This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json)
Hash identifier: bk9UlI46ZdepkNWQt+71R0t8e/BG8QQdIr7JYCXWHx8=
Subject key identifier: 1C:4F:69:6F:34:97:EB:FC:3C:1F:C2:E3:83:8B:28:5B:AF:6B:47:50
Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Certificate serial: 3531
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
Manifest number: 3512
Signing time: Fri 30 Jan 2026 14:28:01 +0000
Manifest this update: Fri 30 Jan 2026 14:28:00 +0000
Manifest next update: Fri 06 Feb 2026 14:28:00 +0000
Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: 43zQiI/neSqlePWDKrg+G0XLzMO7Ud4q7/Mu+bP0+OQ=)
2: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: plCjgN7YWhsYH+MwAwVINYh2QSCUYoeRR3x33+0+qnE=)
3: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: coEzJmQszrLxu4ob4mQCm0s5FabKwMGZ0/yHnUumh2Q=)
4: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: nP3RcVP/gbGg6rx+o8wZqZToMdd4Sr+IoSCjwNOdYfA=)
5: 568554A2493411EF859C1D49C4F9AE02.roa (hash: Y+ojf+2jX3eowe65KYol38ex1Bpsq2OZibivyd0HsaA=)
6: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: JZDrvt3y2uOvt6jcah8n1eAk+/ZZD32CSv6lmYScC9c=)
7: F550BA02768A11F081B6114EC4F9AE02.roa (hash: +Emh97G4a6MC22cwrisLR6hKm25TYhC5b4mYNP17m7E=)
8: F647E58E768A11F081B6114EC4F9AE02.roa (hash: 4tlTWNBTFbCbarJCMOHXFwX1zgwBjmDcHval7E7ErMY=)
9: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: jze2dZZOQnAGOKOQ6Rz+mOGJDCU7Q1dag2aXHfDHrUY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Feb 2026 14:27:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13617 (0x3531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Validity
Not Before: Jan 30 14:28:00 2026 GMT
Not After : Feb 6 14:28:00 2026 GMT
Subject: CN=697cbff1-300c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:59:2f:3f:f5:b2:3a:82:72:b3:f7:26:27:
14:14:3d:5f:15:e4:84:08:3b:b2:0a:31:de:c8:af:
bb:1e:76:ec:21:05:ac:e9:8e:a0:87:03:48:eb:f5:
b6:05:e7:83:73:5c:73:12:51:c4:21:e8:1b:71:08:
62:c7:f2:d4:1c:b4:36:20:ff:c2:29:b8:15:94:d6:
21:3e:ad:a7:fe:05:c4:07:d8:4c:39:66:0e:c4:d8:
e3:6a:e0:53:77:24:91:2c:10:50:c3:7b:ae:df:93:
a5:b6:82:2f:a9:8e:39:a0:7a:80:69:e8:23:90:dc:
e0:3a:2b:42:a7:b8:b2:02:be:5e:0f:71:24:e6:df:
8c:40:7f:f8:ea:09:95:a8:a5:df:60:19:52:59:30:
2a:9d:b6:5c:2a:a9:6a:bc:4d:b7:e8:32:22:fb:db:
53:ba:26:31:71:81:e8:97:a8:62:1b:d6:39:a8:94:
53:fd:c6:e3:43:68:58:07:37:28:a3:a2:95:42:15:
50:be:d0:22:45:a5:39:55:09:0e:8a:8b:01:45:02:
9c:d1:ac:32:93:1e:b7:69:fd:e0:82:ca:6a:94:84:
c6:58:dd:8e:be:cc:ad:bd:5a:c7:e9:bb:c0:f7:26:
02:a2:df:04:ea:a2:75:96:0f:a7:e2:da:a2:e3:f8:
54:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4F:69:6F:34:97:EB:FC:3C:1F:C2:E3:83:8B:28:5B:AF:6B:47:50
X509v3 Authority Key Identifier:
keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:79:bf:72:82:63:16:96:4c:51:5a:66:36:ac:db:c2:57:c1:
ca:5a:66:c9:c8:bf:fc:69:bc:65:a9:42:97:16:6c:d1:de:45:
1b:50:ec:b4:3e:2f:33:c5:b9:e9:8b:da:b4:ca:47:18:b5:1f:
a3:f7:a4:91:dc:ce:e5:4d:ab:e6:d6:82:01:53:12:c1:c5:31:
4d:c9:a1:9f:07:aa:58:24:04:1d:3d:12:a4:74:db:ed:40:ee:
51:20:19:3d:9b:9b:b7:ac:85:89:e9:db:5a:cb:42:9f:b3:77:
ae:b1:f5:be:9a:b3:3f:bd:99:b3:07:56:64:73:3d:df:d6:50:
d6:e0:f8:57:79:fc:26:c8:f3:1d:42:b6:eb:eb:62:3d:e4:3d:
c5:1e:ef:6f:e8:b9:ca:39:67:67:f1:e2:33:d4:f4:7c:1c:24:
a7:de:ed:d9:b1:a8:9e:30:dc:3f:c5:e2:42:5d:5d:6e:e4:93:
6e:1f:61:8f:9b:ab:a4:ca:74:f4:62:a0:83:70:09:eb:81:8d:
41:a5:9e:e6:db:e7:15:27:5e:3f:e8:49:9c:26:1e:2e:25:6d:
6e:c7:9c:d3:19:18:01:93:48:1b:38:10:f2:ca:f9:0c:06:6d:
62:a4:f8:5e:6e:76:be:7c:2f:0d:84:86:4d:b9:60:1f:25:da:
06:49:34:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 31 18:19:38 2026 by rpki-client