This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft
File: zb-gptBh4f5wNLQPLuLktT3o_eE.mft (raw, json)
Hash identifier: rW0abZvp8b4KRq6/C69y/jcPGwPI+VrV6ew94ZKS2TI=
Subject key identifier: 47:4B:7C:7B:32:32:98:F0:4B:A8:1B:25:F8:C3:CA:19:9E:A4:E0:C0
Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1
Certificate issuer: /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1
Certificate serial: B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft
Manifest number: B2
Signing time: Sun 25 Jan 2026 05:18:20 +0000
Manifest this update: Sun 25 Jan 2026 05:18:20 +0000
Manifest next update: Sun 01 Feb 2026 05:18:20 +0000
Files and hashes: 1: zb-gptBh4f5wNLQPLuLktT3o_eE.crl (hash: e87jqDKtXl6nmBpZIW7Euw6kUHVwkLNTiTAifN2Wx90=)
2: EE851FDEEC0011EFADA98F2DC4F9AE02.roa (hash: KZc3kWyqAQjmnnK2FELTDuYJT89OESgBI+F0au91ywI=)
3: E7A90E38824011F0B9DA0749C4F9AE02.roa (hash: e7rYIU/XpTz58Lcq29fudlIz6AAycfkFxf2JSVpee3o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl
rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F98B5, serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1
Validity
Not Before: Jan 25 05:18:20 2026 GMT
Not After : Feb 1 05:18:20 2026 GMT
Subject: CN=6975a79c-05f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:0c:f0:5a:d2:97:11:fc:f1:15:ae:58:f6:
8d:9f:88:c9:e9:77:b1:5f:98:53:eb:54:18:d4:f7:
4d:ef:4c:6f:05:be:61:7d:41:d6:3d:f8:fb:df:d3:
20:ee:cc:82:a7:bb:9d:6b:eb:2e:4f:a8:a2:1d:02:
71:a8:93:47:92:8c:7f:3c:28:9f:d3:2e:4a:c3:f7:
9a:8d:53:5e:32:f8:11:58:f4:5e:ce:17:76:eb:cb:
90:9a:ad:54:04:b1:82:79:c2:ae:12:4f:f4:cf:59:
e7:9c:f0:ab:3e:9b:05:89:f9:bb:b7:08:9d:b1:8a:
98:31:4e:22:fd:77:9e:cb:f4:9e:28:f5:d6:98:eb:
55:74:34:f4:9d:f4:fd:2d:6d:25:ef:ed:3c:5a:8f:
fb:ed:e8:01:5f:99:80:a9:7d:26:0d:11:ea:8c:89:
4a:82:ce:9f:bb:94:33:9e:58:6d:0b:89:14:6e:8a:
2d:c7:9d:df:c0:9d:7b:43:3a:23:25:74:80:0f:d3:
c4:bf:67:09:d4:2f:c6:b8:a2:5e:07:f4:f6:56:29:
fe:25:a4:1d:24:84:1f:f5:0b:cc:76:a1:c1:ac:be:
c8:5a:e9:fd:86:7e:66:4b:b0:c4:c6:88:5b:82:79:
75:32:d3:8f:13:cc:75:1e:00:b2:e3:45:e7:55:ee:
f4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4B:7C:7B:32:32:98:F0:4B:A8:1B:25:F8:C3:CA:19:9E:A4:E0:C0
X509v3 Authority Key Identifier:
keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:30:f0:72:72:59:b9:31:17:39:93:3d:0f:e5:72:7d:fe:af:
2b:70:25:2f:71:8f:c8:a6:63:2b:ff:67:d8:59:40:41:72:79:
00:02:04:cf:9e:76:c7:2c:99:b2:a0:dd:ca:ab:60:ba:ef:3b:
e3:a2:e7:0d:3a:76:b5:66:bf:af:95:bd:0d:3f:33:81:e8:15:
44:10:93:43:0f:4b:17:34:5a:5e:bc:8f:bb:b0:87:6f:85:04:
75:77:31:58:ed:03:67:71:bc:bd:0d:bf:9a:01:0b:26:1c:89:
6a:d1:99:4e:28:13:8b:dc:bc:43:8f:07:d9:fa:43:47:38:81:
c0:bc:94:72:b9:7d:fb:74:91:ab:c0:03:0d:e2:51:3c:09:7f:
90:97:59:d3:ee:ba:cc:45:db:ac:c1:85:a8:9a:7c:6a:08:1c:
2d:49:e7:db:36:cd:df:ea:7b:3a:e0:e0:59:8b:b7:8e:5c:f6:
b6:05:c1:c5:e8:61:b8:db:3a:36:56:aa:4d:54:2f:75:84:1a:
54:65:51:d7:3f:ff:ad:56:e5:df:41:0b:34:29:14:ad:aa:cd:
2e:1c:89:96:95:b8:b6:69:5c:30:25:0d:51:eb:06:a1:c9:70:
1f:4f:19:bd:e4:b2:68:ff:bf:06:b4:75:bc:6b:d3:8f:d5:dd:
32:58:6e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:31:01 2026 by rpki-client