This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
File: zuSHZKosFvdaBnJE66WGaXThztY.mft (raw, json)
Hash identifier: kq3YrmvmvErTFfXf8rP7nKxOon+5VUhkYtr4xKsKmxM=
Subject key identifier: BB:57:EF:DB:3F:DD:D9:5B:39:F6:29:18:F3:60:BF:A0:4F:E7:35:77
Authority key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6
Certificate issuer: /CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
Certificate serial: 010E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
Manifest number: 0109
Signing time: Tue 27 Jan 2026 04:16:10 +0000
Manifest this update: Tue 27 Jan 2026 04:16:09 +0000
Manifest next update: Tue 03 Feb 2026 04:16:09 +0000
Files and hashes: 1: zuSHZKosFvdaBnJE66WGaXThztY.crl (hash: hWPcZgZXj/iqrKsXs61oRSm0qtAc7HnYqx8DWCu6mgg=)
2: 9B22AC1269F611EFA7665A51C4F9AE02.roa (hash: KhTZGp8krCmWIeV1MjnilFIIicvKTA9kclTUkxcftdk=)
3: D4BAE68E853311F0AC0D4852C4F9AE02.roa (hash: tLT0yEhePGIlO1CJGs9BSo7w/4wYDa+u843KrFx+LWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl
rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 04:16:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270 (0x10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
Validity
Not Before: Jan 27 04:16:09 2026 GMT
Not After : Feb 3 04:16:09 2026 GMT
Subject: CN=69783c0a-7262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6d:41:48:0a:3e:7a:f4:19:95:cc:5e:60:e4:
69:18:56:99:81:56:b6:c5:bf:3e:1f:ff:da:eb:63:
e3:40:00:9c:62:3f:0e:2b:e5:ed:d8:fc:1d:21:1c:
38:3f:c6:b7:5a:38:e8:98:4a:f0:21:96:d4:b3:cb:
b4:f2:d2:49:15:a2:d1:4e:a6:53:bc:01:9c:bf:91:
20:67:72:d5:88:ed:47:6a:ee:22:01:c1:f0:e3:75:
bb:3d:32:13:82:8f:73:4a:6b:b4:f4:6f:d9:9c:fd:
fb:a4:2b:9d:39:04:35:46:eb:57:79:0f:41:66:c6:
41:41:84:60:79:d0:fb:95:9e:af:e7:86:af:34:39:
bc:14:77:80:b5:9f:9b:4f:0c:ac:9c:98:b4:5f:d8:
95:7d:4d:45:34:89:d5:fa:c9:a6:e0:4e:d7:1d:c2:
af:8b:c1:3e:84:1b:d5:45:9a:a3:5a:d0:e8:d8:48:
28:fb:cc:41:fd:53:f4:5c:88:69:09:a1:0f:4e:fa:
e6:ee:93:75:8e:0c:86:c2:5d:da:4f:99:ed:7a:d7:
ca:19:b3:8c:9e:0c:f4:5e:b4:43:96:5c:65:95:3e:
a2:cc:25:04:88:21:14:fa:6e:b2:d8:30:ee:ef:0b:
eb:4f:a3:3f:20:b5:b0:e8:b7:da:f6:5a:bc:54:29:
54:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:57:EF:DB:3F:DD:D9:5B:39:F6:29:18:F3:60:BF:A0:4F:E7:35:77
X509v3 Authority Key Identifier:
keyid:CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:45:4f:ed:7c:1e:e3:34:37:25:d9:19:3e:47:2a:75:1d:20:
57:d7:85:73:fb:43:ff:b7:e1:6e:76:1d:59:f5:fb:de:c0:5b:
e9:0b:4a:03:58:34:da:c2:75:92:41:11:84:46:d5:31:e7:a8:
2f:c9:e4:67:c3:df:d6:8d:0c:44:33:d6:26:58:fe:46:27:06:
ec:53:45:70:ec:6c:1a:d8:9d:4d:45:e8:26:0a:0f:28:ea:8e:
02:21:3e:7d:fc:4e:f9:ed:dc:8e:ab:75:ec:09:5b:82:05:96:
f3:57:d0:ae:6c:6a:b7:03:87:8e:7a:5c:b4:d3:9d:56:01:81:
4f:22:93:c2:f2:7b:a9:f1:d5:04:8d:a0:b7:69:fb:5b:09:3f:
c9:4c:03:f8:d3:0e:e4:ee:f6:76:40:50:30:e9:53:07:68:28:
8f:2d:7b:8f:0d:fb:b8:95:5b:a4:8a:54:64:51:50:d7:e6:44:
b8:49:52:87:5f:ce:9f:b3:33:cd:43:2f:19:9f:6c:7a:0a:8c:
c4:c1:88:c2:6b:5a:65:fe:f1:de:e3:e5:27:f7:c7:48:e9:aa:
89:c6:3f:b1:21:78:d9:0c:16:73:6c:09:f3:91:00:03:71:79:
1a:79:bb:2e:b9:40:ed:3b:a0:7a:23:5e:40:e4:b8:ea:7c:94:
26:74:eb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 15:21:13 2026 by rpki-client