This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
File: KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft (raw, json)
Hash identifier: 4K3XKwTu29vJhiV7BKn5Oe/9PFGBuAX4/Ji5O8Rmg3c=
Subject key identifier: 6B:2F:74:33:4B:DC:2B:0A:BE:47:EA:F2:3A:19:15:5D:B1:68:42:70
Authority key identifier: 2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16
Certificate issuer: /CN=A911F536/serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816
Certificate serial: C9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
Manifest number: C7
Signing time: Sun 25 Jan 2026 05:00:59 +0000
Manifest this update: Sun 25 Jan 2026 05:00:58 +0000
Manifest next update: Sun 01 Feb 2026 05:00:58 +0000
Files and hashes: 1: KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl (hash: swMnlKu6BIg2rKI/FLyU5uMZA8GB6Zw9jBDS9Vugs7Q=)
2: F51AC6A6C99A11EFB5D4B020C4F9AE02.roa (hash: McJ+hP8GUu/Ld5Rarq2qGp1xUtwodZVqiVkbBVRJzkE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl
rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F536, serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816
Validity
Not Before: Jan 25 05:00:58 2026 GMT
Not After : Feb 1 05:00:58 2026 GMT
Subject: CN=6975a38a-16fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:37:ce:48:d1:a6:a3:72:5e:f9:9c:57:d0:
85:44:ec:e0:07:25:bc:00:4c:72:ce:37:3e:21:74:
24:76:d9:07:0a:11:96:71:d1:37:86:52:33:22:15:
77:7b:0a:6c:a7:aa:6e:71:83:91:b8:f3:5f:96:ba:
f8:a4:c2:eb:d2:ef:f1:66:7c:ae:4a:7e:31:95:be:
4d:e0:0e:85:ff:fe:0f:5c:fd:ab:95:0f:24:4d:9a:
88:b1:67:fb:d6:e5:ea:40:78:ed:a8:b3:b4:5a:40:
1a:8c:87:ed:b7:41:27:7a:2f:86:b5:f7:16:c1:67:
9b:c7:8b:64:89:44:bf:2e:2c:1e:8f:d0:78:15:07:
de:3a:59:61:00:64:d2:be:70:da:e8:43:d0:ca:73:
20:3c:2f:6e:4f:68:cf:d9:72:64:92:53:e8:d8:66:
b7:12:df:f5:8e:5a:5c:ae:e7:3c:40:73:e0:c6:39:
b7:e6:b5:5d:a9:7b:d0:75:d2:50:fb:bb:82:2d:29:
55:ae:66:e5:1f:f3:98:a2:ea:75:96:d6:2b:3c:db:
70:f6:28:d8:c5:a5:ba:36:5f:2e:d6:8d:7a:7f:57:
33:20:6b:bc:ac:fc:78:e6:9f:c4:ac:e3:9c:39:c3:
02:fd:98:e3:a0:95:03:af:0d:37:06:b0:3d:29:a8:
36:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2F:74:33:4B:DC:2B:0A:BE:47:EA:F2:3A:19:15:5D:B1:68:42:70
X509v3 Authority Key Identifier:
keyid:2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0c:24:c4:40:c7:ad:4f:50:03:50:1a:4d:3d:02:ad:85:8b:
85:30:e4:03:ec:f6:19:2a:55:77:8d:2f:80:4c:52:a2:d3:a4:
20:fe:a3:0b:c9:f1:89:36:e2:8d:65:96:af:4c:21:5b:60:8f:
d4:13:93:68:19:f7:d7:d8:ad:b0:48:e5:b1:99:ff:34:fe:09:
fc:82:28:46:12:10:cd:df:38:60:d9:32:dd:95:3e:d3:ad:3a:
83:c6:2a:2f:a0:54:c6:f1:30:9e:2a:4a:33:96:cf:de:ae:01:
27:d9:2a:ef:66:9a:0d:18:55:fc:3b:30:ae:b1:14:6c:01:dd:
72:46:6a:5c:c8:1e:8d:3c:95:66:b0:ca:49:fd:4d:e2:f4:39:
fc:0d:a1:3c:1b:43:a4:da:d9:2c:5a:f3:df:0b:6d:e4:46:ab:
a7:07:fd:45:fa:af:d3:81:44:bb:24:78:67:4c:e7:87:a0:a9:
db:51:0a:b3:88:21:48:ea:01:de:75:72:5d:2a:83:3b:73:56:
07:27:d8:2b:cc:b3:ab:e3:95:b9:d9:88:c5:3c:05:23:b6:72:
e3:71:7c:fa:9f:10:2f:1a:b1:14:5a:63:48:17:ac:79:10:9b:
e9:c7:ba:ff:e6:f7:66:fc:04:98:2b:14:91:14:2c:b7:4d:6d:
31:bf:e7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:37:34 2026 by rpki-client