This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
File: Zye49DPvL-CAhCxu6KbMPcJEYm8.mft (raw, json)
Hash identifier: gMCPOIBsl73zIpuJBMShr9fNyETYFKwShY2avnxEMu0=
Subject key identifier: 82:90:3B:64:CF:13:3D:97:D5:AE:FA:E4:25:C8:89:6A:53:29:27:A3
Authority key identifier: 67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F
Certificate issuer: /CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F
Certificate serial: 0CE6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
Manifest number: 0CD6
Signing time: Sat 31 Jan 2026 17:50:30 +0000
Manifest this update: Sat 31 Jan 2026 17:50:30 +0000
Manifest next update: Sat 07 Feb 2026 17:50:30 +0000
Files and hashes: 1: Zye49DPvL-CAhCxu6KbMPcJEYm8.crl (hash: ulTPAFCGTFcJKWtKlomsn83l3dGSX8YhrS22UbN7Q+Y=)
2: E14507F8011411EAAB0EF153C4F9AE02.roa (hash: 9FmnWb9pui6Pv8KaY3QdF38c9SeSZeT0GfsxD7+8mfg=)
3: E0BC0B4C011411EAAB0EF153C4F9AE02.roa (hash: bcKs3JCB0Pnfj/bjvQqBTGxWS9Rxr52rn9mWhFguD3k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl
rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Feb 2026 17:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3302 (0xce6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4023, serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F
Validity
Not Before: Jan 31 17:50:30 2026 GMT
Not After : Feb 7 17:50:30 2026 GMT
Subject: CN=697e40e6-3cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:b0:ca:f2:d1:e5:5a:f0:32:60:4c:30:44:
a9:ad:67:47:1b:9c:bc:21:e5:dd:52:4b:61:7b:2a:
47:9a:d2:5e:a4:17:1e:0e:ab:03:6d:e6:81:f4:e6:
df:f3:c4:5c:ab:ab:e2:21:ae:7d:b3:87:96:b4:79:
53:6b:cd:ca:84:ce:ca:d0:e3:90:68:5d:57:47:c0:
6e:6f:f3:74:3f:4d:7c:3c:2a:2d:26:b3:cb:15:16:
01:3d:75:14:e3:c8:ac:cd:2d:b8:af:45:62:db:53:
65:2a:67:19:da:3a:bd:fd:96:d1:3a:f7:19:22:33:
bd:e7:97:62:85:e8:75:65:0d:00:2d:bc:a1:4a:b5:
56:41:0f:f2:00:10:bb:67:e9:b4:d5:a2:0e:fe:51:
1c:52:58:01:7e:12:c7:b1:eb:1e:c2:dc:9c:2d:c3:
a3:4b:11:d8:11:62:18:c3:5a:f8:fa:17:5b:97:c0:
bf:ad:de:2a:28:3e:13:5d:11:07:30:88:7a:0b:5d:
d7:98:2e:5a:4a:77:dc:7d:ee:81:59:d4:84:d2:79:
77:48:ca:ba:7d:74:57:b7:a2:e1:45:81:8c:55:5c:
28:df:f6:80:7c:72:15:8e:26:1c:07:96:34:4b:2f:
7a:63:43:c0:3f:1c:3e:c6:2b:87:dd:2d:70:fd:9a:
d7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:90:3B:64:CF:13:3D:97:D5:AE:FA:E4:25:C8:89:6A:53:29:27:A3
X509v3 Authority Key Identifier:
keyid:67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:1a:bc:b2:80:2b:8a:ce:b6:e0:40:cd:e0:64:af:a1:37:d5:
99:09:f5:58:ec:8e:4c:bb:c3:c4:86:93:0d:d2:78:3f:dc:bf:
51:2a:4c:b0:1a:69:2c:f0:8f:ab:c0:8b:8a:f8:b4:a5:e2:28:
bc:78:67:49:7b:f5:a6:cb:a4:a5:83:0a:26:65:85:41:f9:08:
d9:f6:c9:4a:61:db:1c:02:2d:5f:d0:16:5d:d1:77:3f:c9:1a:
8d:0d:9b:6e:e6:29:d6:a3:38:4b:be:a8:b4:02:10:16:f6:8d:
48:52:07:47:1f:27:80:ad:0f:bf:a8:20:80:50:16:d9:2a:7d:
29:55:2b:20:98:48:d9:a8:b4:8c:72:27:03:97:87:46:10:1a:
5b:de:a7:e7:6b:5e:b1:0b:41:68:f5:04:29:6d:c9:66:97:e9:
1f:9b:c7:fd:2e:74:40:1d:52:f1:16:e5:72:bf:fa:c4:e4:74:
d4:0d:a2:a7:78:fc:2a:a4:52:a8:fd:9d:76:00:5d:c0:23:7d:
47:ea:4a:88:3b:df:1c:fd:e6:13:fe:d2:81:f1:77:70:03:9b:
d5:a2:15:b3:06:71:4e:3a:59:3b:ea:90:a8:56:bf:f5:6a:de:
67:f9:af:1d:2c:2c:9e:65:2d:84:9a:c6:96:32:5d:dd:8c:e7:
be:00:65:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:23:41 2026 by rpki-client