This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
File: Z0fEVgFDfWEgWyv7QGfO0i6358E.mft (raw, json)
Hash identifier: wm2aGzsr5967Hg+MgoNI0LNE0yU9N6g5NaZDtmp2McY=
Subject key identifier: 2D:80:DA:97:06:E5:D0:30:3B:58:F1:B5:09:7B:51:C8:7E:0D:66:45
Authority key identifier: 67:47:C4:56:01:43:7D:61:20:5B:2B:FB:40:67:CE:D2:2E:B7:E7:C1
Certificate issuer: /CN=A914AA99/serialNumber=6747C45601437D61205B2BFB4067CED22EB7E7C1
Certificate serial: 27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0fEVgFDfWEgWyv7QGfO0i6358E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
Manifest number: 26
Signing time: Sun 25 Jan 2026 06:45:32 +0000
Manifest this update: Sun 25 Jan 2026 06:45:31 +0000
Manifest next update: Sun 01 Feb 2026 06:45:31 +0000
Files and hashes: 1: Z0fEVgFDfWEgWyv7QGfO0i6358E.crl (hash: jFWeNWt27D5DHmyYEDWWFJdqpKd3MctGQFT2qt1OjXs=)
2: 734D9ACCC2D711F09CE49A22C4F9AE02.roa (hash: /mzz/AJTEGVq5CmNLpj54f75vIZrjYQeeBhkulDSR3o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.crl
rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0fEVgFDfWEgWyv7QGfO0i6358E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914AA99, serialNumber=6747C45601437D61205B2BFB4067CED22EB7E7C1
Validity
Not Before: Jan 25 06:45:31 2026 GMT
Not After : Feb 1 06:45:31 2026 GMT
Subject: CN=6975bc0c-5d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4e:35:6a:d3:19:6a:39:e5:8b:a8:dd:73:79:
9b:b9:6b:a4:d8:ef:a1:5e:2b:66:2d:7f:b0:ce:98:
41:55:42:7e:5a:3d:28:d8:22:1f:f5:44:16:cd:0d:
8d:a1:05:c5:09:91:23:db:8e:98:ad:a2:6e:55:cc:
38:64:38:47:b6:b3:d1:8b:3b:0d:ea:82:7b:54:75:
fd:60:fa:f7:3b:39:6a:11:4b:1a:82:68:03:b1:c4:
40:a3:3c:3e:ce:8e:16:d6:72:c5:96:18:db:97:d1:
28:3e:44:ec:99:db:73:0c:28:1b:4e:7d:95:64:0f:
c2:81:1f:f8:62:ce:64:b5:75:4e:d6:55:98:ec:9e:
58:d6:a6:f9:54:8d:f7:f0:70:fc:39:51:65:8b:c3:
4d:40:eb:95:c7:24:0f:51:8d:89:f4:17:1e:76:ac:
7b:74:8a:a8:47:5a:7d:5e:ea:87:86:0f:74:5c:c8:
91:33:1c:81:c8:1e:12:2c:b6:ee:56:31:05:59:be:
44:92:33:39:2b:60:07:e9:e4:54:8d:d9:1e:55:1b:
4c:60:4b:e4:2f:8e:d6:93:ec:5c:db:19:f6:ae:da:
0c:af:59:b0:46:86:c9:0d:82:45:d6:e5:a7:70:f8:
78:e2:db:ea:15:c2:49:e7:4d:6b:d8:47:d9:80:cf:
94:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:80:DA:97:06:E5:D0:30:3B:58:F1:B5:09:7B:51:C8:7E:0D:66:45
X509v3 Authority Key Identifier:
keyid:67:47:C4:56:01:43:7D:61:20:5B:2B:FB:40:67:CE:D2:2E:B7:E7:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0fEVgFDfWEgWyv7QGfO0i6358E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AA99/0F37C886C2D311F099C06386C4F9AE02/Z0fEVgFDfWEgWyv7QGfO0i6358E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:64:80:6f:76:24:ea:93:a6:3c:ca:4f:70:86:85:c5:f7:ff:
30:8d:0f:71:a6:a0:a7:ba:34:a9:dd:04:b0:d8:46:41:80:1f:
9c:0e:e3:2b:fd:af:fb:c7:ff:02:91:ad:af:f6:5a:63:b3:fb:
c2:59:82:55:4c:0f:e8:79:fb:7d:19:9c:27:f8:79:98:44:4f:
d8:3c:78:38:6a:3b:f0:64:7b:d9:1b:be:c3:30:8c:75:fd:27:
d6:e0:15:d4:bd:2f:22:99:19:00:0e:ea:54:c7:80:6b:d2:6b:
f9:ad:6c:42:4a:06:2e:d7:92:1b:ae:0a:46:6e:64:b7:9e:cf:
e3:fd:e0:93:45:6d:40:8c:8d:ae:80:bb:ce:b7:d3:c2:76:e0:
88:ef:0c:89:8c:ac:cd:91:4d:8c:41:eb:59:d5:3d:4e:ce:73:
32:39:92:e2:de:4d:46:a1:a8:34:92:36:29:5f:02:e0:28:b0:
55:c9:ed:4b:2b:cd:61:11:2f:6e:bd:16:01:08:eb:e9:bb:52:
e2:35:e1:2f:a8:ed:72:7c:76:38:1a:c8:04:df:d0:2a:63:f4:
96:4e:98:67:e3:b6:ad:99:74:59:8b:b9:cd:cd:98:4d:de:c2:
8a:da:18:21:30:db:92:4b:bd:8a:3e:a5:85:1d:b9:9a:b3:07:
cb:82:dd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:45:25 2026 by rpki-client