This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft
File: Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft (raw, json)
Hash identifier: sG610Za8WCGEMCl3prAVzqvAwcRuK555VqcKDG++NH4=
Subject key identifier: 0B:03:63:A2:D2:36:D4:EF:79:23:F4:DC:DF:A8:AB:9D:1C:9B:DF:83
Authority key identifier: 67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02
Certificate issuer: /CN=A9152EF3/serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02
Certificate serial: 0E4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft
Manifest number: 0E45
Signing time: Sat 10 Jan 2026 17:27:51 +0000
Manifest this update: Sat 10 Jan 2026 17:27:50 +0000
Manifest next update: Sat 17 Jan 2026 17:27:50 +0000
Files and hashes: 1: Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl (hash: qyoG1lmzDgLZIaqFK6egQ+otuUD/S83KOg4PPBPeEZU=)
2: E4AAD78CEFFE11E991390613C4F9AE02.roa (hash: pRdeyjIR5PJUpFPO2R7F1j82SKKC+YOZPiwCmzodVXc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl
rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 17:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3660 (0xe4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152EF3, serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02
Validity
Not Before: Jan 10 17:27:50 2026 GMT
Not After : Jan 17 17:27:50 2026 GMT
Subject: CN=69628c16-8c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:05:38:68:a6:47:da:98:e7:11:76:a1:0b:
09:91:a6:a5:dc:90:ed:5d:dc:e1:97:b6:4c:9b:18:
ba:a3:93:44:da:18:85:e9:59:f7:76:27:02:a2:a5:
6c:fd:a2:47:a3:3a:a9:f9:de:cd:a7:0b:67:dd:3c:
4b:19:f2:5d:e7:b6:b7:f9:91:7e:1b:86:2c:1e:29:
d4:64:04:3d:9f:de:34:98:22:fd:4a:38:c5:05:4e:
d5:54:dd:33:6b:23:0c:cc:e3:bc:ed:aa:c6:ff:a2:
dd:91:dc:7d:1a:b4:9b:d0:51:e2:a7:4d:02:fc:38:
d9:6d:57:e9:36:11:b4:15:8f:44:53:0c:b9:90:dc:
36:e6:69:84:a5:cc:d1:2c:25:0e:e6:35:35:74:18:
73:46:34:a9:17:da:b8:79:40:38:b3:a6:c0:25:23:
71:8d:cf:a9:2a:21:90:8d:f7:19:9b:16:98:7f:41:
e1:47:2b:86:af:c8:e4:b5:d2:3c:d3:69:54:ae:d9:
61:93:81:b9:ae:5e:b1:31:5d:c0:03:63:ca:00:d3:
bd:5f:f5:aa:fc:2a:b1:63:47:96:b9:7a:d9:ea:96:
54:cd:b9:68:c4:88:65:2f:f2:2b:ff:99:69:0d:e4:
4e:4a:f4:09:9f:20:49:38:96:92:ca:70:20:16:21:
68:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:03:63:A2:D2:36:D4:EF:79:23:F4:DC:DF:A8:AB:9D:1C:9B:DF:83
X509v3 Authority Key Identifier:
keyid:67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:b5:07:a3:06:0a:e5:8a:d7:b0:53:09:cb:87:41:9e:61:e5:
e8:a8:ba:28:e5:31:fe:37:b3:f9:56:94:7b:ec:cc:54:e4:1e:
f2:1c:09:b9:a6:90:56:14:1b:f4:6a:33:30:2a:d2:9e:5e:aa:
0b:da:19:95:0c:ae:ca:c1:1a:75:c6:e7:c7:8d:91:37:0a:68:
2b:86:e6:b5:0b:22:81:a6:a2:a3:51:47:08:c8:8e:fc:fd:8f:
65:59:47:c3:4b:7c:50:5d:3c:57:44:cd:2b:ac:7f:b7:6e:df:
bb:70:16:26:9a:49:c5:ef:c7:78:c9:6f:34:6f:f7:a0:1a:09:
0f:1a:9a:68:45:35:44:db:15:ed:eb:d3:ef:0b:d2:f0:28:31:
45:48:aa:d8:d3:7e:7b:6b:3d:08:47:44:32:4c:e5:8e:fb:1d:
73:73:17:e0:ce:cc:0a:c6:16:d2:b2:21:22:9c:c5:17:ce:a2:
d6:4a:54:6c:e0:07:99:ff:be:b7:72:da:f0:b4:55:31:ee:6b:
4d:ac:2e:54:e0:16:90:b6:60:e2:24:91:c7:3b:e3:71:61:9a:
9e:61:8b:80:84:04:2c:71:57:5e:98:79:f7:bc:0d:5a:15:fb:
ae:d7:b8:86:6c:54:3f:36:0f:9d:22:16:fd:1f:b7:1c:c1:7b:
07:1a:52:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:43:53 2026 by rpki-client