This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
File: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json)
Hash identifier: V1bd2PLCS128oBt69qkVOXCotUCTWea743GGafMd8Bw=
Subject key identifier: D8:70:ED:ED:DA:FA:C6:A5:F0:99:76:DD:BF:70:3A:DA:44:24:DF:D5
Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29
Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529
Certificate serial: F8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
Manifest number: F4
Signing time: Tue 27 Jan 2026 04:31:26 +0000
Manifest this update: Tue 27 Jan 2026 04:31:25 +0000
Manifest next update: Tue 03 Feb 2026 04:31:25 +0000
Files and hashes: 1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: Eao/FJghug7J16vF/bgFRGVq69GMcw304owppVUTl+4=)
2: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: 7mz7uGJXQ4CqBMTrgZFYe2WUHKGmXyVago/PI7EUVO8=)
3: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: OPmEmqIaKed2x77tjIp4ZdpM1ffHxBwU3VDB8mthG20=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl
rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 04:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529
Validity
Not Before: Jan 27 04:31:25 2026 GMT
Not After : Feb 3 04:31:25 2026 GMT
Subject: CN=69783f9d-1588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:2a:3a:8a:b9:c8:42:86:cc:e1:d6:01:7e:
a5:7f:81:3e:cf:29:0c:e8:2a:63:82:e3:3b:55:d7:
a1:84:8f:f4:f4:9f:d5:67:68:19:c3:27:76:34:8b:
53:dc:56:d7:16:cb:07:f0:8e:87:cf:ac:3b:d4:33:
2c:33:c0:c9:43:ff:c6:07:e0:91:20:2e:3c:88:4f:
e3:90:a9:c6:a5:ea:d6:0b:c7:05:ba:7c:41:67:34:
80:3d:55:f9:d3:45:be:f6:28:ad:ae:a2:d6:3f:34:
f6:52:fe:7c:7a:2e:c7:16:c9:18:09:ee:e2:07:a6:
99:b4:fc:0e:48:92:f1:06:f2:c5:f0:66:47:15:e1:
f6:12:b4:ad:6c:55:26:7e:a0:68:09:b8:ac:cd:6f:
b9:1b:95:c7:dd:29:94:2e:26:7b:a6:1a:5a:75:34:
78:c7:53:14:e7:e2:6f:59:0d:7a:e4:a2:31:75:b3:
9e:e1:d2:0a:a5:9b:5e:2b:75:e4:6c:07:1a:dc:e5:
66:f7:15:a6:3e:6e:00:60:fc:04:b0:5f:4e:c7:fe:
d2:9d:d7:f5:72:aa:b3:00:09:d7:3a:d1:15:c2:9b:
ea:37:ba:5e:06:f9:c7:d7:31:70:fd:dd:c9:ae:5e:
5f:24:47:95:f6:b7:3d:4a:67:d7:c5:cd:f7:7a:d9:
61:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:70:ED:ED:DA:FA:C6:A5:F0:99:76:DD:BF:70:3A:DA:44:24:DF:D5
X509v3 Authority Key Identifier:
keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:5e:0e:44:3f:37:58:57:d4:f0:38:60:e1:cb:01:a0:5f:49:
9c:1d:c6:9d:7e:94:80:fe:95:4f:f2:23:da:ae:b0:56:69:fa:
b3:eb:26:3f:c1:7b:7c:8c:9c:ab:eb:25:ad:25:01:27:38:a1:
40:3c:2a:66:69:a9:fc:91:e8:34:a3:41:1b:0b:f7:2c:cf:ea:
98:18:d0:00:58:f6:c2:15:41:64:71:14:3c:65:81:54:11:19:
2e:ed:30:8c:69:0a:03:18:4b:6a:30:d0:97:65:a0:32:85:7c:
94:ee:fc:c1:71:e1:fd:38:a0:5a:3e:fc:9a:85:0e:e7:99:78:
c9:8d:fb:4a:44:92:ca:bb:57:b7:68:e4:51:54:67:05:7b:52:
79:04:57:47:24:e4:d3:ae:9d:5d:d6:a9:29:1f:df:e1:c5:f3:
52:78:ce:d9:98:9d:45:43:bb:a4:bc:a6:41:6f:34:02:59:f8:
26:cd:a4:f8:5c:0e:7c:49:bd:0c:f7:b4:7f:4f:f3:d2:44:3a:
29:ec:92:6b:a4:17:87:49:15:de:b5:b8:5c:03:48:3d:c4:67:
1a:e7:2e:9a:df:67:7c:eb:f8:3f:0b:43:38:6c:71:ed:83:00:
9c:95:38:d7:97:e2:ae:fd:d5:49:59:61:a0:ae:d8:67:8e:08:
f1:b3:6d:a6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0NBRjExMTAvBgNVBAUTKDY2OTQxREE3RUFGMzBFOTM0NEUwMzIxRjBCNzU0RTdB
RUZGQzM1MjkwHhcNMjYwMTI3MDQzMTI1WhcNMjYwMjAzMDQzMTI1WjAYMRYwFAYD
VQQDDA02OTc4M2Y5ZC0xNTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAppkqOoq5yEKGzOHWAX6lf4E+zykM6CpjguM7VdehhI/09J/VZ2gZwyd2NItT
3FbXFssH8I6Hz6w71DMsM8DJQ//GB+CRIC48iE/jkKnGperWC8cFunxBZzSAPVX5
00W+9iitrqLWPzT2Uv58ei7HFskYCe7iB6aZtPwOSJLxBvLF8GZHFeH2ErStbFUm
fqBoCbiszW+5G5XH3SmULiZ7phpadTR4x1MU5+JvWQ165KIxdbOe4dIKpZteK3Xk
bAca3OVm9xWmPm4AYPwEsF9Ox/7Sndf1cqqzAAnXOtEVwpvqN7peBvnH1zFw/d3J
rl5fJEeV9rc9SmfXxc33etlhVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhw7e3a
+sal8Jl23b9wOtpEJN/VMB8GA1UdIwQYMBaAFGaUHafq8w6TROAyHwt1Tnrv/DUp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0FGMS8wMDMxM0MzMjhB
QUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRwTkU0RElmQzNWT2V1XzhO
U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1pwUWRwLXJ6RHBORTRESWZDM1ZPZXVfOE5Tay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Q0FGMS8wMDMxM0MzMjhBQUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRw
TkU0RElmQzNWT2V1XzhOU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBWXg5EPzdYV9TwOGDhywGgX0mcHcadfpSA/pVP8iParrBWafqz6yY/
wXt8jJyr6yWtJQEnOKFAPCpmaan8keg0o0EbC/csz+qYGNAAWPbCFUFkcRQ8ZYFU
ERku7TCMaQoDGEtqMNCXZaAyhXyU7vzBceH9OKBaPvyahQ7nmXjJjftKRJLKu1e3
aORRVGcFe1J5BFdHJOTTrp1d1qkpH9/hxfNSeM7ZmJ1FQ7ukvKZBbzQCWfgmzaT4
XA58Sb0M97R/T/PSRDop7JJrpBeHSRXetbhcA0g9xGca5y6a32d86/g/C0M4bHHt
gwCclTjXl+Ku/dVJWWGgrthnjgjxs22m
-----END CERTIFICATE-----
Generated at Wed Jan 28 13:35:05 2026 by rpki-client