This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
File: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft (raw, json)
Hash identifier: 7kQuHvyeUgXMhL1JAKnKzfUEYcvKPJI74o926tma6CM=
Subject key identifier: F4:9B:A6:81:D1:8B:BD:D6:EB:CA:11:7C:10:42:8F:D1:08:06:0B:61
Authority key identifier: CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88
Certificate issuer: /CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88
Certificate serial: 0993
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
Manifest number: 098D
Signing time: Sat 24 Jan 2026 19:27:37 +0000
Manifest this update: Sat 24 Jan 2026 19:27:37 +0000
Manifest next update: Sat 31 Jan 2026 19:27:37 +0000
Files and hashes: 1: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl (hash: RWhNC0zlAnV0W7VxVz6izN2Q8ygaTzDYzcIgKHDdb8I=)
2: 7B68D8F2A3E811EAB397F675C4F9AE02.roa (hash: yNVnw0EXP1INvPZ4s9NoOnzSrgePvAYn9b5xTyExR54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl
rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:27:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2451 (0x993)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E24A, serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88
Validity
Not Before: Jan 24 19:27:37 2026 GMT
Not After : Jan 31 19:27:37 2026 GMT
Subject: CN=69751d29-b2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:32:2b:08:11:60:98:7a:d7:ee:12:bd:b6:5e:
b9:f5:7a:74:4f:41:d9:4c:49:43:ea:87:c9:aa:16:
50:b0:ce:7a:c7:59:7d:a1:e3:a9:67:23:fa:22:a6:
31:62:ab:50:e1:ec:ab:ef:b2:80:ec:df:5d:e9:cf:
15:f9:76:af:a0:ed:cf:5c:7a:dd:2d:0f:30:f8:72:
7b:02:49:30:21:df:84:18:bf:a6:9b:f0:f5:12:7d:
d2:10:3b:24:1b:ff:e8:dc:23:ef:17:f2:f9:3b:39:
b5:d2:04:93:15:ec:bf:a8:c7:39:a8:d2:2c:2c:79:
96:3d:e1:f6:3b:82:f7:7a:d5:69:a3:9d:76:ea:dc:
8a:02:3e:04:05:84:1a:33:8b:61:09:53:f3:c6:91:
31:eb:6b:72:e7:03:86:b3:18:54:af:d6:1b:45:bd:
78:4e:86:1e:8c:8a:d9:fe:00:2b:c6:8d:f1:43:59:
96:64:4a:38:69:4b:8d:e1:44:5c:af:46:fe:6a:b1:
e8:7d:eb:2e:09:3b:13:39:0b:25:d5:c1:75:83:49:
41:f6:5a:4a:4f:07:a7:81:98:68:ab:72:3c:33:d4:
24:62:e0:f0:77:8e:57:ce:46:b6:2d:0a:b9:a6:a8:
90:dd:7f:b9:3f:66:5e:34:fa:d9:16:36:4b:e5:8e:
8f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9B:A6:81:D1:8B:BD:D6:EB:CA:11:7C:10:42:8F:D1:08:06:0B:61
X509v3 Authority Key Identifier:
keyid:CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:e0:59:aa:3b:fc:9a:ef:e9:fe:0e:db:34:28:32:2d:61:2f:
46:4f:16:dc:ad:3f:e4:9c:9d:f0:cb:61:44:79:d4:ab:39:6c:
3a:16:b1:af:88:62:55:b9:84:09:75:90:a4:40:18:a3:f5:15:
02:d5:5c:da:c9:3d:5f:0f:d5:d9:d1:8b:54:38:80:6d:63:0f:
53:59:bc:0f:fe:90:65:f7:5c:13:c4:1d:05:48:b0:36:47:8d:
6e:68:91:67:1c:98:af:4e:b0:9f:ff:ee:27:52:78:b9:c8:2c:
53:c6:b8:d6:f3:2d:b7:f4:85:eb:40:a0:85:d6:c5:b6:4b:b5:
95:9c:90:2b:7a:98:e4:6b:3f:97:1e:07:17:4d:87:3d:da:4a:
30:8d:4f:39:63:84:a2:6b:66:74:44:4f:e3:9c:22:5e:84:35:
ac:a0:42:4d:3f:93:df:15:94:df:2d:44:d4:0d:04:a7:56:8d:
e4:db:b1:b0:2c:e6:7c:02:15:a4:04:77:9c:8b:26:c3:ae:a6:
6a:45:3e:8c:7e:5c:77:72:ec:78:e3:94:1f:ff:8e:c2:bc:3e:
7c:23:79:24:ef:da:b2:d6:a6:61:6d:9f:ac:5a:35:74:79:33:
99:47:56:44:c0:3b:02:05:5c:2a:63:e5:9d:46:3b:fa:6f:73:
f6:3e:e4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:03:44 2026 by rpki-client