This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
File: z3BtgUfXeSB9ma-a053V8t_lneQ.mft (raw, json)
Hash identifier: uyRA+rq1Zo3csakEhV1NPt0BnWpfg/G5C3uwICARpvA=
Subject key identifier: E7:F7:82:EE:EA:5F:40:21:EB:6E:89:59:47:56:28:50:81:8B:B6:E3
Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Certificate serial: 352A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
Manifest number: 350B
Signing time: Fri 16 Jan 2026 14:27:08 +0000
Manifest this update: Fri 16 Jan 2026 14:27:07 +0000
Manifest next update: Fri 23 Jan 2026 14:27:07 +0000
Files and hashes: 1: z3BtgUfXeSB9ma-a053V8t_lneQ.crl (hash: qcAGKc58VhJr+RPebdiiJWzhOgotKyjgLPL/KgrMLnE=)
2: 56EE653C493411EF859C1D49C4F9AE02.roa (hash: plCjgN7YWhsYH+MwAwVINYh2QSCUYoeRR3x33+0+qnE=)
3: 55D339CA493411EF859C1D49C4F9AE02.roa (hash: jze2dZZOQnAGOKOQ6Rz+mOGJDCU7Q1dag2aXHfDHrUY=)
4: F550BA02768A11F081B6114EC4F9AE02.roa (hash: +Emh97G4a6MC22cwrisLR6hKm25TYhC5b4mYNP17m7E=)
5: F647E58E768A11F081B6114EC4F9AE02.roa (hash: 4tlTWNBTFbCbarJCMOHXFwX1zgwBjmDcHval7E7ErMY=)
6: 5547B77E493411EF859C1D49C4F9AE02.roa (hash: coEzJmQszrLxu4ob4mQCm0s5FabKwMGZ0/yHnUumh2Q=)
7: 568554A2493411EF859C1D49C4F9AE02.roa (hash: Y+ojf+2jX3eowe65KYol38ex1Bpsq2OZibivyd0HsaA=)
8: F5BDCB88768A11F081B6114EC4F9AE02.roa (hash: JZDrvt3y2uOvt6jcah8n1eAk+/ZZD32CSv6lmYScC9c=)
9: 5761FF06493411EF859C1D49C4F9AE02.roa (hash: nP3RcVP/gbGg6rx+o8wZqZToMdd4Sr+IoSCjwNOdYfA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 14:27:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13610 (0x352a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4
Validity
Not Before: Jan 16 14:27:07 2026 GMT
Not After : Jan 23 14:27:07 2026 GMT
Subject: CN=696a4abc-c6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:e1:2c:46:a9:9f:90:9a:19:53:32:5a:b8:
66:59:ae:e5:87:20:f7:0d:ec:18:e5:15:51:6c:bd:
d9:8c:08:04:f7:ec:d8:36:42:12:0a:8a:88:93:7f:
11:ca:7e:3b:e7:13:2d:ab:3d:a6:e4:b9:60:ed:25:
a1:46:8a:4d:1d:30:0e:79:29:9a:06:d3:67:61:17:
44:4a:8d:13:52:1a:bd:b3:04:46:7c:4e:2d:f4:e4:
b3:75:de:b9:71:8a:63:d0:4b:57:59:59:a5:24:5a:
04:dc:ee:9b:3a:5e:ec:a8:bc:71:aa:77:d8:c5:b6:
6f:26:ee:ab:ec:cc:d6:af:44:58:96:d9:2e:3c:10:
42:f6:2f:58:97:ca:5f:09:04:5e:c9:03:a9:23:31:
94:5a:77:b6:cb:49:55:71:77:48:a1:39:76:09:27:
ef:f0:ad:06:58:87:c2:9b:d9:e4:d9:32:8c:4a:b2:
0d:be:ec:66:62:12:58:b5:6c:4e:54:8e:d1:31:b7:
a3:e3:84:3a:47:4d:ab:8a:89:e4:cf:f5:eb:e0:c4:
87:ae:b7:02:c3:2d:cc:7c:b6:0c:a3:01:9e:c2:d7:
c9:b1:f3:71:44:76:d0:18:96:b5:30:8b:86:72:17:
99:00:79:6d:fe:45:fe:d9:5b:7f:ec:8b:9a:01:b1:
64:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F7:82:EE:EA:5F:40:21:EB:6E:89:59:47:56:28:50:81:8B:B6:E3
X509v3 Authority Key Identifier:
keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:9a:d7:52:15:91:d0:a7:5c:b2:57:5c:67:98:86:47:e6:6f:
ed:85:c3:cb:99:80:1c:78:a5:60:c3:51:d0:92:e9:84:3e:fe:
1a:98:46:f0:f5:68:f8:90:29:9d:0d:db:3d:57:3f:bf:6c:2f:
5a:c5:05:0d:a1:2b:d7:31:3d:ee:ed:c7:32:9e:a8:c1:80:4f:
e8:72:10:6f:ed:af:ee:c7:33:89:3c:b6:02:4b:3e:9f:37:79:
4c:51:88:b3:6e:23:9e:00:8b:d9:23:dc:15:d4:28:9b:16:44:
00:5a:97:e0:01:ea:c7:b0:dc:c9:2f:0e:78:e5:95:c6:fb:99:
ea:5d:e0:82:77:b0:0b:83:fc:07:fa:74:b0:46:a9:25:f3:6f:
56:26:41:0f:a3:f5:4a:7c:f5:ae:07:af:05:d5:44:a5:12:a4:
8e:9f:00:8c:9a:e4:a7:d6:bf:41:53:37:06:30:63:54:c6:1a:
47:a0:5d:8b:32:f1:51:a6:3a:38:aa:4f:f5:37:32:65:46:b8:
8c:3e:7d:3f:18:37:be:0b:39:39:3d:c9:45:55:f1:23:78:b3:
2a:0d:06:2d:38:a5:ae:e5:4b:5f:4d:83:ce:21:38:e4:55:75:
65:59:50:3b:cb:cb:6b:16:6a:7c:bb:97:d0:fe:d9:5b:f9:c2:
17:07:06:52
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy
REZFNTlERTQwHhcNMjYwMTE2MTQyNzA3WhcNMjYwMTIzMTQyNzA3WjAYMRYwFAYD
VQQDDA02OTZhNGFiYy1jNmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsM3hLEapn5CaGVMyWrhmWa7lhyD3DewY5RVRbL3ZjAgE9+zYNkISCoqIk38R
yn475xMtqz2m5Llg7SWhRopNHTAOeSmaBtNnYRdESo0TUhq9swRGfE4t9OSzdd65
cYpj0EtXWVmlJFoE3O6bOl7sqLxxqnfYxbZvJu6r7MzWr0RYltkuPBBC9i9Yl8pf
CQReyQOpIzGUWne2y0lVcXdIoTl2CSfv8K0GWIfCm9nk2TKMSrINvuxmYhJYtWxO
VI7RMbej44Q6R02rionkz/Xr4MSHrrcCwy3MfLYMowGewtfJsfNxRHbQGJa1MIuG
cheZAHlt/kX+2Vt/7IuaAbFkkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOf3gu7q
X0Ah626JWUdWKFCBi7bjMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE
ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu
ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTM1MC8zOTEzQkNBMDFEODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVT
QjltYS1hMDUzVjh0X2xuZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCvmtdSFZHQp1yyV1xnmIZH5m/thcPLmYAceKVgw1HQkumEPv4amEbw
9Wj4kCmdDds9Vz+/bC9axQUNoSvXMT3u7ccynqjBgE/ochBv7a/uxzOJPLYCSz6f
N3lMUYizbiOeAIvZI9wV1CibFkQAWpfgAerHsNzJLw545ZXG+5nqXeCCd7ALg/wH
+nSwRqkl829WJkEPo/VKfPWuB68F1USlEqSOnwCMmuSn1r9BUzcGMGNUxhpHoF2L
MvFRpjo4qk/1NzJlRriMPn0/GDe+Czk5PclFVfEjeLMqDQYtOKWu5UtfTYPOITjk
VXVlWVA7y8trFmp8u5fQ/tlb+cIXBwZS
-----END CERTIFICATE-----
Generated at Sat Jan 17 16:49:08 2026 by rpki-client