This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft
File: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft (raw, json)
Hash identifier: WWJ9rz0hlOLHtcrmaZ6a2ueRcX/lzvkqS1alNmurXQI=
Subject key identifier: 77:81:B5:EF:57:7D:10:16:E3:F6:96:CD:15:A9:EF:07:85:B1:B9:5D
Authority key identifier: 93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01
Certificate issuer: /CN=A912EDB7/serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001
Certificate serial: 0CEA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft
Manifest number: 0CE0
Signing time: Sat 24 Jan 2026 17:46:30 +0000
Manifest this update: Sat 24 Jan 2026 17:46:30 +0000
Manifest next update: Sat 31 Jan 2026 17:46:30 +0000
Files and hashes: 1: kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl (hash: 1BcMDHph/ixG+TKmpYtscqjmpaUPHUoAyR84SbZR4+I=)
2: 18CA7386E35511EDA63D5182C4F9AE02.roa (hash: oM1Dq8vVAMWDruW142KZg/Hyau8Pynh92pCYu2xGvEM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl
rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:46:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3306 (0xcea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EDB7, serialNumber=93159C9B6133F4806FBB28C6225E943963A6B001
Validity
Not Before: Jan 24 17:46:30 2026 GMT
Not After : Jan 31 17:46:30 2026 GMT
Subject: CN=69750576-91dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:70:c6:10:c5:32:8f:68:02:bb:a9:ca:57:
2e:5b:6c:c9:68:84:46:ab:ed:af:89:da:4f:e6:07:
96:b5:0f:14:60:e6:f7:c8:7f:93:78:c2:e7:ad:83:
f4:92:04:91:4c:dd:ee:44:da:07:0a:c3:18:95:b1:
ec:0c:cf:30:c8:e6:e3:4c:22:56:44:eb:1a:ca:49:
6f:0a:07:1f:fd:94:3a:7f:d6:63:5c:88:92:76:7b:
e7:f2:ce:97:5b:67:dc:cd:c9:d7:1a:8c:cd:be:53:
49:53:68:29:ac:f1:e7:e7:95:ec:d8:ac:48:e1:e1:
0f:a1:cd:f4:92:0f:8d:1d:8e:89:19:9c:26:4a:3f:
84:fe:eb:63:91:73:d6:69:f7:5f:9e:a6:8d:5e:53:
96:40:08:b4:bd:95:90:c2:59:4b:ce:79:49:9c:ce:
d6:52:e3:69:56:cf:82:0e:ca:43:bc:84:56:fc:f7:
ac:ca:e0:77:c2:9b:d4:2e:8a:7e:b3:75:b3:42:ae:
96:93:64:e0:97:fb:bd:a5:df:a9:fb:23:b0:34:2e:
64:c6:13:3f:66:aa:ab:2f:60:99:61:ac:c8:b7:83:
30:cc:68:35:b1:3f:82:39:76:0e:c5:6e:39:ea:6e:
87:c1:b3:6c:c6:b0:22:ef:0c:dc:c1:b0:be:5a:2b:
42:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:81:B5:EF:57:7D:10:16:E3:F6:96:CD:15:A9:EF:07:85:B1:B9:5D
X509v3 Authority Key Identifier:
keyid:93:15:9C:9B:61:33:F4:80:6F:BB:28:C6:22:5E:94:39:63:A6:B0:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EDB7/46162ADAFED211E987FFC217C4F9AE02/kxWcm2Ez9IBvuyjGIl6UOWOmsAE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b8:f5:a8:e7:ee:ee:24:b7:b6:9a:9f:67:ef:47:a4:62:c8:
24:02:5b:f6:26:85:e1:b0:fe:40:f1:4b:31:a7:88:84:c6:30:
80:fd:54:c5:ce:af:4b:a9:04:32:42:bc:9a:a5:44:4c:9c:cf:
b6:71:3d:a7:49:e0:17:77:b9:ca:70:65:bd:73:ba:86:25:bc:
6b:f8:bd:c0:23:be:f0:6d:f0:de:30:c8:d5:9b:80:26:2f:c4:
0c:2b:ca:f0:bf:68:fb:02:1c:be:51:a7:0f:1c:19:ac:c7:ed:
25:35:e6:4c:62:0c:ee:a3:2d:9b:4c:3c:15:87:a7:86:d7:f0:
44:a4:66:6a:aa:61:1d:99:32:41:07:aa:5a:69:f3:c8:34:2e:
38:10:70:61:9d:31:f1:e6:f5:5c:4e:6c:15:a5:45:f6:08:f9:
34:ea:83:dd:bd:e4:1f:e9:0e:7c:6b:56:cb:0d:24:ad:75:e2:
23:23:9a:59:ea:60:13:64:47:83:df:49:d4:ad:0d:95:19:8e:
ed:29:ac:33:41:7b:ac:b7:83:1c:42:c3:49:8a:db:e1:f4:9b:
78:e9:7d:2f:6d:00:3d:cf:44:2f:e3:a1:dc:f0:a1:e9:1d:af:
da:df:38:e9:85:de:85:b7:39:3a:56:3b:70:d7:d3:c8:c0:b3:
a1:6b:19:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:42:30 2026 by rpki-client