This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
File: _knPM_vkJHsroe6aVISnQK07bg4.mft (raw, json)
Hash identifier: IQJmC2sdEom9zjJeC6U+4oeZ0UV4JFbANF5iOt+IxZA=
Subject key identifier: 83:26:ED:42:B1:A2:6C:9F:46:A2:58:FE:89:E4:64:C4:87:F0:47:AF
Authority key identifier: FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E
Certificate issuer: /CN=A9127760/serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E
Certificate serial: 50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
Manifest number: 4F
Signing time: Fri 23 Jan 2026 06:16:52 +0000
Manifest this update: Fri 23 Jan 2026 06:16:51 +0000
Manifest next update: Fri 30 Jan 2026 06:16:51 +0000
Files and hashes: 1: _knPM_vkJHsroe6aVISnQK07bg4.crl (hash: hxIM5muDjsMIQBbRe40kCW6oxoUMRufecQMXQ6DuLD4=)
2: 0E06126A7E4011F084643A20C4F9AE02.roa (hash: 8dKxmjrD276AcnRHkqC+TGlsqBHgEpXfogCpAno8Nm4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl
rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127760, serialNumber=FE49CF33FBE4247B2BA1EE9A5484A740AD3B6E0E
Validity
Not Before: Jan 23 06:16:51 2026 GMT
Not After : Jan 30 06:16:51 2026 GMT
Subject: CN=69731254-422a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:18:19:e9:8a:fb:3f:c2:79:ba:1d:2c:2a:
8a:63:e9:54:48:ba:04:f3:99:d4:ff:2e:59:32:49:
b0:41:74:47:30:cd:da:10:d2:65:80:76:63:01:62:
62:93:92:d0:2a:33:33:4c:b8:2e:7b:5d:0c:45:72:
f6:10:db:07:c3:60:ef:76:ea:f1:1a:ba:0e:ac:85:
86:51:ea:7d:e1:b7:09:17:4a:6b:6d:2c:6d:13:d5:
75:b7:a7:22:1d:28:70:0c:7f:94:85:95:5d:33:10:
dd:da:53:58:95:00:4b:9c:e0:33:63:1c:0a:1a:70:
32:a1:7f:83:19:f2:56:95:06:ba:f7:11:55:ef:61:
c9:24:20:ab:e2:6d:f3:47:10:fd:d3:89:3f:73:6f:
f3:56:bb:20:96:df:29:59:2d:b5:7f:40:24:65:6c:
8d:4c:e0:d2:e1:5d:8d:5f:70:6b:3d:5c:90:c8:66:
63:65:ae:27:f5:5e:3a:29:e7:46:08:3b:d9:6b:c0:
68:22:b6:28:56:3e:0e:f9:31:80:07:59:03:22:64:
a3:65:a5:d7:ed:47:53:75:c0:f0:3a:56:06:67:43:
74:03:5d:10:64:32:b5:93:5e:78:ee:c7:7b:0e:c5:
10:7e:6c:e3:f0:7b:1b:ce:1d:76:2b:cf:0f:8a:52:
dc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:26:ED:42:B1:A2:6C:9F:46:A2:58:FE:89:E4:64:C4:87:F0:47:AF
X509v3 Authority Key Identifier:
keyid:FE:49:CF:33:FB:E4:24:7B:2B:A1:EE:9A:54:84:A7:40:AD:3B:6E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knPM_vkJHsroe6aVISnQK07bg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/7D5314207E3F11F0AB089B1EC4F9AE02/_knPM_vkJHsroe6aVISnQK07bg4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:4e:85:a2:61:9d:27:d7:81:19:3e:02:c6:5c:aa:e9:07:fd:
66:57:84:0f:65:93:8d:b0:e6:8e:56:ef:16:7e:d8:d9:3d:71:
22:58:de:6a:dc:01:bb:a1:9c:41:12:05:37:69:32:ea:cc:13:
7e:d8:e1:9d:5c:a6:74:bd:19:12:8e:f4:b6:4f:46:7f:3d:70:
15:66:c7:f2:47:97:b0:eb:de:45:60:ff:25:4f:6e:e2:b9:f5:
1b:43:2c:9d:4c:9d:eb:d0:89:2c:d4:50:64:87:0b:0b:24:68:
5a:47:61:de:f9:9a:0c:fe:0c:92:8d:ca:11:87:1f:26:a6:6d:
e9:b3:f1:ef:48:a9:f8:bb:19:a8:18:75:5d:b4:2a:9c:44:b5:
36:c7:d8:49:c9:1c:c7:87:41:30:d8:a5:01:dc:57:b5:a5:76:
78:1e:ca:da:b6:9b:38:e6:1e:a2:3b:f0:7e:04:89:e9:c2:bb:
cf:eb:62:80:ec:8f:9d:93:d6:66:c7:e2:96:33:e1:10:9c:21:
f8:73:a0:0c:b0:f3:c3:22:5b:5d:c5:4b:47:bb:53:d6:42:94:
a9:ae:e7:0f:16:e5:61:d5:5a:21:0e:73:c7:0e:94:d6:76:3d:
91:cc:1a:3e:bc:86:3f:8b:f0:09:54:b0:9d:45:80:66:d2:8f:
aa:51:80:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:46:48 2026 by rpki-client