This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft
File: KtPYi16OCwUUGjvJL4XkJzoFYqE.mft (raw, json)
Hash identifier: x77ovNoyebrENCdVGYf0WtmNmn1lT55K3c8AzlMuUwY=
Subject key identifier: BB:A7:D2:BB:DC:56:45:95:27:20:06:6B:4C:96:BA:27:7B:0D:F3:BA
Authority key identifier: 2A:D3:D8:8B:5E:8E:0B:05:14:1A:3B:C9:2F:85:E4:27:3A:05:62:A1
Certificate issuer: /CN=A9132F27/serialNumber=2AD3D88B5E8E0B05141A3BC92F85E4273A0562A1
Certificate serial: 0177
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KtPYi16OCwUUGjvJL4XkJzoFYqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft
Manifest number: 0175
Signing time: Sun 25 Jan 2026 03:05:05 +0000
Manifest this update: Sun 25 Jan 2026 03:05:05 +0000
Manifest next update: Sun 01 Feb 2026 03:05:05 +0000
Files and hashes: 1: KtPYi16OCwUUGjvJL4XkJzoFYqE.crl (hash: a7AoePiCFgfkqh/KHjaTSTWo5mCckPtvg/euI9XtUJA=)
2: 1D74CCE2BB6D11EEB670B00CC4F9AE02.roa (hash: c7azquHGHrdqjZWXwOVhESd2h6ZSF7h+7L/HwU2cJDw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.crl
rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KtPYi16OCwUUGjvJL4XkJzoFYqE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132F27, serialNumber=2AD3D88B5E8E0B05141A3BC92F85E4273A0562A1
Validity
Not Before: Jan 25 03:05:05 2026 GMT
Not After : Feb 1 03:05:05 2026 GMT
Subject: CN=69758861-c751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:e7:3b:9a:df:69:99:29:60:e1:08:98:30:
b4:a1:92:b9:cc:a5:3e:ee:cd:5b:00:3b:b9:d7:20:
9b:25:88:9a:09:f0:34:56:f1:1e:d4:1b:ae:95:69:
d4:7f:87:9c:51:dc:44:8b:4a:95:38:ec:d1:93:df:
64:c6:da:c1:6e:c0:df:b9:d2:5c:7b:87:89:9a:d8:
1d:bc:a0:31:89:dd:33:a0:fe:b2:03:67:8a:f5:de:
5c:08:38:94:18:ec:be:99:1c:71:84:3f:1d:7f:31:
76:68:f9:4f:b0:fa:e4:31:fb:52:1e:44:e9:32:7c:
8d:16:68:6c:e3:10:f9:86:33:8e:09:b3:7e:44:ac:
96:43:b8:dc:15:bd:8d:6b:cb:e1:86:c4:5d:29:5b:
f5:47:04:8e:d9:09:64:26:75:31:b7:19:99:b0:d4:
b7:f2:10:56:c3:dc:e0:7b:4a:ec:4b:89:f1:8d:bb:
6f:20:db:8a:5a:d5:78:0b:1a:2f:0e:72:3f:09:df:
b2:4c:cd:50:1b:8f:4c:88:dc:ba:69:7b:61:2b:57:
59:71:1a:fd:ea:dc:e0:bf:fc:ab:0f:4d:4a:72:10:
63:f0:45:ac:e1:52:c4:06:57:44:b0:16:8d:52:64:
89:5a:7b:a8:7b:5f:56:c5:cf:a7:36:f0:c3:c5:5c:
51:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A7:D2:BB:DC:56:45:95:27:20:06:6B:4C:96:BA:27:7B:0D:F3:BA
X509v3 Authority Key Identifier:
keyid:2A:D3:D8:8B:5E:8E:0B:05:14:1A:3B:C9:2F:85:E4:27:3A:05:62:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KtPYi16OCwUUGjvJL4XkJzoFYqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:a4:ab:59:f2:bd:ea:17:79:11:75:70:64:0d:62:30:6e:76:
83:1d:26:c7:b1:ae:37:22:a8:3f:5b:59:04:49:b5:c8:4c:57:
f0:b4:5e:e8:81:8e:54:a6:17:85:20:74:2c:89:5c:cc:4c:9b:
a9:1f:d0:24:b2:ae:85:1f:7e:df:28:6a:94:29:cf:61:6c:c7:
9d:b5:bb:9e:06:a5:73:ae:24:4b:f8:88:d3:ac:3c:de:1a:66:
81:d8:6d:39:02:9e:76:0f:1c:c8:f6:8c:76:ab:bd:63:6d:b8:
9f:bb:d2:92:07:68:f7:7f:ad:e6:a2:5d:12:07:9b:be:4a:87:
f8:7a:82:9a:c1:d5:16:bc:c2:5e:01:6c:ac:63:a7:a0:2a:fb:
f3:01:96:2b:16:e0:86:97:b4:82:ca:b8:f1:5f:d9:68:77:a1:
d6:be:de:ef:b1:34:ca:c9:fb:5b:2d:8e:dc:2d:4c:9c:a5:58:
e7:72:c9:94:28:6b:a2:c4:fc:97:eb:73:b6:c7:8d:b8:11:93:
de:30:00:fb:ff:63:f7:27:23:38:27:23:cd:33:a9:2f:ee:f9:
43:92:a6:9c:71:c5:6f:41:4a:e9:cc:56:f9:c9:c1:fd:ae:ac:
06:f1:c3:14:9b:e8:c5:cb:7f:d7:94:2b:37:36:0b:31:bb:19:
89:81:27:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:13:54 2026 by rpki-client