This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
File: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft (raw, json)
Hash identifier: LZJC3aUXEIxlYkNxIWpTRLtIysnaizC+EhwszeYB/5k=
Subject key identifier: 06:0A:66:99:90:AA:DC:02:11:F0:3E:E7:23:14:62:AB:B9:3D:AE:1C
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 08A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
Manifest number: 0726
Signing time: Sat 24 Jan 2026 22:07:03 +0000
Manifest this update: Sat 24 Jan 2026 22:07:03 +0000
Manifest next update: Sat 31 Jan 2026 22:07:03 +0000
Files and hashes: 1: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl (hash: KmxZhqZr/uEDw/r+YdOp8y+mZY690Ltj3GJh7LLKR5o=)
2: 2BB36B4E0F7F11F0B174675DC4F9AE02.roa (hash: pJb6vWrEK8AbvQaHM16naue6yxDiNpuJBWd0vzldJcA=)
3: 9517317CDFD811F0B8B3FAFD526F56BC.roa (hash: hW/EOdfJpm7b8Mfhyah0mZlvXbd3DryDfNnkrETcIns=)
4: A155AE68315611F0B557CE7CC4F9AE02.roa (hash: 5BpVn9FtCdONBy75a2ydQMg2la0Ia55Ovj0UXIycxcg=)
5: 5CAA8A02C05F11F08562CC0CC4F9AE02.roa (hash: LcPWm9ZDnNP1sDZFVkma2o5PQ6jPkVljqIjWid9fl7Q=)
6: 83EC44C8134C11EF81B18276C4F9AE02.roa (hash: 5ANX4i+xHd73YVIL+MJht9tnmiSuKsVd8JB7ZR2nfCI=)
7: 73D33FA24A8611F08884C659C4F9AE02.roa (hash: o6TrwidKO00UNfXuzel+2emRHvmY5gCcZTOKQTqPke8=)
8: 38F85C12315611F0A6B1097AC4F9AE02.roa (hash: aH1eyR4zelYgbSxQWl1+s43L8Z0S9NRZsBc5Vhu/zpc=)
9: 7E08719E390311EF9DD1A882C4F9AE02.roa (hash: 4s7EOK7fOyD0bh+PebzMoqJJ+Hie7EREL6lA7IpDGp8=)
10: D716391C53CC11F0BC106B7CC4F9AE02.roa (hash: Xm6BtJp1Xv982dNe+cH86+8Hl8aLCGaqau9syDHGkl0=)
11: A241FA98315611F0B557CE7CC4F9AE02.roa (hash: 5oh8MNtfAPalsvWnm2UF2Pkprrdqs/9ddR2VFTpaQiE=)
12: 5DFC320069CD11EFA0E6CC83C4F9AE02.roa (hash: lI/hYyE+1r7lE9y0qvmVwo9rcMGhKVHUG3jqAsXOD68=)
13: DA3891D484AB11F0BEE30678C4F9AE02.roa (hash: tNL62qhE8vecNFJ8x8ufDRWVMLKpuaHL77dnrKR14ps=)
14: 1BE87EF0F54511F0AFC43705646F56BC.roa (hash: 9qE5tH+GYYqFJwxWgzlrWBSGQqpmQPy8LrvB9rE1fSA=)
15: D36E1CE02A3211EFA7554C59C4F9AE02.roa (hash: S9Kc7cmkHRN82YJ6h3SdiY4GOfSfzom8HWLIg8mqYfQ=)
16: 2C3DCE420F7F11F0B174675DC4F9AE02.roa (hash: c4tmYlMY5sWJ0DujxCTdR6nU4mhqfELo+RFUBYJRcIg=)
17: 9C8302D0B3CB11F0A084D480C4F9AE02.roa (hash: x7DJdFRsn2uvip24+58sYGOPQUkDpJjhzraS1Xt2eqo=)
18: 757D79F84A8611F08884C659C4F9AE02.roa (hash: F1EBgEiUdYzV2e+yWXrqhHhe+wUROhuQQWSgIujXFuM=)
19: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (hash: A3YSpdpMsFqyTGlHs/WDWrhzGpf2svgvrhesgE6eJ8g=)
20: 4A4A33C0661B11EFA314D413C4F9AE02.roa (hash: SO09lWc8oj56XbC1Qcew77xEM9+gwLydRegdmBpQ/n8=)
21: 918746BAE5E611EF9D35130AC4F9AE02.roa (hash: nRgNkr+gTw6R30CcNPn7HUQ4QG5gUabxLibffFcQE4k=)
22: 72DF94424A8611F08884C659C4F9AE02.roa (hash: 6Q5hxC3u92cNVFOzzPPEq/U2hdgGHeB2kCxpkP2ihE0=)
23: 7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (hash: teH8eTJSZtTBOVkhDhcUYpV1hXlakeK+9NJ0LKbAUag=)
24: 74BA16C04A8611F08884C659C4F9AE02.roa (hash: 78WKR0aB90eg+DMuEsDjeSMy8OpsveQATPc6t2hqkwo=)
25: 811B1932742A11F0A5B14C0CC4F9AE02.roa (hash: eba0IhMDMP+niOYOsrZEeGYf5cPaLzt3Lu9IJlIWIVg=)
26: 2A3B0CECF89E11EFBEB09C18C4F9AE02.roa (hash: 9NhxgmeB9d3FvwHBDgCqKyQC9U/lReRo4/VWdoQQNcM=)
27: 9BCC2FB0B3CB11F0A084D480C4F9AE02.roa (hash: oBgzedyVQRed+He1xEj1MMwnzZqQIFejD7Liye4m3MM=)
28: 248A6CEA4A8611F0A25A1157C4F9AE02.roa (hash: 1cmDcY6sz+LunwCiA396UQFs5SUmwLc8yoDOnxtHNM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2215 (0x8a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Jan 24 22:07:03 2026 GMT
Not After : Jan 31 22:07:03 2026 GMT
Subject: CN=69754287-3a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:94:1f:7a:d9:6e:1d:e7:35:76:97:c7:8c:
41:ef:d8:2c:4c:df:5e:82:2b:e1:32:48:d1:eb:8e:
8a:4a:8a:17:46:f4:98:8a:b8:fa:37:68:7d:3d:15:
0d:52:15:2b:4f:a5:6f:b9:e0:bb:20:f7:5b:e3:b1:
64:c5:9d:aa:a6:cc:b7:97:7c:98:49:7d:00:55:21:
6a:61:f6:3f:4f:47:6c:b0:5e:a0:90:8f:9d:04:32:
25:5a:73:9b:2f:f7:1b:c7:06:bd:46:3a:f1:f8:d6:
21:4a:12:33:32:eb:a8:4c:50:0f:c2:63:0d:b4:48:
69:14:6e:57:82:2d:a9:20:4a:4f:c5:5a:92:7e:e8:
3e:48:90:5f:0e:f0:15:36:13:c3:50:f3:45:31:a6:
f0:3e:63:22:6b:17:78:b9:24:29:d4:cb:5f:f9:53:
25:f0:09:b5:24:5e:cf:8f:ef:67:27:b7:fa:50:53:
d7:72:c5:31:80:3c:08:7c:82:88:bf:6f:44:5d:80:
50:8a:1b:32:ae:1c:9d:0b:c4:94:74:99:92:be:81:
55:3f:11:8b:c2:11:5e:d4:52:3c:d5:71:7d:55:f6:
15:f5:12:90:9e:9f:13:74:3f:06:59:c7:0f:27:89:
ca:ab:40:73:0e:df:5b:7f:7f:b4:56:4f:90:78:5c:
bf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0A:66:99:90:AA:DC:02:11:F0:3E:E7:23:14:62:AB:B9:3D:AE:1C
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a8:8d:7c:ef:d0:0b:4c:13:12:2f:6d:ca:fc:42:cf:61:85:
f5:67:f2:61:3b:75:44:b7:ae:c8:d0:84:6d:72:92:14:47:da:
34:6d:e7:44:45:ec:a7:61:67:b3:c3:76:3f:29:fc:80:77:e3:
f7:3c:b4:73:da:01:ec:72:42:52:63:98:17:44:42:ba:b7:c5:
93:53:95:48:12:7f:e5:9c:ad:c2:49:e8:fe:91:5a:9a:b7:34:
58:f5:bb:43:30:3c:7d:1f:56:be:81:38:c3:19:7a:b6:d3:94:
98:be:bc:22:50:13:30:93:c2:58:2a:22:1b:72:9f:d0:34:93:
62:4f:f6:08:d4:38:3c:10:b9:fc:21:94:0a:08:c0:38:c6:34:
72:d0:2d:57:4a:ab:50:4e:08:bd:5f:57:82:9f:c5:ee:45:7b:
40:d9:a4:da:5b:c9:7b:12:21:2e:da:0f:61:7b:15:4c:0a:57:
1b:85:36:d0:c5:48:61:44:e0:c7:f0:a7:ec:80:7f:91:1b:2e:
4c:1d:2d:dc:49:f6:69:20:c1:a3:a4:06:fd:f2:68:39:4d:64:
7a:95:c3:d9:01:c1:16:2d:a2:67:03:71:3a:6a:df:7c:f8:0a:
6f:42:cc:3d:ef:8d:a2:a9:9f:67:fe:16:26:39:72:ef:61:df:
34:35:f6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:54 2026 by rpki-client