This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json)
Hash identifier: Cutr+OdaRrH39Xg4JYVfzanQdDN3dPeU3xv/JWlsmSI=
Subject key identifier: 33:10:0F:E6:2C:3C:50:50:75:29:7E:BF:4B:E7:CE:0A:6A:DF:13:48
Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA
Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
Certificate serial: 0138
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
Manifest number: 0136
Signing time: Sun 25 Jan 2026 03:45:41 +0000
Manifest this update: Sun 25 Jan 2026 03:45:40 +0000
Manifest next update: Sun 01 Feb 2026 03:45:40 +0000
Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: aikjiCkle1XRM/SFKDj+HZ8oemegwAoF36mN1zZ6FXU=)
2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: pzMlGsKhWR+3BV9wtGqk0Bd9xkj2vDOLvA2jobreAa4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl
rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:45:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA
Validity
Not Before: Jan 25 03:45:40 2026 GMT
Not After : Feb 1 03:45:40 2026 GMT
Subject: CN=697591e5-02cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3a:70:22:25:3f:f2:3b:54:6a:a1:40:5a:3f:
99:81:de:21:1c:f7:d3:2a:3d:6b:54:1e:24:d0:bc:
12:29:aa:76:af:47:2b:2d:0e:87:f8:45:91:fe:0b:
51:90:90:26:63:a8:55:e8:d1:78:e0:67:04:dd:20:
1b:74:f6:4a:e6:b0:61:93:ac:0b:cb:4c:f4:7c:06:
b9:90:7c:07:46:1c:53:01:65:24:0b:58:d3:31:df:
73:39:4d:2e:76:d8:79:8d:1f:72:81:74:5b:77:82:
2f:c2:09:a3:7b:af:25:59:67:aa:36:6f:d0:73:a0:
56:e4:d4:fb:52:15:2b:94:38:66:bd:cb:26:e7:fa:
c1:4f:30:e6:67:86:1c:c4:db:0c:58:e6:d0:58:02:
09:6b:50:cd:92:09:8a:9b:48:b8:a8:73:c7:40:24:
e7:24:27:c4:08:10:56:67:90:7c:51:a1:a1:4a:4f:
78:75:7a:c2:00:e0:8b:1f:d5:fd:f5:86:b6:6e:b8:
b1:bd:20:a2:78:45:84:a3:1b:75:03:9b:7b:d1:0c:
ef:29:b5:f9:3e:d6:6c:fb:d8:62:5f:6f:7c:ca:6e:
5d:04:ec:9c:0c:62:43:3a:db:ae:fe:a7:a9:91:2b:
ce:34:7d:ba:7d:d3:46:5d:d9:e6:34:b5:1c:4b:97:
eb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:10:0F:E6:2C:3C:50:50:75:29:7E:BF:4B:E7:CE:0A:6A:DF:13:48
X509v3 Authority Key Identifier:
keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:26:20:e1:8f:80:b0:e1:e4:ca:e3:fd:07:aa:8a:c2:47:4d:
eb:c6:89:f6:8b:8a:8a:7c:8f:01:34:a2:c7:0f:09:d6:03:08:
70:f8:fd:32:d4:c4:68:b5:f3:74:81:5f:33:b8:4e:78:dc:3b:
4c:13:fa:dd:77:9c:9c:97:a5:e5:53:c6:13:8d:8f:9b:e7:b0:
11:af:33:a2:3c:77:39:cb:85:65:a3:89:ac:1a:10:57:69:16:
c0:ec:87:15:bf:04:f4:f4:75:e4:9c:34:59:03:eb:87:0d:e5:
5d:63:72:7c:29:43:78:39:5d:cb:94:52:14:02:cf:07:2b:8a:
de:76:0a:63:3c:fe:ce:ac:9b:36:b4:01:f6:7d:5e:c2:d7:1b:
9d:04:1f:fd:de:e6:81:1c:75:ec:04:df:c4:0a:aa:e9:09:e5:
1d:d1:7f:89:50:38:c0:d1:0f:48:07:5d:0c:74:77:cb:8a:eb:
74:c8:a0:46:ff:a1:b9:b2:2e:7a:75:98:e7:3c:26:82:ee:0e:
df:81:03:31:2e:bf:90:17:4f:54:f1:c2:04:03:ae:aa:14:33:
af:c8:77:cc:7b:3c:a4:91:18:83:5c:07:2f:bd:3f:29:ee:a0:
df:f1:83:05:99:47:09:ae:0d:9c:fc:95:61:a1:0d:9a:34:8d:
d1:a7:61:cc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUYyREYxMTAvBgNVBAUTKDY2NDQwNTFCRTFFMTA3MEQ1NzIyRDI0RkNDMUE2NUJC
NkE2NTkzQUEwHhcNMjYwMTI1MDM0NTQwWhcNMjYwMjAxMDM0NTQwWjAYMRYwFAYD
VQQDDA02OTc1OTFlNS0wMmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjjpwIiU/8jtUaqFAWj+Zgd4hHPfTKj1rVB4k0LwSKap2r0crLQ6H+EWR/gtR
kJAmY6hV6NF44GcE3SAbdPZK5rBhk6wLy0z0fAa5kHwHRhxTAWUkC1jTMd9zOU0u
dth5jR9ygXRbd4Ivwgmje68lWWeqNm/Qc6BW5NT7UhUrlDhmvcsm5/rBTzDmZ4Yc
xNsMWObQWAIJa1DNkgmKm0i4qHPHQCTnJCfECBBWZ5B8UaGhSk94dXrCAOCLH9X9
9Ya2brixvSCieEWEoxt1A5t70QzvKbX5PtZs+9hiX298ym5dBOycDGJDOtuu/qep
kSvONH26fdNGXdnmNLUcS5frLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMQD+Ys
PFBQdSl+v0vnzgpq3xNIMB8GA1UdIwQYMBaAFGZEBRvh4QcNVyLST8waZbtqZZOq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wQTk4ODc5QTIz
QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3MVhJdEpQekJwbHUycGxr
Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1prUUZHLUhoQncxWEl0SlB6QnBsdTJwbGs2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjJERi8wQTk4ODc5QTIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3
MVhJdEpQekJwbHUycGxrNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAuJiDhj4Cw4eTK4/0HqorCR03rxon2i4qKfI8BNKLHDwnWAwhw+P0y
1MRotfN0gV8zuE543DtME/rdd5ycl6XlU8YTjY+b57ARrzOiPHc5y4Vlo4msGhBX
aRbA7IcVvwT09HXknDRZA+uHDeVdY3J8KUN4OV3LlFIUAs8HK4redgpjPP7OrJs2
tAH2fV7C1xudBB/93uaBHHXsBN/ECqrpCeUd0X+JUDjA0Q9IB10MdHfLiut0yKBG
/6G5si56dZjnPCaC7g7fgQMxLr+QF09U8cIEA66qFDOvyHfMezykkRiDXAcvvT8p
7qDf8YMFmUcJrg2c/JVhoQ2aNI3Rp2HM
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:46:31 2026 by rpki-client