This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft
File: klUgH_qh5mcsBsLfbovhFYLML64.mft (raw, json)
Hash identifier: Irt/uu9TyTwlKLxrDJunbPQHpC2dNAz+r/4FecC07Go=
Subject key identifier: 89:F8:DB:EE:8B:1C:32:69:38:E4:4E:87:DA:7C:C3:2B:67:F9:17:CE
Authority key identifier: 92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE
Certificate issuer: /CN=A9112A7D/serialNumber=9255201FFAA1E6672C06C2DF6E8BE11582CC2FAE
Certificate serial: 02BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft
Manifest number: 02B7
Signing time: Sun 25 Jan 2026 00:36:51 +0000
Manifest this update: Sun 25 Jan 2026 00:36:50 +0000
Manifest next update: Sun 01 Feb 2026 00:36:50 +0000
Files and hashes: 1: klUgH_qh5mcsBsLfbovhFYLML64.crl (hash: Q1yBsjbpXAs+HZVKgo7FNcZRcaWNZz7A5TPaDpLkz7I=)
2: 6DE1A436246811ED82556323C4F9AE02.roa (hash: wBqvUEdJXS+W4twJcgw0kDbGssoYll+0BYZGvLl67rM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.crl
rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699 (0x2bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112A7D, serialNumber=9255201FFAA1E6672C06C2DF6E8BE11582CC2FAE
Validity
Not Before: Jan 25 00:36:50 2026 GMT
Not After : Feb 1 00:36:50 2026 GMT
Subject: CN=697565a3-c4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c4:5b:51:d4:08:1e:bb:a6:e5:8b:b4:cd:fa:
0d:66:c9:6e:11:69:16:76:10:74:8d:2c:75:e2:19:
1c:22:18:f7:d4:76:03:c1:5a:d2:f7:fd:af:69:96:
9d:3b:1b:6e:9c:66:40:c2:56:0e:1f:0c:31:38:68:
cb:6d:b8:22:b4:24:be:52:e6:c1:65:6d:49:0a:99:
ba:a0:cd:f9:92:1b:2a:0a:59:e2:cc:64:22:2c:55:
e8:f6:bb:9e:5a:a7:75:37:e8:f7:9f:48:32:e6:33:
2b:92:08:be:fe:75:19:d9:1b:d6:7d:21:e9:36:90:
ed:2f:4b:ce:65:88:32:2c:93:4d:8c:a9:d9:24:5b:
ed:52:1e:1c:72:d3:47:70:af:20:04:34:8c:97:7e:
16:de:53:64:d5:e1:04:d3:a0:45:4a:16:db:da:58:
f4:99:db:17:05:75:d5:a8:52:0f:17:09:fb:c9:1a:
25:4b:6e:8a:48:0b:a4:a4:99:8e:93:f8:a0:2c:42:
8e:96:84:2a:08:2b:24:b1:d6:23:8d:e6:37:09:c5:
74:68:7d:f3:b3:f2:fd:7e:2f:40:ce:d6:57:c7:48:
63:4e:71:f7:5c:0e:df:74:cb:06:4c:85:3a:31:f0:
c1:d8:1b:06:76:d2:d5:89:e2:36:59:c4:f4:14:f5:
00:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F8:DB:EE:8B:1C:32:69:38:E4:4E:87:DA:7C:C3:2B:67:F9:17:CE
X509v3 Authority Key Identifier:
keyid:92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:3b:c9:52:e3:16:97:a2:ba:2e:b9:dd:f1:4f:f8:33:59:69:
c6:56:02:d1:3e:f4:b1:be:f9:26:20:19:06:f6:59:f3:bf:6d:
a7:66:f5:58:37:fd:ee:57:ae:90:91:55:3a:68:51:07:c8:76:
17:d6:2b:90:9c:8f:70:a3:31:56:ff:f1:f1:85:83:f1:06:59:
69:f1:98:91:cc:08:5e:5e:50:da:8c:89:6d:df:b9:7d:fa:b1:
cf:9b:48:8e:9e:10:68:0c:25:6e:1f:cf:0b:67:65:66:c3:4a:
f5:f8:f9:0b:5a:ac:b8:c2:c2:c1:a6:58:bb:53:5f:7d:1a:0b:
7a:d7:31:48:1a:eb:6d:67:b3:46:dd:b6:46:99:63:63:74:2f:
08:a1:a9:e8:b1:b1:b3:06:92:33:47:98:c1:46:ab:cf:5d:43:
7f:38:3f:e7:04:b2:ef:2a:3e:ca:4d:8d:c5:df:8f:3e:96:ec:
b8:ed:ff:6e:4c:df:6c:86:75:da:1a:fd:d0:e2:c1:e2:6b:c2:
a1:23:7e:b0:c4:82:d8:a5:a5:35:da:c0:d5:d0:d6:4a:a3:59:
bc:ca:6c:76:84:40:3a:68:ae:f7:6c:23:2a:9a:e8:af:5c:8d:
86:c6:e7:84:c4:59:b6:7b:65:f4:c1:a0:40:f5:43:09:a0:c3:
a0:cc:67:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:52:52 2026 by rpki-client