This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
File: kg59CR8VVp8tg0DGWCuVlewGVoA.mft (raw, json)
Hash identifier: 92coAPtnCJxORxsSp5/Ww//n2wPT5QQ5JA5KxAs9SGs=
Subject key identifier: 7B:23:B7:F4:68:E7:8C:5F:3A:56:90:CA:0C:95:E1:AC:54:69:6F:1A
Authority key identifier: 92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80
Certificate issuer: /CN=A9112FE1/serialNumber=920E7D091F15569F2D8340C6582B9595EC065680
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
Manifest number: 9E
Signing time: Sun 25 Jan 2026 05:32:33 +0000
Manifest this update: Sun 25 Jan 2026 05:32:32 +0000
Manifest next update: Sun 01 Feb 2026 05:32:32 +0000
Files and hashes: 1: kg59CR8VVp8tg0DGWCuVlewGVoA.crl (hash: esRa+dwqRlkzy5mAeIgErR5LMygyNUAKh+qiQrKkGsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl
rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112FE1, serialNumber=920E7D091F15569F2D8340C6582B9595EC065680
Validity
Not Before: Jan 25 05:32:32 2026 GMT
Not After : Feb 1 05:32:32 2026 GMT
Subject: CN=6975aaf1-1b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:be:c1:e2:05:9d:e6:38:8d:6e:1d:84:d8:45:
21:ca:ee:94:df:aa:cb:83:9f:07:eb:96:46:43:dd:
46:6d:c1:83:d2:c2:f3:ba:39:f9:0d:b1:5a:b8:e4:
a7:0f:43:49:45:e8:52:ac:fc:3e:a9:c3:f5:bd:2e:
c4:b8:a2:ec:8b:f8:a9:bd:9f:b1:cc:0e:4f:22:fd:
5c:27:1c:9d:a6:75:63:2b:66:32:54:5b:45:e8:a0:
62:e7:80:13:b1:af:53:fd:6c:7f:78:7c:b8:a3:63:
a2:52:50:82:a5:0e:4c:5e:9a:89:8a:b3:62:11:20:
64:1a:76:bd:83:e9:a5:bc:e0:06:33:23:69:6b:59:
89:0b:68:64:53:0f:42:d9:3e:e3:9f:ba:3c:4b:2b:
9b:6d:10:fd:e2:34:42:78:0f:9d:96:55:7b:79:69:
e2:37:0d:51:1a:48:70:d6:f6:96:49:75:5b:55:6b:
5a:d4:91:ef:ff:cf:82:6a:b6:19:0a:5d:af:7b:3c:
55:22:a4:56:a9:ec:62:17:18:63:0f:7c:4b:de:b4:
c1:57:e9:7e:02:5e:54:bc:98:3e:77:1a:2c:f5:39:
56:e1:1d:5a:bf:39:fa:93:b9:5e:b8:68:0a:b6:c0:
0d:f8:ab:80:5c:7c:45:67:96:51:23:00:f2:e8:d4:
c3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:23:B7:F4:68:E7:8C:5F:3A:56:90:CA:0C:95:E1:AC:54:69:6F:1A
X509v3 Authority Key Identifier:
keyid:92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:af:0e:8a:bb:48:3a:ab:9b:4a:e2:1a:10:31:5f:5b:2f:6e:
27:da:2a:0c:b8:40:a2:78:70:78:f6:2f:7c:1b:62:06:31:93:
de:bf:3a:0e:21:2c:7a:92:0c:df:de:2c:98:5f:13:8a:ed:8d:
64:a0:3d:2d:c6:9d:f3:7a:8a:54:f7:4c:ee:47:61:f6:32:13:
7e:0a:02:9e:7e:32:18:b5:57:82:12:31:62:67:42:8e:b3:ca:
30:8f:1e:68:ee:17:1b:30:e3:1a:a9:c1:ea:40:a6:80:8e:4d:
14:fc:3c:3e:d0:a9:cd:2f:29:04:f8:a4:0f:f1:28:7a:df:b7:
77:36:0f:1c:64:02:76:33:c4:68:6d:bb:3c:31:3a:97:83:04:
ed:d2:b9:fa:1a:23:ce:45:5d:46:9b:36:54:7a:9d:fc:9e:91:
99:dd:9d:14:2f:08:94:d1:72:6d:67:0a:e5:aa:e2:90:ad:e4:
6a:1c:5c:55:8a:b8:ca:1c:69:4d:fe:47:be:75:50:5a:3a:5f:
f4:bf:57:23:b7:b9:7c:1a:1a:f8:e0:ec:a9:96:d1:74:36:a1:
ac:03:69:b0:58:be:35:bc:59:9c:0c:c2:db:b1:06:dd:99:3c:
41:75:aa:d4:b5:42:31:1c:6f:ff:7a:f2:3a:5c:8c:26:a4:d0:
38:6b:e2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:38:42 2026 by rpki-client