This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft
File: ZGscQagf9-WCtezcHO9UzmEVJWM.mft (raw, json)
Hash identifier: gho5wMdksyHQH681czVd8/z0vIBckn5utpS7t8s5p8A=
Subject key identifier: DF:9D:9C:E7:82:05:4C:E1:2A:01:89:7D:CD:96:A5:D7:30:4B:E0:BB
Authority key identifier: 64:6B:1C:41:A8:1F:F7:E5:82:B5:EC:DC:1C:EF:54:CE:61:15:25:63
Certificate issuer: /CN=A9129D4A/serialNumber=646B1C41A81FF7E582B5ECDC1CEF54CE61152563
Certificate serial: 1DD7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft
Manifest number: 1DCC
Signing time: Sat 24 Jan 2026 15:54:57 +0000
Manifest this update: Sat 24 Jan 2026 15:54:56 +0000
Manifest next update: Sat 31 Jan 2026 15:54:56 +0000
Files and hashes: 1: ZGscQagf9-WCtezcHO9UzmEVJWM.crl (hash: q66cxXGREsCu2vqlzBEDP6wLdL8i/gLfQa3n4WQX81Y=)
2: 810AF2B0AC9611E6A37EC415C4F9AE02.roa (hash: djmV6ni7hy6C8m5F1gtlxw3KFQjLB6LT9Z3a9xMILMs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.crl
rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:54:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7639 (0x1dd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129D4A, serialNumber=646B1C41A81FF7E582B5ECDC1CEF54CE61152563
Validity
Not Before: Jan 24 15:54:56 2026 GMT
Not After : Jan 31 15:54:56 2026 GMT
Subject: CN=6974eb51-cb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:87:9d:8d:29:30:a1:0b:77:dd:03:4a:d5:
7d:83:da:17:fe:c3:5e:58:0f:bf:24:ef:6f:c3:dd:
8a:6a:08:83:29:fb:63:2d:37:98:57:b6:c4:23:ea:
d4:47:19:99:9b:e8:20:64:34:9c:45:f0:53:64:4d:
1d:7d:93:50:b9:46:57:26:7f:82:04:42:76:c7:eb:
5d:4b:d5:57:44:97:24:fa:0c:09:3c:07:b2:df:25:
03:a4:ec:00:38:aa:42:a6:74:ac:fb:89:b5:97:ee:
a4:e7:08:f3:91:78:69:b4:42:0f:25:4d:cc:88:20:
3f:84:c3:84:d4:bf:6f:d2:32:7c:05:91:42:ac:af:
08:39:f3:8b:fb:7c:11:5f:6f:eb:45:e8:14:94:d5:
6f:40:77:ba:ac:ac:c2:94:af:ad:f1:b8:a9:08:0e:
72:e0:ab:c8:ae:ba:10:52:6c:04:1e:38:d4:b8:b5:
d8:c8:29:35:ef:ca:e3:7f:82:36:6b:07:b4:90:ee:
f2:03:16:b6:40:42:7c:c1:60:a9:31:72:dc:91:31:
cf:cc:f6:0d:f9:6a:f9:27:11:38:5b:94:dc:48:20:
52:9b:1f:99:de:db:bd:78:3d:8e:02:0a:dc:47:36:
e5:73:a3:39:f2:3d:cc:f0:84:f9:e5:a1:e1:5c:06:
78:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9D:9C:E7:82:05:4C:E1:2A:01:89:7D:CD:96:A5:D7:30:4B:E0:BB
X509v3 Authority Key Identifier:
keyid:64:6B:1C:41:A8:1F:F7:E5:82:B5:EC:DC:1C:EF:54:CE:61:15:25:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:4b:f6:71:85:ff:63:e3:cc:af:35:e2:88:24:81:98:6b:a9:
58:95:0c:16:3d:99:a3:0c:a9:e2:ab:a4:be:5d:a8:55:62:ed:
5a:ed:91:76:2c:0d:ce:54:96:4d:45:11:fc:fa:b1:d0:d8:08:
73:1b:d6:de:3d:fe:02:ac:a8:74:bb:67:e6:de:2e:27:97:46:
7d:eb:8b:52:09:60:68:c3:94:26:f6:5a:1e:67:48:a3:4e:5c:
af:a4:d4:77:0b:69:b2:f0:c7:77:22:c8:c1:1c:37:34:86:99:
a7:5c:96:0b:f6:ff:e8:a3:a5:57:86:e8:aa:b0:89:6a:91:08:
96:f1:d7:dc:2f:8c:7e:e3:50:27:40:9d:bd:93:c0:22:00:a7:
ff:e5:37:5e:ae:5f:cb:bc:6f:83:55:91:59:9f:a2:4a:6c:62:
b2:c7:13:ac:5c:fb:11:e2:d5:68:de:0f:16:44:0a:a5:b4:20:
e4:cf:94:49:39:4f:5e:fb:12:f0:64:1d:73:60:e5:7d:c0:62:
94:99:37:37:61:fb:fc:6f:e4:e9:57:bf:f4:d8:61:11:ba:85:
a4:d0:23:02:85:21:07:f0:81:8b:55:5a:3e:84:fb:d1:d6:c2:
4f:43:6e:8f:a5:02:d2:f0:b5:28:55:b8:6f:10:bc:51:9e:e7:
4c:dd:65:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:10 2026 by rpki-client