This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft
File: zq0j_kiI4YaHN4QBinb5TuiJdVE.mft (raw, json)
Hash identifier: OuFD7I+2yDU5YiX51QaOGb4Up/N9SFtJsq+yXLfo1FI=
Subject key identifier: 51:1E:B1:A8:4F:88:56:0A:F9:20:8A:C4:F3:96:EA:A5:29:07:56:59
Authority key identifier: CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51
Certificate issuer: /CN=A9113585/serialNumber=CEAD23FE4888E186873784018A76F94EE8897551
Certificate serial: 076A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft
Manifest number: 0763
Signing time: Tue 06 Jan 2026 21:00:59 +0000
Manifest this update: Tue 06 Jan 2026 21:00:59 +0000
Manifest next update: Tue 13 Jan 2026 21:00:59 +0000
Files and hashes: 1: zq0j_kiI4YaHN4QBinb5TuiJdVE.crl (hash: IWXLrN0K+NRV1vEPNAnK8bXQidTvuLXDAA9y3+j0hgg=)
2: DFF01B484A2B11EB8609481FC4F9AE02.roa (hash: QxDHjOQ9h0AW1vKi1w4KSIHgeJrRV9wKcfKqmMmz5UM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl
rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Jan 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1898 (0x76a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113585, serialNumber=CEAD23FE4888E186873784018A76F94EE8897551
Validity
Not Before: Jan 6 21:00:59 2026 GMT
Not After : Jan 13 21:00:59 2026 GMT
Subject: CN=695d780b-c93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d3:1e:05:2a:e2:83:a1:50:f9:84:4a:33:64:
80:a7:87:55:c4:ce:1c:03:12:ce:40:28:bf:a4:82:
24:cf:85:75:7a:e1:d2:67:ad:c0:ab:fa:c9:1a:fd:
34:db:ef:d5:d2:6f:2c:51:14:4a:17:fc:d4:7c:ca:
f1:b7:e1:13:11:cf:1c:73:85:e1:fa:bd:bd:22:52:
cc:56:3a:6e:60:12:11:a5:82:97:6d:05:51:1e:c6:
22:c4:af:ac:c2:2f:21:4e:26:88:6f:bc:c6:50:c5:
b9:a2:cc:70:49:cf:98:83:6c:53:81:9f:28:be:07:
3b:bf:09:83:a8:98:a0:f6:fb:ce:44:8b:15:fe:9b:
e8:fc:a4:8d:a4:6f:89:b6:95:db:27:e2:81:20:06:
90:70:79:5e:89:ad:1c:cb:c3:5d:ee:fb:38:84:68:
63:b5:25:a5:1c:2d:ad:9a:17:04:ce:0b:e9:7b:8b:
f3:9d:05:d4:b5:90:c1:62:70:b8:96:7e:48:94:b4:
db:d4:54:7c:f6:7f:e4:93:21:58:c4:3b:e5:6e:c8:
7f:50:df:4a:6a:ef:77:ec:da:a4:f6:60:b8:9f:76:
18:88:49:bc:ca:56:e4:95:97:2b:c7:87:a2:47:40:
22:7c:16:20:f9:b1:4a:c9:91:f3:9c:b4:50:47:01:
2d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1E:B1:A8:4F:88:56:0A:F9:20:8A:C4:F3:96:EA:A5:29:07:56:59
X509v3 Authority Key Identifier:
keyid:CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:55:c0:e1:99:29:48:4e:5d:eb:c0:de:42:9e:16:87:a2:3c:
1e:07:d0:1f:2e:2a:b8:35:0f:73:86:5d:39:49:ea:67:31:db:
b4:46:a9:d4:ab:fd:96:d6:fa:95:66:27:6a:66:ee:35:7a:14:
4a:73:03:10:ae:ca:39:1e:3d:64:5f:89:20:d7:c9:4e:a7:b6:
5f:40:e3:87:46:f3:9b:20:a8:3a:57:01:8c:5c:08:84:a1:32:
7e:f2:e8:4a:60:06:29:65:8b:f4:8f:84:96:a8:68:92:04:32:
d5:4b:50:0f:79:52:2c:11:21:52:c6:98:25:ab:60:d6:ed:9a:
30:c9:27:1e:73:f1:82:0a:78:55:a4:e1:63:1a:39:28:dc:4e:
09:63:74:89:3c:cc:1d:f8:b7:8a:bc:25:d0:39:f9:78:13:e1:
90:61:bf:33:17:50:7b:7c:c6:ab:3a:d8:ae:d1:c6:ad:3f:9b:
0b:f3:03:df:17:b7:37:ca:d7:a0:0e:1d:48:1e:04:84:03:f3:
7e:65:61:6a:c9:a1:86:a6:3f:89:63:35:6d:f9:24:e9:ba:4a:
2e:3e:c2:a5:60:d8:f1:46:ff:c4:c7:a7:5c:e3:c6:95:9b:fb:
b7:4c:e5:13:0c:10:53:46:c4:93:38:86:22:15:e0:00:4d:5c:
23:a8:fd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 10:37:34 2026 by rpki-client