This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft
File: HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft (raw, json)
Hash identifier: 51678z8UWA2xluTAoM/47hFsfV25444tTcqjMVy85JE=
Subject key identifier: 93:62:7F:5E:CD:67:8A:FB:1D:DB:B4:B0:42:38:DE:BD:77:69:7F:8A
Authority key identifier: 1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9
Certificate issuer: /CN=A918742C/serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9
Certificate serial: 170A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft
Manifest number: 1700
Signing time: Sat 24 Jan 2026 16:23:58 +0000
Manifest this update: Sat 24 Jan 2026 16:23:58 +0000
Manifest next update: Sat 31 Jan 2026 16:23:58 +0000
Files and hashes: 1: HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl (hash: W+GUShCqxhntLH0qztv/4HrD7WQw8pb7VUWSRz6X3pQ=)
2: 8DFAE1DA019D11E8A7804A1EC4F9AE02.roa (hash: 85zAa/NDU6R+uxxVwM+5q1AHLvo6RcZxo+KYtDUWQJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl
rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5898 (0x170a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918742C, serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9
Validity
Not Before: Jan 24 16:23:58 2026 GMT
Not After : Jan 31 16:23:58 2026 GMT
Subject: CN=6974f21e-0343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:be:24:72:ae:5b:c7:32:46:02:29:c3:f6:e2:
d5:0d:86:fe:30:0a:25:0c:13:3f:d3:0f:89:6d:09:
5f:2f:be:50:50:41:ce:b4:04:f9:94:21:05:dd:34:
4a:41:04:b2:89:e8:14:95:4f:8a:bc:6e:23:ca:ca:
50:b1:76:63:0f:76:f9:79:eb:41:14:5d:6d:99:58:
55:24:8e:29:70:46:e9:85:ab:14:75:ec:42:7c:2d:
34:3c:18:07:88:63:0f:b3:04:29:4d:2f:f8:64:5c:
4c:a0:df:e5:9c:e6:55:57:c0:17:8c:66:8f:9a:81:
e4:1a:6d:44:99:e9:56:b9:7e:e5:c4:d4:8c:ed:28:
36:76:fb:02:df:23:7a:fb:8f:af:10:65:28:84:3f:
a4:9f:09:b9:bb:54:b9:2c:9d:e1:71:5a:97:be:39:
18:6f:54:2e:ed:e3:12:c9:ec:5f:c1:1a:30:2f:68:
71:76:b0:44:9f:ee:79:5c:93:a0:4a:e3:fe:b2:c9:
6b:84:a0:d6:2c:62:e9:6c:af:aa:8a:31:e8:b9:41:
60:bb:eb:a6:ca:f7:50:14:8e:d5:84:51:30:ed:f8:
5a:1f:11:ca:f7:8a:10:bb:d8:91:78:a1:19:9d:05:
77:38:c7:55:13:b4:d7:63:d1:6e:c5:d8:cf:9d:77:
65:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:62:7F:5E:CD:67:8A:FB:1D:DB:B4:B0:42:38:DE:BD:77:69:7F:8A
X509v3 Authority Key Identifier:
keyid:1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:78:81:2e:46:74:36:f7:2e:50:a9:cf:d5:6f:6e:42:1d:75:
85:80:ae:44:71:bf:b2:45:e8:e4:33:dc:fe:13:d0:5f:78:c4:
ce:84:53:94:ef:ec:b2:13:67:c4:16:ba:52:e2:83:bc:68:0f:
e7:c9:ae:48:68:f4:e5:3e:e2:4d:5c:01:48:3e:02:75:5d:00:
21:d9:7b:14:6e:00:0c:e7:49:f1:6d:ef:2b:c3:3e:7c:42:fd:
9d:d0:f4:df:ca:51:47:0b:e6:f8:9c:b2:53:53:2a:56:9f:1f:
d8:35:22:a7:bd:a4:45:b7:cd:e0:82:77:73:a1:31:c0:14:9f:
ca:c7:f8:00:b5:17:6c:bb:1c:12:d7:88:78:2e:5e:fd:30:f5:
0e:e3:af:e7:8f:84:67:b3:e8:75:6e:6d:1d:76:f9:de:3c:3c:
7b:ad:e4:01:04:38:f7:67:f9:b9:7b:48:94:d1:ac:54:5c:2d:
be:e0:fa:e6:43:2e:56:60:d8:fb:2e:6e:7a:ba:70:8b:b0:70:
27:ee:74:c3:6a:76:23:2b:30:78:96:fc:e3:e3:06:72:73:81:
10:97:a7:0b:e5:d7:bf:18:69:dd:a3:c5:65:cd:1e:e0:65:87:
97:9b:7c:3c:6c:f4:c1:d5:ba:c4:e3:4c:43:6c:f4:13:1a:a2:
08:3c:ca:f3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc0MkMxMTAvBgNVBAUTKDFDM0Y5OUEwQzE4MkI1OENDNDVCODExMkYyOTFFMTJB
MTUzMzMxRTkwHhcNMjYwMTI0MTYyMzU4WhcNMjYwMTMxMTYyMzU4WjAYMRYwFAYD
VQQDDA02OTc0ZjIxZS0wMzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1L4kcq5bxzJGAinD9uLVDYb+MAolDBM/0w+JbQlfL75QUEHOtAT5lCEF3TRK
QQSyiegUlU+KvG4jyspQsXZjD3b5eetBFF1tmVhVJI4pcEbphasUdexCfC00PBgH
iGMPswQpTS/4ZFxMoN/lnOZVV8AXjGaPmoHkGm1EmelWuX7lxNSM7Sg2dvsC3yN6
+4+vEGUohD+knwm5u1S5LJ3hcVqXvjkYb1Qu7eMSyexfwRowL2hxdrBEn+55XJOg
SuP+sslrhKDWLGLpbK+qijHouUFgu+umyvdQFI7VhFEw7fhaHxHK94oQu9iReKEZ
nQV3OMdVE7TXY9FuxdjPnXdl5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNif17N
Z4r7Hdu0sEI43r13aX+KMB8GA1UdIwQYMBaAFBw/maDBgrWMxFuBEvKR4SoVMzHp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQyQy9GMjhDODlDNDAx
OUMxMUU4OTAzNUY5MTlDNEY5QUUwMi9IRC1ab01HQ3RZekVXNEVTOHBIaEtoVXpN
ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hELVpvTUdDdFl6RVc0RVM4cEhoS2hVek1lay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzQyQy9GMjhDODlDNDAxOUMxMUU4OTAzNUY5MTlDNEY5QUUwMi9IRC1ab01HQ3RZ
ekVXNEVTOHBIaEtoVXpNZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB5eIEuRnQ29y5Qqc/Vb25CHXWFgK5Ecb+yRejkM9z+E9BfeMTOhFOU
7+yyE2fEFrpS4oO8aA/nya5IaPTlPuJNXAFIPgJ1XQAh2XsUbgAM50nxbe8rwz58
Qv2d0PTfylFHC+b4nLJTUypWnx/YNSKnvaRFt83ggndzoTHAFJ/Kx/gAtRdsuxwS
14h4Ll79MPUO46/nj4Rns+h1bm0ddvnePDx7reQBBDj3Z/m5e0iU0axUXC2+4Prm
Qy5WYNj7Lm56unCLsHAn7nTDanYjKzB4lvzj4wZyc4EQl6cL5de/GGndo8VlzR7g
ZYeXm3w8bPTB1brE40xDbPQTGqIIPMrz
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:45:16 2026 by rpki-client