This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
File: zq7A6H2VhStEwGE5VUa34MHRHFc.mft (raw, json)
Hash identifier: FxjWxaz3M6lYsT8Z2+8eeAx5PUAnCoaWT2sHe5WrU0U=
Subject key identifier: 18:80:89:8B:3B:A0:DF:96:38:94:2D:71:EC:D0:D6:31:4F:69:0A:02
Authority key identifier: CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57
Certificate issuer: /CN=A918B909/serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
Certificate serial: 0B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
Manifest number: 0A
Signing time: Fri 23 Jan 2026 07:05:37 +0000
Manifest this update: Fri 23 Jan 2026 07:05:36 +0000
Manifest next update: Fri 30 Jan 2026 07:05:36 +0000
Files and hashes: 1: zq7A6H2VhStEwGE5VUa34MHRHFc.crl (hash: hrNH1OZ5wqeQS3LIhNvYalXV75XbxkGFVNtb+k7zKUs=)
2: F70E4B8EEBC911F0BD3A2F28686F56BC.roa (hash: LLw62Gox1oec8YyHT8F63yZd64/kKLLf6S16uAYsnpQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl
rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 07:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B909, serialNumber=CEAEC0E87D95852B44C061395546B7E0C1D11C57
Validity
Not Before: Jan 23 07:05:36 2026 GMT
Not After : Jan 30 07:05:36 2026 GMT
Subject: CN=69731dc1-336f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4f:d3:3d:69:bd:47:16:c4:ba:97:ff:42:e5:
61:fa:0f:ff:87:fb:43:92:56:e7:ce:52:bd:a9:8b:
38:09:a6:de:28:db:78:66:12:2c:34:85:61:8f:ac:
0b:5a:e7:84:61:5a:d8:d0:e8:7f:28:5d:aa:69:1c:
2a:e9:7b:05:f6:17:63:94:d2:6a:42:f6:dd:63:e3:
0e:df:35:dc:7c:49:73:05:39:87:2f:e2:3b:5c:d3:
2c:b1:3a:05:47:43:cd:bb:56:8e:06:d7:c9:6e:91:
35:04:12:60:3e:1b:52:0f:eb:bb:97:7e:fc:62:f6:
50:07:16:d3:69:28:60:da:ee:c5:10:25:ff:c6:5e:
59:29:e9:c6:d9:cb:7f:57:49:47:7f:7d:2a:3a:73:
34:fa:75:11:82:37:f9:58:70:0a:81:03:49:3f:a3:
a5:48:18:0c:db:8a:e5:f7:25:60:8e:3c:3b:a0:37:
5e:e6:f3:dd:bc:25:19:62:02:9e:a6:94:d4:f4:ee:
7b:a7:71:07:58:e2:9a:18:5d:04:f7:39:8d:21:7f:
b0:fb:58:7b:28:b0:b1:20:dd:81:72:15:2c:a9:ed:
8f:39:70:53:75:90:7f:f6:0c:d7:f1:81:5e:ec:7e:
ec:29:ad:2e:8b:bd:b2:8f:68:97:88:e3:9c:a6:3e:
e7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:80:89:8B:3B:A0:DF:96:38:94:2D:71:EC:D0:D6:31:4F:69:0A:02
X509v3 Authority Key Identifier:
keyid:CE:AE:C0:E8:7D:95:85:2B:44:C0:61:39:55:46:B7:E0:C1:D1:1C:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zq7A6H2VhStEwGE5VUa34MHRHFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/5C2D1064EBC911F0936EDB83676F56BC/zq7A6H2VhStEwGE5VUa34MHRHFc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:15:df:ea:86:cc:9c:ca:2f:f9:8e:a6:2e:50:43:fa:82:a5:
5e:7d:3b:98:2b:4c:bb:62:e9:61:96:3a:2a:27:19:0f:aa:a9:
38:aa:5d:9b:cc:7f:39:37:88:cf:e3:37:56:07:14:3b:b4:45:
c8:63:5e:52:e1:1e:67:0e:57:01:89:2a:11:13:40:de:00:10:
67:45:e4:e2:24:5c:69:c9:73:88:34:f1:74:f9:97:83:dc:8a:
6f:d3:e9:dc:83:62:77:82:65:9f:5b:48:da:31:dd:2b:76:fc:
7c:c1:4e:e6:b4:5e:f8:af:11:77:27:a9:96:97:3b:38:6f:5d:
79:c4:31:a9:44:ff:70:a4:ad:0c:ee:86:0f:bc:50:e5:72:3f:
22:62:05:93:04:22:65:e7:35:cb:67:82:7f:60:5a:7d:2d:13:
b2:d6:5e:89:59:eb:d2:7a:3b:10:c2:a1:a4:81:23:52:a5:aa:
90:8d:e4:bd:9c:94:16:b3:b5:03:6e:a6:9e:87:e5:3d:36:33:
0c:4f:13:b1:fa:77:12:59:ea:c7:91:4f:be:28:ef:0c:9f:3f:
b5:93:05:3c:4f:2d:0d:9d:c2:51:7e:41:9e:66:2d:2d:7b:8a:
10:53:3e:b1:46:98:71:19:be:e5:b4:19:d8:a8:d9:9e:44:ef:
c5:fb:d2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:51:47 2026 by rpki-client