This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
File: KOAXfHClckcH27FJ7VV8D4FW4Ok.mft (raw, json)
Hash identifier: MRaYieonHq5Xy84K0/rEdZdjhfkMjZSr7iiD82otq0Y=
Subject key identifier: 6F:78:BA:3E:D7:D3:39:AB:ED:CB:17:46:56:51:70:72:7F:DE:AB:4D
Authority key identifier: 28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9
Certificate issuer: /CN=A9136109/serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9
Certificate serial: 0654
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
Manifest number: 0645
Signing time: Sat 24 Jan 2026 22:00:56 +0000
Manifest this update: Sat 24 Jan 2026 22:00:55 +0000
Manifest next update: Sat 31 Jan 2026 22:00:55 +0000
Files and hashes: 1: KOAXfHClckcH27FJ7VV8D4FW4Ok.crl (hash: LI3caHX9GJ4pQIz3L5af/Cqx7he11r/KWUwCfIn6V/c=)
2: 590697D6465611EE8128031BC4F9AE02.roa (hash: D/6BYkGqlNOLOYOgY8KQs7LafMiP8Rro2RlyCrKrnhM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl
rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1620 (0x654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136109, serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9
Validity
Not Before: Jan 24 22:00:55 2026 GMT
Not After : Jan 31 22:00:55 2026 GMT
Subject: CN=69754118-fbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:50:e8:e0:9e:b4:00:1e:f8:22:52:13:6c:b3:
de:b3:3c:69:7f:66:e3:e9:4d:fa:b3:ed:bc:e6:13:
db:08:92:ce:8b:89:ce:45:14:20:e7:4e:48:ff:1c:
cf:44:76:c3:3a:06:e9:12:e1:01:d7:e5:70:22:d9:
a6:ca:d9:f2:73:8f:38:71:62:83:6b:ca:62:a0:c4:
a3:bf:15:81:1a:10:a2:4e:7a:5d:fe:4d:c5:f3:4d:
06:e0:fb:28:a6:76:78:98:5b:da:52:d5:01:9f:9c:
4a:65:b0:63:7c:e5:2f:bd:95:76:45:18:f7:a2:ae:
b5:50:f1:33:fc:a8:1c:da:1f:40:2e:ff:54:a8:3c:
78:06:0c:ea:02:f2:b9:bc:49:7a:94:47:e0:51:c5:
3e:20:97:c6:7d:07:6e:d8:71:0e:52:80:e7:5b:f9:
4f:c2:d6:19:5f:af:a5:66:78:3c:f5:a2:6e:55:95:
67:d7:8b:f3:3c:e1:74:ba:3d:4a:f0:fa:0a:99:fe:
9a:f7:61:68:69:3a:fc:3c:88:7f:c0:f8:01:31:a6:
02:c0:35:b7:2c:80:88:64:b0:05:ff:8b:81:3d:64:
0f:b4:88:0e:d0:0a:c8:f4:de:00:b7:d7:58:3b:8a:
7b:b9:c6:6c:da:d5:e9:cf:c4:d8:2d:66:c4:1a:e0:
80:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:78:BA:3E:D7:D3:39:AB:ED:CB:17:46:56:51:70:72:7F:DE:AB:4D
X509v3 Authority Key Identifier:
keyid:28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:db:02:65:99:6b:d7:c9:8d:3a:27:70:ad:f7:aa:f2:5c:e4:
e1:66:36:6e:31:84:15:ff:c8:7d:35:d0:4a:7a:a0:a6:75:fb:
74:45:92:54:0e:e1:8d:bf:9e:04:1c:42:ae:2c:a1:d0:6f:4e:
16:39:b0:24:cb:b7:33:79:d5:ab:61:1a:a1:b4:2f:b4:f2:1f:
37:54:57:ae:3d:3a:b3:6e:cc:0b:aa:88:05:a7:c6:8b:3c:2c:
ac:05:7f:91:b8:42:3b:a0:35:35:64:7c:1c:3e:02:81:cc:3d:
6d:3d:85:19:03:0f:89:0e:f3:b4:19:e4:a6:7c:ac:7c:8f:9a:
25:a9:75:3c:68:9d:df:dd:fa:b5:8e:47:4f:20:1d:fd:8f:6b:
73:0d:9b:0b:b4:95:0d:70:88:3d:e2:d5:7f:46:ac:c7:19:56:
4f:0b:a7:bc:a0:6a:85:2d:90:30:d2:33:d4:5c:da:62:d2:50:
a9:1a:25:e3:9a:b6:bd:c8:6d:82:25:0f:c2:1f:69:84:8d:0b:
d5:e7:7e:cc:a5:c0:f2:8d:ec:3b:53:c3:ef:96:f5:bb:33:9f:
a8:60:8e:d8:e7:41:96:e1:77:d4:81:6a:73:3d:d3:f2:0d:b2:
d7:6b:e8:e2:2b:47:8d:78:d0:b1:f7:52:d0:c0:49:9e:39:1f:
4a:2c:d8:47
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzYxMDkxMTAvBgNVBAUTKDI4RTAxNzdDNzBBNTcyNDcwN0RCQjE0OUVENTU3QzBG
ODE1NkUwRTkwHhcNMjYwMTI0MjIwMDU1WhcNMjYwMTMxMjIwMDU1WjAYMRYwFAYD
VQQDDA02OTc1NDExOC1mYmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4FDo4J60AB74IlITbLPeszxpf2bj6U36s+285hPbCJLOi4nORRQg505I/xzP
RHbDOgbpEuEB1+VwItmmytnyc484cWKDa8pioMSjvxWBGhCiTnpd/k3F800G4Pso
pnZ4mFvaUtUBn5xKZbBjfOUvvZV2RRj3oq61UPEz/Kgc2h9ALv9UqDx4BgzqAvK5
vEl6lEfgUcU+IJfGfQdu2HEOUoDnW/lPwtYZX6+lZng89aJuVZVn14vzPOF0uj1K
8PoKmf6a92FoaTr8PIh/wPgBMaYCwDW3LICIZLAF/4uBPWQPtIgO0ArI9N4At9dY
O4p7ucZs2tXpz8TYLWbEGuCArQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG94uj7X
0zmr7csXRlZRcHJ/3qtNMB8GA1UdIwQYMBaAFCjgF3xwpXJHB9uxSe1VfA+BVuDp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjEwOS9DODIwNzIxMkM1
MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNrY0gyN0ZKN1ZWOEQ0Rlc0
T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tPQVhmSENsY2tjSDI3Rko3VlY4RDRGVzRPay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjEwOS9DODIwNzIxMkM1MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNr
Y0gyN0ZKN1ZWOEQ0Rlc0T2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCQ2wJlmWvXyY06J3Ct96ryXOThZjZuMYQV/8h9NdBKeqCmdft0RZJU
DuGNv54EHEKuLKHQb04WObAky7czedWrYRqhtC+08h83VFeuPTqzbswLqogFp8aL
PCysBX+RuEI7oDU1ZHwcPgKBzD1tPYUZAw+JDvO0GeSmfKx8j5olqXU8aJ3f3fq1
jkdPIB39j2tzDZsLtJUNcIg94tV/RqzHGVZPC6e8oGqFLZAw0jPUXNpi0lCpGiXj
mra9yG2CJQ/CH2mEjQvV537MpcDyjew7U8PvlvW7M5+oYI7Y50GW4XfUgWpzPdPy
DbLXa+jiK0eNeNCx91LQwEmeOR9KLNhH
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:11 2026 by rpki-client