This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft
File: 1KTwtgAN4CJIxGV6-d0msCPF9nk.mft (raw, json)
Hash identifier: pHsvzp1Yky0wijMOUGSq0rRnPJzT0jC0b64Q0cLf/tg=
Subject key identifier: 02:F7:35:E2:59:C0:03:0F:29:85:FE:41:DD:5D:BF:E9:9E:CB:91:40
Authority key identifier: D4:A4:F0:B6:00:0D:E0:22:48:C4:65:7A:F9:DD:26:B0:23:C5:F6:79
Certificate issuer: /CN=A9136C1F/serialNumber=D4A4F0B6000DE02248C4657AF9DD26B023C5F679
Certificate serial: 43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft
Manifest number: 41
Signing time: Sun 25 Jan 2026 06:29:41 +0000
Manifest this update: Sun 25 Jan 2026 06:29:40 +0000
Manifest next update: Sun 01 Feb 2026 06:29:40 +0000
Files and hashes: 1: 1KTwtgAN4CJIxGV6-d0msCPF9nk.crl (hash: PVim45ZlFq9gesD371lv0YnoP2N5P0Emlr8/78osU6A=)
2: 515DD9629A8811F08FD4A810C4F9AE02.roa (hash: Dg/Vcy50ZsOW8WbCgEni7y9JIL1pu3cmWYVSSZjfezQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.crl
rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 06:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136C1F, serialNumber=D4A4F0B6000DE02248C4657AF9DD26B023C5F679
Validity
Not Before: Jan 25 06:29:40 2026 GMT
Not After : Feb 1 06:29:40 2026 GMT
Subject: CN=6975b855-f7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:36:3e:d8:87:e6:87:a8:e3:73:2a:56:03:1a:
88:a6:16:54:5a:7e:52:0a:d3:35:75:b9:d6:fa:0f:
c0:18:b1:0d:60:b6:44:8c:87:c7:60:55:f6:a1:f4:
86:81:a7:ef:df:98:ef:0d:01:38:73:3f:ce:d9:ae:
9f:38:3f:a9:9c:7e:f7:93:4d:cb:0b:8e:84:a2:cc:
9a:63:0a:89:a4:1f:c0:a8:ca:22:60:99:ab:7c:a2:
92:13:41:02:e1:76:9a:2b:37:c5:79:d7:d6:12:47:
2b:70:a5:4f:aa:02:49:5b:b0:fa:d8:01:a3:7d:d8:
5c:73:e6:cc:eb:2a:0e:4b:f0:c6:78:4b:6f:4e:68:
1f:53:c7:54:3d:7a:e4:7f:6a:d2:fc:37:9b:af:d3:
8c:76:ee:75:51:13:a1:e0:c2:59:47:bb:4a:8e:e0:
d6:e9:6d:3c:83:09:a9:b3:23:ac:80:2a:cd:83:a0:
3a:a5:2f:9c:b2:eb:67:b8:c4:8d:50:22:8c:bb:05:
8b:d4:96:b2:f1:84:90:11:eb:68:97:b8:e0:41:a1:
5b:1a:4d:6e:46:b3:62:17:54:25:d0:40:26:4d:fa:
80:dd:08:65:4b:28:6d:56:37:37:1f:57:06:8d:6b:
71:b5:8e:d2:62:26:dc:98:d2:20:c8:89:d1:89:ba:
d6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F7:35:E2:59:C0:03:0F:29:85:FE:41:DD:5D:BF:E9:9E:CB:91:40
X509v3 Authority Key Identifier:
keyid:D4:A4:F0:B6:00:0D:E0:22:48:C4:65:7A:F9:DD:26:B0:23:C5:F6:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:91:4d:e6:8b:20:bc:07:d7:89:58:5f:09:bd:be:cb:1a:8a:
91:5c:aa:9d:08:df:81:6c:3f:79:09:67:df:a8:fe:58:5a:7f:
63:6f:2b:27:16:19:4a:d6:52:44:c0:b5:49:2e:10:28:f0:49:
3a:80:f9:78:14:0a:dd:3f:5e:06:c4:1b:62:c4:b1:ec:7c:63:
b3:28:e6:01:af:d8:6a:43:61:5b:cc:c6:12:53:53:9d:52:bc:
15:33:39:19:23:27:da:9a:b6:75:08:d9:48:16:a6:e2:37:e5:
47:ad:22:84:e7:1f:09:77:5f:ac:eb:70:35:20:70:87:d4:04:
13:59:33:ef:4d:1d:6a:cf:67:f3:cb:d7:6c:4f:f8:7c:52:e4:
32:24:77:9d:8a:ad:20:26:40:6c:d1:62:bf:7b:7e:df:4b:63:
33:fb:12:2a:1e:3a:9e:fc:40:2b:a7:35:91:05:95:3c:6c:d0:
f1:74:1b:e5:1d:6e:0d:e2:65:5e:df:2c:d8:3f:f2:80:dd:c8:
2d:a0:22:95:07:e9:fc:61:67:1c:36:58:f2:70:45:ba:39:ed:
e1:a7:8e:cc:df:e7:5a:30:33:40:b3:69:a0:22:f9:92:26:3a:
34:03:5e:c8:0d:18:5e:c2:6b:16:a6:83:13:c3:69:93:d1:5a:
18:e0:ce:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:41:42 2026 by rpki-client