOQKbaqJYMbVgf/ocZXheSZrvZ5wAwHxPGasTfqQds
0+q2Gh3bK6chxS5juJtwumoWr2xcC6wf
-----END CERTIFICATE-----
Generated at Wed Jan 21 22:43:55 2026 by rpki-client