This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
File: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft (raw, json)
Hash identifier: /LBp2b8sv1rYTK7CwFDUIbM4k1W/WGYKI4sOVyhpj/g=
Subject key identifier: CC:32:ED:07:EB:62:45:FF:4D:5D:BE:42:8D:8E:26:84:71:6D:16:CC
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Certificate issuer: /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial: 01A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
Manifest number: 0180
Signing time: Sun 25 Jan 2026 03:25:14 +0000
Manifest this update: Sun 25 Jan 2026 03:25:13 +0000
Manifest next update: Sun 01 Feb 2026 03:25:13 +0000
Files and hashes: 1: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl (hash: n+YfFbvb8GDUY06453ZBqknkQU4hRf5LU+4remKVkLM=)
2: D43F20C6C70F11F0BEE61E6CC4F9AE02.roa (hash: fipJjxVQQqucnYRkrt/KQhZVIF8y9rvqf5C1ioWIVjk=)
3: E7F77E5E42E711EF8B9EF861C4F9AE02.roa (hash: xBAC2IeuuzKl82FU9KBewyyGYj38dZfZQ7//75oYBSo=)
4: 7BDC977E0AF011EF87265E12C4F9AE02.roa (hash: ESqolF4y5qDuTvymMR58zkbGmDho8m2vhFnhCpHR9XI=)
5: DD0545F6324A11EFA615F80FC4F9AE02.roa (hash: C0PtpzbGpwbpDFL/uYPMPp9j/9TP8PxpK7PTzvirT4A=)
6: BC26B7548CAB11F0BDAA8B67C4F9AE02.roa (hash: yTjA76KeDCsVYv0UnIasiwZD8KPOw92OzNyZSl311Yw=)
7: BDECB94CEC4F11EEB0B9B467C4F9AE02.roa (hash: uEBZBpPU5RsuDU0jiQ8sjI+ENEYJnx75tY0iKW3OWuQ=)
8: 5B4D02987E5B11F09260CE56C4F9AE02.roa (hash: IstPUkbFjM6rU7VueDJ0IDYmqIEAooyhlbMWvQsaLpk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424 (0x1a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Validity
Not Before: Jan 25 03:25:13 2026 GMT
Not After : Feb 1 03:25:13 2026 GMT
Subject: CN=69758d19-5406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3e:45:c3:37:7c:36:85:95:ac:43:17:2f:54:
0e:af:04:fc:df:f0:07:bd:d6:c6:4c:5a:87:bd:e7:
80:6b:cd:37:b5:ed:d4:cf:b7:b5:ce:fa:14:90:54:
6e:02:4e:7c:2b:8e:9f:3a:42:2f:2d:4e:b8:58:58:
25:ca:f6:88:23:51:9d:f1:76:37:83:bd:43:fe:c8:
9e:a6:94:8c:dd:84:93:5a:8d:06:24:ca:1a:7d:e7:
5e:f5:75:50:ab:b7:01:fd:c6:e7:59:48:04:85:2f:
80:ac:2c:ef:f9:da:9a:58:e3:ea:1c:4b:77:45:4f:
ad:cf:e7:4d:90:2c:b0:e4:e6:92:45:2b:d4:e9:b6:
04:cc:6f:4b:fd:80:dc:68:af:85:ac:4e:e0:d6:71:
a7:35:1f:f6:52:72:57:50:13:b8:a6:b0:dd:e9:5d:
4c:2b:17:ed:cb:4b:cc:a1:88:38:04:19:93:ad:c6:
60:45:5d:29:7d:0f:9a:66:18:0d:f8:27:e4:e7:8d:
6e:51:cb:cd:9b:38:90:85:a5:48:f9:4a:11:a1:d7:
d8:10:46:73:3f:98:e3:a6:d1:82:7f:7a:48:62:21:
26:95:ef:80:92:7c:d2:90:f5:9c:cc:42:78:f7:53:
11:c3:ba:42:bc:0b:d3:7e:dd:c6:99:61:72:68:ac:
fd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:32:ED:07:EB:62:45:FF:4D:5D:BE:42:8D:8E:26:84:71:6D:16:CC
X509v3 Authority Key Identifier:
keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:6b:fd:29:f4:84:e8:c3:b0:78:04:3e:43:46:33:29:45:f0:
86:95:53:02:60:69:eb:b4:76:6d:be:59:d0:81:8a:f6:92:c9:
58:e7:dd:ed:e6:d8:bc:ae:15:7d:2d:ff:83:f5:ff:ea:5e:a4:
0c:32:e3:02:97:fa:9d:c1:59:4a:91:83:25:a5:55:fa:64:8a:
f0:20:12:e3:47:43:41:a9:34:c3:ea:18:63:bf:f2:ed:40:f9:
d1:ec:70:0b:b0:e7:53:ab:82:14:f8:ca:6f:46:9e:a3:25:1a:
5f:fc:23:2d:ef:b2:64:24:4a:61:27:a2:fa:60:bf:ef:1b:f4:
d5:99:ee:f8:63:2a:88:48:49:4f:88:99:1b:49:a1:10:45:ac:
b4:55:83:23:55:af:de:d0:76:0a:a5:d7:7f:71:fc:b1:c2:23:
a8:21:03:24:7b:03:a4:e7:07:67:90:c4:a1:83:f3:76:21:3c:
8c:c5:98:35:6c:41:29:83:48:c7:59:ed:78:67:ff:4b:b3:4c:
f8:a8:22:c2:a3:6d:22:72:76:f3:6b:57:a5:ae:af:5f:65:12:
ba:05:e4:42:9a:ad:3d:74:1e:b6:ca:86:3b:e7:c3:e3:e2:33:
25:09:e5:5e:19:06:9c:57:40:50:84:54:fd:74:2d:73:a8:ac:
76:1e:e5:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUE3NzcxMTAvBgNVBAUTKDY0N0QwOTI3REIzQjE3OEUyRjY1NEEzMjY4NTU3RkU1
QjVENjcyOUMwHhcNMjYwMTI1MDMyNTEzWhcNMjYwMjAxMDMyNTEzWjAYMRYwFAYD
VQQDDA02OTc1OGQxOS01NDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0T5Fwzd8NoWVrEMXL1QOrwT83/AHvdbGTFqHveeAa803te3Uz7e1zvoUkFRu
Ak58K46fOkIvLU64WFglyvaII1Gd8XY3g71D/sieppSM3YSTWo0GJMoafede9XVQ
q7cB/cbnWUgEhS+ArCzv+dqaWOPqHEt3RU+tz+dNkCyw5OaSRSvU6bYEzG9L/YDc
aK+FrE7g1nGnNR/2UnJXUBO4prDd6V1MKxfty0vMoYg4BBmTrcZgRV0pfQ+aZhgN
+Cfk541uUcvNmziQhaVI+UoRodfYEEZzP5jjptGCf3pIYiEmle+AknzSkPWczEJ4
91MRw7pCvAvTft3GmWFyaKz9hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwy7Qfr
YkX/TV2+Qo2OJoRxbRbMMB8GA1UdIwQYMBaAFGR9CSfbOxeOL2VKMmhVf+W11nKc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTc3Ny8wQkE1NzJCMEVD
NEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0NHZaVW95YUZWXzViWFdj
cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pIMEpKOXM3RjQ0dlpVb3lhRlZfNWJYV2Nwdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QTc3Ny8wQkE1NzJCMEVDNEYxMUVFQTFCMzg4NjZDNEY5QUUwMi9aSDBKSjlzN0Y0
NHZaVW95YUZWXzViWFdjcHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAFa/0p9ITow7B4BD5DRjMpRfCGlVMCYGnrtHZtvlnQgYr2kslY593t
5ti8rhV9Lf+D9f/qXqQMMuMCl/qdwVlKkYMlpVX6ZIrwIBLjR0NBqTTD6hhjv/Lt
QPnR7HALsOdTq4IU+MpvRp6jJRpf/CMt77JkJEphJ6L6YL/vG/TVme74YyqISElP
iJkbSaEQRay0VYMjVa/e0HYKpdd/cfyxwiOoIQMkewOk5wdnkMShg/N2ITyMxZg1
bEEpg0jHWe14Z/9Ls0z4qCLCo20icnbza1elrq9fZRK6BeRCmq09dB62yoY758Pj
4jMlCeVeGQacV0BQhFT9dC1zqKx2HuWx
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:46 2026 by rpki-client