This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft
File: ko6KqA2ZpyP2qQIa5eewMqzt23o.mft (raw, json)
Hash identifier: GEuLm07Omp7xNWdZrYylwqwCXtoRBK5R9+BXjen3oRM=
Subject key identifier: 6B:D6:57:58:B0:D3:47:FA:D3:1D:12:2B:79:4C:2D:37:82:8B:79:50
Authority key identifier: 92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A
Certificate issuer: /CN=A9135A27/serialNumber=928E8AA80D99A723F6A9021AE5E7B032ACEDDB7A
Certificate serial: 7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft
Manifest number: 77
Signing time: Sun 25 Jan 2026 05:57:44 +0000
Manifest this update: Sun 25 Jan 2026 05:57:43 +0000
Manifest next update: Sun 01 Feb 2026 05:57:43 +0000
Files and hashes: 1: ko6KqA2ZpyP2qQIa5eewMqzt23o.crl (hash: l9xyzQwm32IqLHP+WyDMeJpGOuwSFu0YK1qAGJKmYRY=)
2: 49B14A284A5B11F0BB8BCD26C4F9AE02.roa (hash: z4R5as/wY1NXJnurtifYAAgszDyIwiQjjqeZ9ks0TAI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.crl
rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135A27, serialNumber=928E8AA80D99A723F6A9021AE5E7B032ACEDDB7A
Validity
Not Before: Jan 25 05:57:43 2026 GMT
Not After : Feb 1 05:57:43 2026 GMT
Subject: CN=6975b0d7-7847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:23:f3:a1:b7:11:55:e6:77:49:5f:88:51:6b:
a2:62:3d:78:20:03:5c:ad:bb:ee:50:d3:b4:5e:16:
86:27:75:27:a7:7d:27:19:65:53:b1:2a:24:6a:b7:
32:af:99:ec:2f:ff:0c:31:f4:cd:60:fe:69:3f:8b:
e7:26:d6:a8:f6:f6:cc:d5:13:45:f7:83:25:a9:12:
4c:7d:35:11:b7:ed:a1:73:59:f1:72:0e:f6:12:b3:
f6:c1:8a:01:d4:3b:05:ad:5a:79:1b:38:0a:eb:f6:
45:8e:27:c0:49:05:c6:37:c4:a8:ef:bb:c5:e1:97:
9f:77:de:7f:a5:f8:d8:4e:2c:a1:43:21:c5:7c:cd:
da:8b:4f:64:8d:3d:ce:7f:e3:a7:c5:2a:f8:f7:cf:
0b:b1:da:5a:c4:e7:8f:dd:a1:4d:58:a6:69:60:fb:
9c:c7:bb:49:71:ce:88:22:c2:ed:e6:a6:63:02:81:
04:af:bc:a1:32:15:5c:5b:88:5a:42:38:07:4d:c3:
87:64:e5:db:b7:8a:b6:38:64:41:c7:02:c1:8c:0e:
1c:17:fe:88:33:57:7d:91:7c:84:74:c7:fc:88:e0:
c9:04:a4:07:1b:74:6e:60:97:dc:ea:3b:c8:28:30:
1e:81:c6:53:59:74:ea:bc:cd:82:7a:1c:3e:59:04:
ce:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D6:57:58:B0:D3:47:FA:D3:1D:12:2B:79:4C:2D:37:82:8B:79:50
X509v3 Authority Key Identifier:
keyid:92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:00:cd:27:a3:6e:e8:ef:7b:26:85:5d:94:6b:d6:a2:2a:ff:
73:ee:a7:3a:55:fa:0b:32:1b:f4:23:16:8f:8d:f0:9b:c0:b6:
f8:31:cd:7e:0e:2f:d5:ec:ed:f3:62:50:39:da:c4:d7:a2:c4:
53:cf:ed:bf:db:65:92:6a:3f:42:2b:e6:dd:5a:d5:cc:68:49:
51:42:51:66:1d:f4:2e:34:e2:15:68:83:44:6a:a6:0a:5c:1e:
d6:b0:f7:7d:b8:27:e3:97:08:0b:1d:55:7b:aa:23:d0:37:2c:
a2:56:26:9f:57:37:8a:d1:34:c4:db:1a:ca:0e:1c:02:96:89:
37:87:3f:4e:9d:11:15:4f:b6:39:aa:83:b1:30:03:52:e6:ef:
5e:f0:f9:61:96:74:89:1a:2c:21:7f:62:3d:34:3e:ec:36:2b:
d3:f3:48:75:a0:15:3a:1d:ef:3f:c0:68:e9:79:5c:93:df:ab:
11:f2:f8:2d:3f:f8:63:a1:c2:93:00:15:bf:95:37:3d:22:cb:
35:77:e6:93:65:34:40:c3:23:0e:3d:57:6f:d5:9d:e4:b5:9a:
25:29:15:c8:53:4e:1d:fe:5a:ca:19:4e:76:0d:54:2d:c6:f2:
25:6f:52:a6:23:ac:e2:cd:01:91:40:8c:d4:a8:e4:ba:27:e1:
6e:91:c2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:33:16 2026 by rpki-client