This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
File: _zNBly3YofaHHt6Gmjod2SUorrY.mft (raw, json)
Hash identifier: Vv5Ww4sSTkIjF3vI2nQeJxIqMR3+9qabDGdiuLJ14aQ=
Subject key identifier: 0E:BE:33:1D:8E:22:78:C0:22:61:5B:A9:AA:30:1E:53:B0:DB:D3:A0
Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
Certificate issuer: /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
Certificate serial: 0DDF
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
Manifest number: 0D3F
Signing time: Sat 10 Jan 2026 16:36:10 +0000
Manifest this update: Sat 10 Jan 2026 16:36:09 +0000
Manifest next update: Sat 17 Jan 2026 16:36:09 +0000
Files and hashes: 1: _zNBly3YofaHHt6Gmjod2SUorrY.crl (hash: 5X3V2Nvc/zyVOWlKCgjTxgdQZ0ltVk5c4sVzGdVj/Ok=)
2: F4A77A06CED911ED9BC69385C4F9AE02.roa (hash: OUewL85nRVoETpSnxouJtXZ3L1bDXbwRe3ztxVw9Gdo=)
3: 3D98B69C977111EFBB74DC15C4F9AE02.roa (hash: EOLGmACKTm1auu9j0c6NA1jcvwkgDjQQGsYCgT+bDMU=)
4: 69FDEAC6645511EFB98C143DC4F9AE02.roa (hash: 2yxdWLH5KV11B5SzTIqQpfLj1mBTBEqIu2hQrTm6PHo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl
rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 16:36:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3551 (0xddf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6
Validity
Not Before: Jan 10 16:36:09 2026 GMT
Not After : Jan 17 16:36:09 2026 GMT
Subject: CN=69627ffa-14c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c0:b9:2f:34:4f:6e:08:0f:d7:21:02:44:3b:
d1:04:63:42:1a:f0:8f:0e:1c:03:79:c1:8f:8d:57:
14:41:c3:cf:5f:83:77:d8:40:7d:b3:ef:a1:71:be:
74:14:98:7e:bf:1f:86:a7:1e:ab:26:92:32:e7:2b:
4e:54:01:26:16:73:80:de:90:09:7e:41:e9:62:e7:
8a:da:b6:21:fb:92:11:94:7b:f2:5a:cc:4c:cb:bf:
13:80:18:3e:e5:19:d7:8d:a3:44:75:0d:18:af:98:
e3:f0:3b:5d:da:74:70:aa:b7:5e:89:eb:a9:f9:a1:
9c:39:33:15:10:b0:d9:17:37:22:52:eb:5e:98:1f:
da:61:fc:c4:30:f5:14:e1:cd:96:b3:21:52:3f:33:
2e:62:fc:ab:ea:ea:fd:64:f7:50:ce:c2:2e:cb:e5:
fc:30:28:82:7a:f5:35:ad:8b:41:c4:f4:3e:d5:15:
75:bc:fd:60:90:11:93:4a:ed:38:26:0f:7f:8d:38:
39:20:25:2e:92:5b:2b:44:13:3e:3e:20:1f:ff:26:
bd:cf:70:56:50:71:4e:c3:96:2f:5e:97:29:f2:54:
c9:4a:fb:24:b9:4e:31:79:4b:9a:71:81:bb:0d:72:
81:2d:63:81:8b:7e:7f:78:ce:5e:17:ff:cb:86:8e:
fc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BE:33:1D:8E:22:78:C0:22:61:5B:A9:AA:30:1E:53:B0:DB:D3:A0
X509v3 Authority Key Identifier:
keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:5e:eb:b5:ab:84:92:b7:97:5e:5f:18:f0:96:49:bc:fa:b1:
cd:a4:e1:1d:e4:89:eb:c8:41:e8:94:6d:ae:04:a1:93:e7:55:
62:04:35:69:b2:b0:d9:bf:4e:6a:27:70:9d:c2:f8:9f:40:38:
81:9e:8c:7b:57:4c:95:e2:57:9c:b4:76:83:fc:54:44:13:21:
76:d0:7c:b3:c2:55:ea:d3:00:cb:ce:e2:55:92:66:f6:5c:72:
23:8b:95:d4:e7:56:de:71:de:b1:f6:0e:00:8c:20:29:45:ae:
59:9f:cc:a0:ae:88:a3:7e:08:7d:8c:9a:a8:19:07:d0:5b:51:
43:89:73:9c:c1:e3:99:61:53:8e:73:92:02:fe:fc:9f:08:d4:
9c:97:0b:1e:4c:de:98:aa:8d:5b:3c:9c:fd:27:be:ec:d9:f5:
9b:c0:d9:47:99:ee:28:46:90:44:2d:05:dc:e5:d3:de:9f:e5:
91:e1:f6:ba:63:4e:42:23:35:3d:eb:63:96:53:a8:e9:25:52:
5f:be:0d:d1:ef:0f:34:1c:97:f8:56:66:50:f1:ea:ef:b1:2f:
3b:f6:6c:05:85:fb:aa:8d:13:23:5b:df:5f:c8:6a:25:e3:0b:
31:25:ae:58:44:15:3c:09:84:9d:85:dc:ef:7a:02:88:05:05:
21:30:e7:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U2NzgxMTAvBgNVBAUTKEZGMzM0MTk3MkREOEExRjY4NzFFREU4NjlBM0ExREQ5
MjUyOEFFQjYwHhcNMjYwMTEwMTYzNjA5WhcNMjYwMTE3MTYzNjA5WjAYMRYwFAYD
VQQDDA02OTYyN2ZmYS0xNGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy8C5LzRPbggP1yECRDvRBGNCGvCPDhwDecGPjVcUQcPPX4N32EB9s++hcb50
FJh+vx+Gpx6rJpIy5ytOVAEmFnOA3pAJfkHpYueK2rYh+5IRlHvyWsxMy78TgBg+
5RnXjaNEdQ0Yr5jj8Dtd2nRwqrdeieup+aGcOTMVELDZFzciUutemB/aYfzEMPUU
4c2WsyFSPzMuYvyr6ur9ZPdQzsIuy+X8MCiCevU1rYtBxPQ+1RV1vP1gkBGTSu04
Jg9/jTg5ICUuklsrRBM+PiAf/ya9z3BWUHFOw5YvXpcp8lTJSvskuU4xeUuacYG7
DXKBLWOBi35/eM5eF//Lho78hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6+Mx2O
InjAImFbqaowHlOw29OgMB8GA1UdIwQYMBaAFP8zQZct2KH2hx7ehpo6HdklKK62
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC9CRUIzMzNGQTIy
NTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9mYUhIdDZHbWpvZDJTVW9y
clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL196TkJseTNZb2ZhSEh0Nkdtam9kMlNVb3JyWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTY3OC9CRUIzMzNGQTIyNTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9m
YUhIdDZHbWpvZDJTVW9yclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCFXuu1q4SSt5deXxjwlkm8+rHNpOEd5InryEHolG2uBKGT51ViBDVp
srDZv05qJ3CdwvifQDiBnox7V0yV4lectHaD/FREEyF20HyzwlXq0wDLzuJVkmb2
XHIji5XU51becd6x9g4AjCApRa5Zn8ygroijfgh9jJqoGQfQW1FDiXOcweOZYVOO
c5IC/vyfCNSclwseTN6Yqo1bPJz9J77s2fWbwNlHme4oRpBELQXc5dPen+WR4fa6
Y05CIzU962OWU6jpJVJfvg3R7w80HJf4VmZQ8ervsS879mwFhfuqjRMjW99fyGol
4wsxJa5YRBU8CYSdhdzvegKIBQUhMOeH
-----END CERTIFICATE-----
Generated at Mon Jan 12 17:21:48 2026 by rpki-client