This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
File: Z_VMOcER599-cHbFxxWyizXoWfk.mft (raw, json)
Hash identifier: u1aTxNEnLgWVCF0cHN9tedpH5ZzJ4RoFbBXQWtB82B0=
Subject key identifier: 80:1D:2E:47:BC:09:77:10:34:5E:E0:13:C8:1C:0F:7F:0E:9C:A6:FB
Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Certificate serial: 1428
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
Manifest number: 13F5
Signing time: Sat 24 Jan 2026 16:41:10 +0000
Manifest this update: Sat 24 Jan 2026 16:41:10 +0000
Manifest next update: Sat 31 Jan 2026 16:41:10 +0000
Files and hashes: 1: Z_VMOcER599-cHbFxxWyizXoWfk.crl (hash: Py/U2k8/RFoHv7gh3RX+bBxqQf3i7zz4LvIK4lsA96c=)
2: 25B81C40782911F0AFFBC961C4F9AE02.roa (hash: UlCBqy7EysmW7H3xsPUTZVWMxusmrndQOFGpOBmw+LE=)
3: 24FAF688782911F0AFFBC961C4F9AE02.roa (hash: sM2zMrwWHmoLL0qDSAnAlqWcSh06FRbI0Ajh63ZkE0g=)
4: C19EC984774811EFB2DF8983C4F9AE02.roa (hash: cKH94jU8sLXPt8kaGwUS3gRcUMVka1p8X+BtBxcVQK8=)
5: E48C805A9A7D11EF99ECF636C4F9AE02.roa (hash: NX8o5mWhmkEDZb3cR479AhhzFQC3HNdFBMtxa8EgDsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:41:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5160 (0x1428)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Validity
Not Before: Jan 24 16:41:10 2026 GMT
Not After : Jan 31 16:41:10 2026 GMT
Subject: CN=6974f626-3949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7f:6f:b1:b3:9d:ad:95:57:a8:eb:c2:ad:bf:
31:9b:55:20:c0:64:12:ce:45:fb:72:5b:9d:71:e2:
e7:c4:a2:14:e4:df:43:a3:53:bc:db:d1:b4:66:8e:
2b:17:7c:df:a3:6c:24:b3:e5:fa:96:46:7f:e2:2d:
9b:0a:26:06:28:c2:8a:4e:bc:01:c2:65:f3:a9:6d:
bc:a4:0a:60:d4:8d:74:bd:40:f6:3a:ba:ef:8f:d3:
d6:c4:12:31:ec:71:93:f0:8a:b8:5d:5c:8a:ea:48:
54:04:3a:aa:a6:7e:1e:e4:45:99:b8:e6:07:18:8f:
66:c8:fc:d7:24:6c:1b:1a:2a:a5:2f:69:7c:db:cd:
ef:3e:f3:f6:4a:93:70:ce:bd:b9:b4:c9:3d:fd:26:
33:7f:06:bd:b0:b0:d5:3c:84:17:ed:41:ca:80:63:
a9:62:e9:e8:23:ef:3d:da:65:2d:8b:a5:9c:6f:1f:
90:19:7e:66:b4:dd:3b:59:aa:bd:08:2b:fa:8d:2a:
de:bd:a5:63:e9:cf:42:41:b0:e1:9f:f5:a9:ad:68:
26:87:d5:72:07:da:bd:50:39:1e:75:2e:d4:52:63:
6f:25:0e:c9:cb:de:0d:1c:d6:43:cc:8f:07:cc:23:
f7:87:2e:15:be:08:9d:1e:f9:f2:02:ea:62:36:65:
64:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1D:2E:47:BC:09:77:10:34:5E:E0:13:C8:1C:0F:7F:0E:9C:A6:FB
X509v3 Authority Key Identifier:
keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:ad:02:7b:42:10:c3:6b:70:df:6d:20:9c:64:56:51:47:7d:
5b:21:6e:9e:3e:11:c3:0c:ee:80:82:8b:95:e9:22:70:8d:62:
de:7f:a4:10:e3:2d:eb:a9:fe:f6:74:74:1e:f8:0d:f3:29:be:
ef:b4:e2:de:db:8f:dc:3a:b6:cd:e6:2b:a1:1b:20:84:c8:2a:
60:dd:d9:c4:5b:3d:44:28:7a:3a:d5:73:53:f7:3c:58:32:59:
2a:a8:af:38:ab:0a:e8:1a:80:27:8e:ee:15:26:03:62:f8:57:
d9:50:3f:4c:9a:4e:9c:60:da:38:88:bd:bf:e1:4d:a3:fe:4b:
f4:af:9d:7a:55:17:ef:97:16:81:17:43:c7:be:0c:97:35:00:
4b:f7:1d:b7:8b:da:0e:4a:e4:70:e5:32:a6:ef:21:6c:fb:a5:
31:d5:93:3b:5e:d2:87:86:48:fe:5d:6e:4f:14:7a:f4:8d:fb:
d1:1f:af:8a:95:b5:d9:d9:39:67:5e:a1:ae:b4:17:4b:ca:78:
7a:9e:03:22:c9:ea:af:52:5e:83:f8:89:51:22:ab:f0:a9:7b:
24:fd:a9:83:56:e4:ab:41:af:c9:8d:5b:cf:49:c9:99:7e:f9:
68:07:67:4f:47:2b:84:94:c5:15:d9:c6:46:da:81:db:16:c3:
6f:b6:aa:d1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC
MzVFODU5RjkwHhcNMjYwMTI0MTY0MTEwWhcNMjYwMTMxMTY0MTEwWjAYMRYwFAYD
VQQDDA02OTc0ZjYyNi0zOTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4H9vsbOdrZVXqOvCrb8xm1UgwGQSzkX7cludceLnxKIU5N9Do1O829G0Zo4r
F3zfo2wks+X6lkZ/4i2bCiYGKMKKTrwBwmXzqW28pApg1I10vUD2Orrvj9PWxBIx
7HGT8Iq4XVyK6khUBDqqpn4e5EWZuOYHGI9myPzXJGwbGiqlL2l8283vPvP2SpNw
zr25tMk9/SYzfwa9sLDVPIQX7UHKgGOpYunoI+892mUti6Wcbx+QGX5mtN07Waq9
CCv6jSrevaVj6c9CQbDhn/WprWgmh9VyB9q9UDkedS7UUmNvJQ7Jy94NHNZDzI8H
zCP3hy4VvgidHvnyAupiNmVktwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIAdLke8
CXcQNF7gE8gcD38OnKb7MB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez
NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X
ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MEYwRC8wOEVDMkIwQ0EzNkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5
OS1jSGJGeHhXeWl6WG9XZmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCRrQJ7QhDDa3DfbSCcZFZRR31bIW6ePhHDDO6AgouV6SJwjWLef6QQ
4y3rqf72dHQe+A3zKb7vtOLe24/cOrbN5iuhGyCEyCpg3dnEWz1EKHo61XNT9zxY
MlkqqK84qwroGoAnju4VJgNi+FfZUD9Mmk6cYNo4iL2/4U2j/kv0r516VRfvlxaB
F0PHvgyXNQBL9x23i9oOSuRw5TKm7yFs+6Ux1ZM7XtKHhkj+XW5PFHr0jfvRH6+K
lbXZ2TlnXqGutBdLynh6ngMiyeqvUl6D+IlRIqvwqXsk/amDVuSrQa/JjVvPScmZ
fvloB2dPRyuElMUV2cZG2oHbFsNvtqrR
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:38:25 2026 by rpki-client