This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft
File: zmv7CPlShjUnqTwQ2jyn35ETrPE.mft (raw, json)
Hash identifier: /aj5fFILaEnwT5lK+eYbNVFV8Y0fONYRkgNqks4+FdQ=
Subject key identifier: 87:34:09:73:2F:C2:1F:66:7B:AA:24:1C:0D:8C:E3:16:D2:F0:5C:B4
Authority key identifier: CE:6B:FB:08:F9:52:86:35:27:A9:3C:10:DA:3C:A7:DF:91:13:AC:F1
Certificate issuer: /CN=A9182F86/serialNumber=CE6BFB08F952863527A93C10DA3CA7DF9113ACF1
Certificate serial: 0138
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft
Manifest number: 0136
Signing time: Sun 11 Jan 2026 03:42:53 +0000
Manifest this update: Sun 11 Jan 2026 03:42:53 +0000
Manifest next update: Sun 18 Jan 2026 03:42:53 +0000
Files and hashes: 1: zmv7CPlShjUnqTwQ2jyn35ETrPE.crl (hash: FXL+2FH8+tTUYJ641+bZmBL3pw1IdmrICIcLuhkxZkw=)
2: 027BBBCA12B211EF8197C737C4F9AE02.roa (hash: snx4H5KBXKLxlg5egCwWgVTyat0ib6lOIpzJTXz53aA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.crl
rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Jan 2026 03:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182F86, serialNumber=CE6BFB08F952863527A93C10DA3CA7DF9113ACF1
Validity
Not Before: Jan 11 03:42:53 2026 GMT
Not After : Jan 18 03:42:53 2026 GMT
Subject: CN=69631c3d-5677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d1:87:7d:ad:76:8a:cf:52:71:a5:a4:ea:6c:
4b:62:c3:c2:ca:8e:79:9a:bf:ed:a1:9f:88:9b:1f:
4e:d4:5f:7a:15:c0:47:79:c2:e2:24:fd:22:96:d4:
fc:13:ff:da:dd:5d:97:9a:0c:d3:cd:c3:56:32:ff:
66:8f:f8:3e:01:15:0a:fc:e5:a1:f1:00:0e:cd:28:
9a:dc:b5:0e:17:b8:d9:07:5e:f1:f7:d7:11:08:52:
cb:c9:f4:6c:b8:54:cd:73:21:42:63:72:61:55:0d:
2b:d4:3b:5d:1e:97:86:a3:98:b5:2b:67:3e:75:ce:
ef:33:b9:51:b0:b3:6a:f2:7d:5d:39:60:15:50:71:
08:7c:2b:d2:6c:02:a3:25:78:98:81:b0:9c:3d:b9:
23:d2:fe:a5:10:6a:3f:46:6b:1d:89:52:56:5e:bd:
21:ef:f6:00:8f:93:d3:0e:82:81:f2:6f:19:09:69:
b1:5a:cc:1b:b2:77:58:53:a2:24:ca:1f:19:bd:c3:
bf:3c:47:f1:94:bc:7c:5e:b5:81:70:82:b1:4d:79:
d8:e9:29:7d:1c:a4:41:15:d8:f5:30:5b:12:37:8f:
4b:b6:d0:c8:b4:7e:d1:80:af:fd:45:be:05:60:5d:
f7:58:8f:36:5b:a3:df:57:92:30:ca:a0:12:c4:f2:
a9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:34:09:73:2F:C2:1F:66:7B:AA:24:1C:0D:8C:E3:16:D2:F0:5C:B4
X509v3 Authority Key Identifier:
keyid:CE:6B:FB:08:F9:52:86:35:27:A9:3C:10:DA:3C:A7:DF:91:13:AC:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmv7CPlShjUnqTwQ2jyn35ETrPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F86/0903DB9012B111EF92115036C4F9AE02/zmv7CPlShjUnqTwQ2jyn35ETrPE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:a9:4b:05:5a:90:e4:72:5c:09:46:8f:1e:6f:a6:0e:81:d7:
a0:3f:4b:55:0a:53:f8:c8:62:f5:1c:ce:c0:ba:fc:0a:38:48:
a6:c1:de:d3:75:0c:e2:95:9f:7b:ba:0d:fa:42:e5:f1:95:ca:
ce:71:50:b7:8a:23:a9:f1:6a:6c:34:42:46:3a:96:1d:94:18:
17:2d:53:b5:50:8f:3b:6a:3d:59:85:de:bc:31:14:05:cf:b6:
1c:3d:9b:32:76:0a:b4:46:c6:8f:41:94:86:ee:e1:fb:e9:2e:
57:cd:1d:33:9f:62:ca:80:77:88:30:97:98:f9:75:2d:e2:36:
83:f7:e4:6c:41:04:68:0b:4d:c1:a5:3f:9b:2d:b9:a3:0d:5e:
9c:6f:b8:8a:69:e2:f3:bd:96:ff:3c:9a:a8:f4:8a:8a:0f:7d:
6d:bf:80:2d:a2:af:6f:ad:07:84:29:75:a6:4f:d2:18:b8:15:
8f:12:de:bb:0a:68:2b:96:f0:a7:87:f9:68:2c:65:5b:b1:55:
fc:3c:ed:3b:84:8d:a9:39:bd:54:67:e7:d8:64:c8:1a:a4:4d:
5b:e9:c6:7c:76:a4:5f:38:3d:b1:b7:d4:c5:21:41:c0:21:77:
a1:b7:a9:82:05:4f:5d:f7:05:f1:4d:73:f7:a5:99:69:46:df:
0a:65:01:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 07:55:39 2026 by rpki-client