This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft
File: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft (raw, json)
Hash identifier: 6HzAGRMvtQMQTsUifGNaBcNrDpgxbDd8cWXrl6yM7CU=
Subject key identifier: E8:C1:7E:AD:32:4A:8D:44:93:45:4F:14:81:95:1A:36:76:88:7D:5F
Authority key identifier: CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88
Certificate issuer: /CN=A9172951/serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088
Certificate serial: 06B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft
Manifest number: 06A6
Signing time: Sat 10 Jan 2026 21:39:38 +0000
Manifest this update: Sat 10 Jan 2026 21:39:37 +0000
Manifest next update: Sat 17 Jan 2026 21:39:37 +0000
Files and hashes: 1: zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl (hash: tsSYP7FwcmR3mxUgT7n27ehW7H1A1/hQnwiGghVaOu4=)
2: 8C3B5858B6BD11EEB6F43F4CC4F9AE02.roa (hash: KbTl8WY9SQDsubKxdjhxqyTiEQeQg0vsl/ctYNI2Kq4=)
3: 8D013D48B6BD11EEB6F43F4CC4F9AE02.roa (hash: Hjl8pcMRD52aibFu4i1dUZx1uGtlMzkhKeTwk7egnPs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl
rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 21:39:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1713 (0x6b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172951, serialNumber=CEF9C57E84B2EA5A6FA3D0E456330FB7A546F088
Validity
Not Before: Jan 10 21:39:37 2026 GMT
Not After : Jan 17 21:39:37 2026 GMT
Subject: CN=6962c71a-e33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:c9:2a:7c:cc:22:cd:a0:6e:c5:af:df:3f:
66:d4:81:80:47:18:c7:68:f3:23:f5:ec:80:bd:64:
f8:52:6d:1c:ff:0d:f0:8e:96:fd:b2:d8:3c:c4:f3:
8d:6b:33:07:6b:b4:54:5a:aa:76:31:6c:48:a7:b3:
5e:68:4a:29:08:b1:42:2a:95:38:83:b6:b6:ae:84:
44:4a:37:4e:87:4e:8f:44:39:c1:33:e3:2d:a4:3f:
76:3a:fc:0f:fb:2d:24:c6:fc:9a:23:72:52:0b:6f:
33:58:36:4b:cb:07:c1:c7:63:dd:96:8b:b6:04:26:
6e:06:1b:b5:14:5f:b0:5c:6f:e0:88:be:14:63:74:
6c:8e:2d:3b:0c:98:c2:ac:3c:98:9e:26:d7:69:4a:
43:ff:b3:68:60:22:00:1c:c1:57:74:e9:3f:34:4b:
94:3e:b5:b8:d6:32:f2:7b:55:03:03:80:71:48:7f:
87:e6:9f:a3:d2:c1:bf:09:e7:36:af:9f:27:7b:b6:
8c:d2:62:dc:70:7e:5b:61:b2:3b:ec:83:f3:8c:2b:
2a:c6:07:78:33:3f:e9:40:1f:89:88:18:94:af:46:
44:b8:95:1d:f2:ee:7c:b2:fc:9d:26:5d:36:00:b0:
6d:b4:00:3c:c6:18:95:f3:98:c4:93:1b:35:56:e7:
cb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C1:7E:AD:32:4A:8D:44:93:45:4F:14:81:95:1A:36:76:88:7D:5F
X509v3 Authority Key Identifier:
keyid:CE:F9:C5:7E:84:B2:EA:5A:6F:A3:D0:E4:56:33:0F:B7:A5:46:F0:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172951/9A097D8A960311EBB85DB340C4F9AE02/zvnFfoSy6lpvo9DkVjMPt6VG8Ig.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:76:64:11:ff:99:9c:e6:8c:14:94:52:1d:3f:d8:6d:be:83:
2a:45:f9:08:4d:d2:f7:78:0f:56:95:1a:7d:1e:b2:fd:43:af:
20:be:35:3b:e6:8e:f8:d3:ea:f7:20:d6:e5:4b:71:15:5d:0e:
66:c6:4d:07:88:0d:41:6d:7e:0f:3d:bc:91:54:24:bb:01:62:
84:41:19:06:45:90:32:f3:70:8b:1a:42:bf:eb:a4:fc:6d:b4:
b7:f0:4b:0b:a9:21:b5:a4:f4:47:58:a7:d2:9f:38:59:a0:78:
df:30:e2:d0:3d:be:f1:97:7d:1c:53:52:6d:2e:a2:d2:ac:5e:
fc:a1:c3:8f:64:64:3f:84:8b:b0:20:37:e5:87:39:cf:a2:f0:
3a:6a:45:1e:73:2b:a2:77:7a:34:0e:43:64:ac:84:70:4a:d0:
41:18:e8:57:2a:f8:0d:a5:79:9a:4b:89:e5:a4:e5:c7:bc:4c:
a0:32:e0:8a:3e:09:f3:69:d3:a2:35:1b:33:db:d7:e5:d9:59:
61:59:3f:3e:c3:28:17:dd:8e:e3:d3:54:9b:cb:23:57:f9:35:
79:bf:ff:51:e2:eb:d3:14:25:ab:33:c9:ac:ae:fe:95:59:f2:
14:3d:cc:f7:04:29:65:a4:67:08:de:6c:55:20:dd:6a:9e:a3:
03:b3:e4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 14:28:48 2026 by rpki-client