This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
File: ZhNNob_trAyRnSax9_nhaK-dK04.mft (raw, json)
Hash identifier: Www25Z7U0w4GplMlnH5x8YQ9GiY51dcnxmvV5pFSQNU=
Subject key identifier: 6C:88:62:37:04:BD:C6:11:91:2A:07:2D:1D:1A:38:46:CB:48:42:4F
Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E
Certificate issuer: /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E
Certificate serial: BF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
Manifest number: B7
Signing time: Sun 25 Jan 2026 05:20:33 +0000
Manifest this update: Sun 25 Jan 2026 05:20:32 +0000
Manifest next update: Sun 01 Feb 2026 05:20:32 +0000
Files and hashes: 1: ZhNNob_trAyRnSax9_nhaK-dK04.crl (hash: 6QVkyTaezCYcQA8QENkkPsxfJE4D80CdMp1DOw6sbnE=)
2: 015250F6309311F084231321C4F9AE02.roa (hash: ClfVLlrgYPJm3KLwlrnJCKZymUvwlmZA7LTXay4/Dzs=)
3: 25922C44F3CF11EFBCC75246C4F9AE02.roa (hash: tmAxTTNt4cwx64eo7rdMEojpG4GBIbW07PNB4Pwrbc8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl
rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E
Validity
Not Before: Jan 25 05:20:32 2026 GMT
Not After : Feb 1 05:20:32 2026 GMT
Subject: CN=6975a821-2b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8c:93:b0:6a:7e:21:34:71:63:0d:64:81:80:
74:f9:fb:d5:73:1a:a8:85:ec:64:c8:6f:3b:fa:75:
20:35:dd:4f:c0:e1:42:ae:b2:ce:be:54:a2:82:1a:
a4:ff:a7:7f:b9:69:64:22:4d:6a:0f:a4:49:90:a2:
ec:db:2d:81:87:d6:c8:e8:5b:b7:d0:7b:ed:b5:45:
07:e4:02:6a:ee:c3:ee:e8:7f:d4:e6:3c:a7:e5:43:
5d:ba:82:35:80:db:af:13:df:a8:c1:4a:df:79:03:
14:9c:83:fd:62:e4:be:fc:66:33:5b:11:48:d7:51:
7b:96:fe:7d:28:5b:9d:3f:e4:91:a3:b9:10:b8:20:
37:a6:b0:79:8f:53:a3:35:d5:9c:66:f4:f8:39:4d:
25:7f:be:33:ff:e9:d6:8f:2a:73:82:01:22:53:7d:
62:74:2e:99:9e:be:1c:bc:7d:6f:b0:4b:90:32:a1:
13:6f:59:4c:86:ae:e6:d4:b5:78:eb:7e:b8:cd:69:
8b:ef:3d:55:a6:df:41:ef:e8:94:df:29:c6:7b:73:
83:5c:1d:68:fd:81:87:03:36:92:2e:e3:72:e1:57:
c3:6f:7b:d5:4f:7c:ae:aa:99:ff:8d:f7:9a:c2:ef:
72:7e:a5:4c:b6:ea:6e:2d:8f:33:1e:46:08:bb:88:
23:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:88:62:37:04:BD:C6:11:91:2A:07:2D:1D:1A:38:46:CB:48:42:4F
X509v3 Authority Key Identifier:
keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6e:b2:51:72:1a:d2:e2:1a:65:b6:79:a7:e1:47:1c:8c:a0:
fd:f6:fd:66:5b:f8:b1:06:94:2c:dd:fa:7f:c4:f9:9a:61:a4:
b3:40:9b:68:74:4b:37:de:87:0d:b0:2b:d2:46:40:75:64:a2:
cc:f6:e8:8a:f7:fb:63:57:e4:ce:7c:3c:c1:3a:38:74:37:7f:
72:86:98:fc:c8:42:7a:d6:07:0a:0d:01:7c:3b:75:03:67:89:
b1:14:36:4f:79:14:d0:75:a3:03:f8:b5:61:2f:b3:a3:fa:5a:
47:7e:c8:87:29:41:e4:d7:80:da:6c:b1:b8:39:a1:58:bf:ef:
95:23:4a:74:fc:c4:ec:cd:97:5a:23:1b:aa:f5:13:77:56:52:
3d:44:ac:5d:48:00:df:82:c9:7c:f2:aa:64:47:a4:2a:3b:e8:
83:2b:09:ce:bc:e5:8d:e5:40:a0:0d:22:fa:66:84:f4:79:7b:
d8:85:c6:16:da:53:47:69:38:ea:0c:43:86:7b:1a:03:17:a9:
b4:f4:98:a4:a9:1b:31:ff:ec:7e:14:8b:66:42:4e:6d:a7:7f:
ad:49:3f:50:a7:6c:63:67:8c:4c:a3:6a:b0:c5:ed:ae:03:3a:
64:95:03:51:07:cb:15:4b:3e:0a:c3:ca:e2:fa:78:78:d7:52:
f3:96:92:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:27:18 2026 by rpki-client