This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
File: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft (raw, json)
Hash identifier: LIz9ynQYa5JJRCr0ggq8Dh7AsYITbzghsNGYbvPi0ls=
Subject key identifier: 1B:95:5C:0E:A7:58:A2:12:39:F5:90:84:19:6F:FB:2D:41:D1:78:A3
Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
Certificate issuer: /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
Certificate serial: C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
Manifest number: BF
Signing time: Wed 07 Jan 2026 05:17:19 +0000
Manifest this update: Wed 07 Jan 2026 05:17:19 +0000
Manifest next update: Wed 14 Jan 2026 05:17:19 +0000
Files and hashes: 1: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl (hash: BWuHjgEB/aSJ07z7XQPccZyrOuTxZGZXVzcN4hCXqSg=)
2: 48243250E78D11EF98760355C4F9AE02.roa (hash: H/VqLJG3It+odLKG96H1sbVkDmzdKmTeoPCyOU9UZ8o=)
3: A1F7F22ECEF211F09F0B2645C4F9AE02.roa (hash: qELOCsisC5h80weRL5N25yw+GcjDtQKTB0QyBuh6P1o=)
4: 1FCC4B16E78911EF99A1A729C4F9AE02.roa (hash: ur0Y19RBZlSTMz351Bt1h0UOu7/4H8KcC7lP/9sLDBM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl
rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Jan 2026 05:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
Validity
Not Before: Jan 7 05:17:19 2026 GMT
Not After : Jan 14 05:17:19 2026 GMT
Subject: CN=695dec5f-cbb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6e:48:0e:3a:89:51:7b:a2:e3:93:29:17:a7:
55:f3:14:f8:7e:af:e3:3d:c6:15:16:67:9a:c6:9e:
74:76:a6:55:57:b6:db:46:2d:48:61:a8:29:2c:62:
4d:ae:fb:2b:09:7f:34:2a:40:d1:a4:dc:fd:e5:a4:
13:ec:0a:2c:40:4d:d0:93:cd:6a:e0:27:c8:30:ea:
fd:15:85:07:6f:4a:0f:1e:b1:c0:e5:f2:66:d6:bc:
16:8b:40:be:94:83:f1:94:8b:e0:c9:12:8f:e2:d7:
4b:09:1b:67:7b:ba:10:33:12:d6:8a:ae:0f:b0:d4:
68:64:e4:c0:f7:00:58:83:0d:5a:8e:58:f9:d7:9a:
df:7d:dd:8e:be:81:4c:5a:94:9b:c3:0f:74:e8:5e:
80:70:23:09:19:c8:6b:80:10:54:94:2c:7f:a9:82:
ff:34:cc:ac:37:70:65:5d:4c:2e:e1:c4:f3:b8:14:
ba:be:a3:43:26:07:25:8e:22:05:c9:de:53:c7:84:
47:da:19:77:08:22:8f:0b:ea:4c:25:ec:8d:1d:55:
06:d6:07:f7:50:65:19:b7:53:fd:f6:39:cd:ce:db:
58:d3:7a:00:26:8b:63:e3:51:55:b1:ee:fb:85:f3:
52:99:f1:e8:0d:3e:df:04:6d:8b:86:b2:84:ee:21:
d0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:95:5C:0E:A7:58:A2:12:39:F5:90:84:19:6F:FB:2D:41:D1:78:A3
X509v3 Authority Key Identifier:
keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5c:7c:d5:6c:ca:ac:1a:df:0d:05:05:11:f9:0d:ab:01:e3:
ba:fb:13:98:59:42:c6:e6:ef:74:a3:22:08:fa:b2:46:0f:5d:
eb:17:59:50:5f:05:80:8b:ae:e3:37:08:1f:84:86:0c:4b:f0:
0b:ac:f1:f2:76:97:53:05:91:0e:54:8a:5d:f8:9b:79:99:c7:
ad:19:19:d7:5b:36:7b:eb:2a:66:d3:94:65:2b:aa:e8:9c:33:
3e:40:ed:ae:c7:2c:e1:05:73:c8:6d:56:91:f0:dc:95:ff:fe:
45:17:6c:f6:ce:ad:c4:4f:09:c6:d4:b5:39:c7:f8:1d:d4:be:
cf:62:91:b3:e0:fd:9b:df:26:9e:a2:98:ca:7b:87:4a:ee:d9:
e5:11:95:98:e8:49:af:a9:1f:f5:22:51:2a:c2:f8:18:1d:ef:
d0:ac:8a:0e:a4:3a:0a:57:b6:0c:38:af:c3:55:3a:ca:fa:76:
76:de:1f:b2:09:83:b1:b0:b4:16:fa:38:9b:e9:45:6a:be:fd:
6e:60:d0:be:83:0e:e5:a2:06:d0:76:e1:67:c8:06:ae:7e:28:
f7:f6:47:2d:0a:5b:c4:db:18:3f:27:57:98:15:ef:75:2d:89:
fe:54:85:19:57:89:26:bc:6d:49:c0:03:ed:bc:47:eb:05:26:
c2:be:7e:ec
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUQzNEIxMTAvBgNVBAUTKDY0Q0I2RUE3RDdEMEU1MUY0RDQyQjJENjg0NzI3NEFC
QjA3MzY1OTgwHhcNMjYwMTA3MDUxNzE5WhcNMjYwMTE0MDUxNzE5WjAYMRYwFAYD
VQQDDA02OTVkZWM1Zi1jYmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyW5IDjqJUXui45MpF6dV8xT4fq/jPcYVFmeaxp50dqZVV7bbRi1IYagpLGJN
rvsrCX80KkDRpNz95aQT7AosQE3Qk81q4CfIMOr9FYUHb0oPHrHA5fJm1rwWi0C+
lIPxlIvgyRKP4tdLCRtne7oQMxLWiq4PsNRoZOTA9wBYgw1ajlj515rffd2OvoFM
WpSbww906F6AcCMJGchrgBBUlCx/qYL/NMysN3BlXUwu4cTzuBS6vqNDJgcljiIF
yd5Tx4RH2hl3CCKPC+pMJeyNHVUG1gf3UGUZt1P99jnNzttY03oAJotj41FVse77
hfNSmfHoDT7fBG2LhrKE7iHQHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuVXA6n
WKISOfWQhBlv+y1B0XijMB8GA1UdIwQYMBaAFGTLbqfX0OUfTUKy1oRydKuwc2WY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDM0Qi9CM0RCNTFEMkRG
MzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVSOU5RckxXaEhKMHE3Qnpa
WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pNdHVwOWZRNVI5TlFyTFdoSEowcTdCelpaZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RDM0Qi9CM0RCNTFEMkRGMzUxMUVGQTU4RDY1M0JDNEY5QUUwMi9aTXR1cDlmUTVS
OU5RckxXaEhKMHE3QnpaWmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB6XHzVbMqsGt8NBQUR+Q2rAeO6+xOYWULG5u90oyII+rJGD13rF1lQ
XwWAi67jNwgfhIYMS/ALrPHydpdTBZEOVIpd+Jt5mcetGRnXWzZ76ypm05RlK6ro
nDM+QO2uxyzhBXPIbVaR8NyV//5FF2z2zq3ETwnG1LU5x/gd1L7PYpGz4P2b3yae
opjKe4dK7tnlEZWY6EmvqR/1IlEqwvgYHe/QrIoOpDoKV7YMOK/DVTrK+nZ23h+y
CYOxsLQW+jib6UVqvv1uYNC+gw7logbQduFnyAaufij39kctClvE2xg/J1eYFe91
LYn+VIUZV4kmvG1JwAPtvEfrBSbCvn7s
-----END CERTIFICATE-----
Generated at Wed Jan 7 22:13:19 2026 by rpki-client