This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
File: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft (raw, json)
Hash identifier: A1mpVN0Ed/LTJoIfdK3RT99nT9oExbAVSarMlS6tQL8=
Subject key identifier: 46:13:37:ED:2E:EE:C8:C7:1E:76:C6:29:46:4C:3D:4D:62:8D:DB:4F
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 08A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
Manifest number: 0723
Signing time: Mon 19 Jan 2026 14:43:36 +0000
Manifest this update: Mon 19 Jan 2026 14:43:35 +0000
Manifest next update: Mon 26 Jan 2026 14:43:35 +0000
Files and hashes: 1: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl (hash: k6fb/qwIG3sXmWmh3UbiRocqWE0RhUb/XPXRsOC6aZU=)
2: 83EC44C8134C11EF81B18276C4F9AE02.roa (hash: 5ANX4i+xHd73YVIL+MJht9tnmiSuKsVd8JB7ZR2nfCI=)
3: 4A4A33C0661B11EFA314D413C4F9AE02.roa (hash: SO09lWc8oj56XbC1Qcew77xEM9+gwLydRegdmBpQ/n8=)
4: 757D79F84A8611F08884C659C4F9AE02.roa (hash: F1EBgEiUdYzV2e+yWXrqhHhe+wUROhuQQWSgIujXFuM=)
5: 38F85C12315611F0A6B1097AC4F9AE02.roa (hash: aH1eyR4zelYgbSxQWl1+s43L8Z0S9NRZsBc5Vhu/zpc=)
6: 7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (hash: teH8eTJSZtTBOVkhDhcUYpV1hXlakeK+9NJ0LKbAUag=)
7: 7E08719E390311EF9DD1A882C4F9AE02.roa (hash: 4s7EOK7fOyD0bh+PebzMoqJJ+Hie7EREL6lA7IpDGp8=)
8: 9C8302D0B3CB11F0A084D480C4F9AE02.roa (hash: x7DJdFRsn2uvip24+58sYGOPQUkDpJjhzraS1Xt2eqo=)
9: 811B1932742A11F0A5B14C0CC4F9AE02.roa (hash: eba0IhMDMP+niOYOsrZEeGYf5cPaLzt3Lu9IJlIWIVg=)
10: 74BA16C04A8611F08884C659C4F9AE02.roa (hash: 78WKR0aB90eg+DMuEsDjeSMy8OpsveQATPc6t2hqkwo=)
11: 5DFC320069CD11EFA0E6CC83C4F9AE02.roa (hash: lI/hYyE+1r7lE9y0qvmVwo9rcMGhKVHUG3jqAsXOD68=)
12: 2C3DCE420F7F11F0B174675DC4F9AE02.roa (hash: c4tmYlMY5sWJ0DujxCTdR6nU4mhqfELo+RFUBYJRcIg=)
13: 918746BAE5E611EF9D35130AC4F9AE02.roa (hash: nRgNkr+gTw6R30CcNPn7HUQ4QG5gUabxLibffFcQE4k=)
14: 9BCC2FB0B3CB11F0A084D480C4F9AE02.roa (hash: oBgzedyVQRed+He1xEj1MMwnzZqQIFejD7Liye4m3MM=)
15: 248A6CEA4A8611F0A25A1157C4F9AE02.roa (hash: 1cmDcY6sz+LunwCiA396UQFs5SUmwLc8yoDOnxtHNM8=)
16: 1BE87EF0F54511F0AFC43705646F56BC.roa (hash: 9qE5tH+GYYqFJwxWgzlrWBSGQqpmQPy8LrvB9rE1fSA=)
17: D36E1CE02A3211EFA7554C59C4F9AE02.roa (hash: S9Kc7cmkHRN82YJ6h3SdiY4GOfSfzom8HWLIg8mqYfQ=)
18: D716391C53CC11F0BC106B7CC4F9AE02.roa (hash: Xm6BtJp1Xv982dNe+cH86+8Hl8aLCGaqau9syDHGkl0=)
19: 5CAA8A02C05F11F08562CC0CC4F9AE02.roa (hash: LcPWm9ZDnNP1sDZFVkma2o5PQ6jPkVljqIjWid9fl7Q=)
20: 2A3B0CECF89E11EFBEB09C18C4F9AE02.roa (hash: 9NhxgmeB9d3FvwHBDgCqKyQC9U/lReRo4/VWdoQQNcM=)
21: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (hash: A3YSpdpMsFqyTGlHs/WDWrhzGpf2svgvrhesgE6eJ8g=)
22: A155AE68315611F0B557CE7CC4F9AE02.roa (hash: 5BpVn9FtCdONBy75a2ydQMg2la0Ia55Ovj0UXIycxcg=)
23: A241FA98315611F0B557CE7CC4F9AE02.roa (hash: 5oh8MNtfAPalsvWnm2UF2Pkprrdqs/9ddR2VFTpaQiE=)
24: 72DF94424A8611F08884C659C4F9AE02.roa (hash: 6Q5hxC3u92cNVFOzzPPEq/U2hdgGHeB2kCxpkP2ihE0=)
25: 73D33FA24A8611F08884C659C4F9AE02.roa (hash: o6TrwidKO00UNfXuzel+2emRHvmY5gCcZTOKQTqPke8=)
26: 2BB36B4E0F7F11F0B174675DC4F9AE02.roa (hash: pJb6vWrEK8AbvQaHM16naue6yxDiNpuJBWd0vzldJcA=)
27: DA3891D484AB11F0BEE30678C4F9AE02.roa (hash: tNL62qhE8vecNFJ8x8ufDRWVMLKpuaHL77dnrKR14ps=)
28: 9517317CDFD811F0B8B3FAFD526F56BC.roa (hash: hW/EOdfJpm7b8Mfhyah0mZlvXbd3DryDfNnkrETcIns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 14:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2212 (0x8a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Jan 19 14:43:35 2026 GMT
Not After : Jan 26 14:43:35 2026 GMT
Subject: CN=696e4318-57c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:04:fa:df:29:da:c2:e8:42:a2:c1:36:27:
8f:d7:72:0b:b9:f4:e4:c8:5b:d7:88:92:fc:8a:45:
77:08:b0:0a:cc:4a:a8:5d:f1:77:88:b4:2f:71:f1:
77:31:20:bc:e3:5f:9c:38:3f:26:98:c5:86:69:02:
56:d2:e3:43:b6:f9:58:0a:d9:1c:33:66:45:11:12:
2f:bb:cb:42:8c:23:95:1a:18:eb:76:f2:15:94:f1:
58:7d:e0:5c:35:94:a3:89:45:cb:6f:76:24:58:82:
51:18:a1:01:88:32:94:54:1f:af:95:81:2a:3e:fd:
ee:16:a1:ba:4a:08:21:e9:8b:cd:68:c4:f6:17:43:
87:81:3d:74:3a:6d:63:43:45:ec:d4:d5:00:b2:50:
e7:c9:19:aa:c3:01:d6:f6:fd:ac:3a:ad:9b:8f:75:
76:92:59:df:aa:06:19:b0:47:a2:a6:c2:f1:1e:2a:
39:35:cf:73:02:2f:d2:cf:b6:61:4b:89:75:3d:1c:
d8:a5:99:46:41:dc:4b:85:b2:4a:d1:b3:15:c0:e9:
62:92:2c:9f:a6:95:25:d8:52:2b:a0:75:98:f8:40:
9d:42:64:47:eb:24:e3:3e:4a:99:8c:c4:1d:53:f5:
07:b2:44:61:41:6a:a9:f5:8a:a5:7b:41:e9:bd:46:
c4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:13:37:ED:2E:EE:C8:C7:1E:76:C6:29:46:4C:3D:4D:62:8D:DB:4F
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:ed:b8:fc:06:1f:ac:a3:8c:fc:44:16:ed:4f:40:f6:7d:f2:
2f:45:49:ff:28:f1:16:46:da:61:60:cf:36:d2:ac:c8:56:e1:
12:c9:7f:1d:1a:fe:5b:4f:13:a0:c3:49:87:a7:58:cd:4c:6b:
11:23:64:e6:8e:de:ee:83:d4:85:cd:1c:eb:97:b6:58:a9:4b:
97:9a:65:2e:6f:24:b5:e7:ba:f9:30:7e:78:e6:f0:e0:d8:d7:
d9:33:b1:c2:3a:80:8f:b3:7d:e1:11:71:dd:7b:e8:43:ee:02:
e0:4d:1f:6f:8d:1d:70:82:54:be:75:30:9e:1e:d9:7e:de:95:
d9:55:b6:af:d3:c6:51:71:a2:99:61:22:57:12:ad:b5:1a:66:
58:d7:d5:3a:95:7e:5d:51:a7:98:15:0f:49:e4:e2:94:f9:f9:
ca:b2:6d:0e:9d:1d:73:80:23:a2:f3:89:bb:3d:58:b4:e7:bb:
de:3d:b6:c9:a5:d8:38:1c:1b:2b:5e:b1:25:fb:b3:14:0c:24:
d5:c3:ce:b1:91:36:46:6c:bc:f0:1a:3c:90:5d:45:6a:61:cd:
5c:88:c1:e4:f3:ca:8f:37:03:9e:32:ee:a1:35:98:81:bd:1d:
a3:62:c6:16:16:46:d4:24:94:d4:fc:2a:6e:bd:1f:e7:1f:19:
25:09:19:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:00:51 2026 by rpki-client