This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft
File: koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft (raw, json)
Hash identifier: /pdaqdfMaklx79gDKrpSRZjLQ9uBW7flm96LpGcTBb0=
Subject key identifier: 10:CA:11:8C:2B:AB:41:3F:ED:0B:1A:0F:15:7D:9C:CF:92:96:78:D2
Authority key identifier: 92:80:F0:70:74:77:53:38:7B:6B:A6:57:32:D6:DD:79:92:B3:50:C1
Certificate issuer: /CN=A9138679/serialNumber=9280F070747753387B6BA65732D6DD7992B350C1
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft
Manifest number: B2
Signing time: Sun 25 Jan 2026 05:17:43 +0000
Manifest this update: Sun 25 Jan 2026 05:17:42 +0000
Manifest next update: Sun 01 Feb 2026 05:17:42 +0000
Files and hashes: 1: koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl (hash: YzII5FMQ3GQLniDZyE0vIved1cxiw9eAngMcJalqgTg=)
2: 2CD223FCEA7811EF92D8DC39C4F9AE02.roa (hash: guOkrCtWFoq8Lg0AXDAskb6dB7b68BfvYrXJ0gD0vek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl
rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138679, serialNumber=9280F070747753387B6BA65732D6DD7992B350C1
Validity
Not Before: Jan 25 05:17:42 2026 GMT
Not After : Feb 1 05:17:42 2026 GMT
Subject: CN=6975a777-f6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f4:32:07:a8:4e:1c:19:dd:ad:bc:c9:97:4c:
c2:b2:e3:2a:34:05:5e:5d:d2:9d:61:6c:38:66:a0:
d1:e4:d7:57:a8:bd:d5:8a:c5:07:01:44:7b:e9:a5:
13:b5:bd:6c:4b:40:9b:a9:75:1a:25:1c:c0:48:08:
87:16:da:ec:9d:7e:64:9d:62:74:7b:2a:d9:67:08:
05:72:dc:db:d6:08:d4:fd:bb:56:6b:0f:13:26:eb:
5b:24:34:c6:a4:c3:7a:68:8d:82:31:6a:e9:ff:8f:
53:48:52:91:5f:f9:65:71:7c:22:77:48:0b:de:ba:
82:f7:6a:b4:d8:df:b4:a2:46:2c:81:c2:df:a4:b7:
19:b6:57:86:81:2e:c5:b6:28:98:0e:d5:77:bf:dd:
3f:7d:20:bf:01:bb:3d:d7:76:d1:cc:44:d3:ac:ba:
c8:99:18:ee:e4:6b:ee:7c:2b:69:3e:a8:8d:a7:7f:
2b:ee:e8:5b:20:db:12:30:9e:e2:0d:12:0a:0e:e1:
56:02:31:ba:56:1d:66:d1:e2:c7:c7:fe:6e:37:a0:
9b:d5:7a:72:f0:b5:c5:3a:c2:67:4d:52:7a:1a:a9:
67:a1:00:a2:8d:99:02:1a:62:e3:39:dc:f6:94:43:
4f:b8:73:6b:8b:14:7b:a7:69:c9:03:e6:6d:80:e4:
81:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CA:11:8C:2B:AB:41:3F:ED:0B:1A:0F:15:7D:9C:CF:92:96:78:D2
X509v3 Authority Key Identifier:
keyid:92:80:F0:70:74:77:53:38:7B:6B:A6:57:32:D6:DD:79:92:B3:50:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/koDwcHR3Uzh7a6ZXMtbdeZKzUME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138679/CB2CB3CEEA7711EFA5635680C4F9AE02/koDwcHR3Uzh7a6ZXMtbdeZKzUME.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:aa:c2:c9:e1:b1:02:54:85:3c:83:bc:67:27:cf:b5:bb:4f:
96:e3:70:fd:d4:2b:a7:50:5d:88:40:3c:db:36:a0:0d:00:9a:
1e:2f:29:17:57:15:f3:58:2c:2c:5a:38:6d:dc:88:90:e3:34:
df:1b:68:37:5d:34:c1:26:42:3b:dd:60:11:39:55:6a:16:fd:
ac:84:a0:cf:1d:59:1b:84:57:52:18:3f:16:62:e5:13:84:53:
95:fa:e4:63:03:6a:3f:4d:de:a3:b6:24:14:79:90:12:7f:e2:
97:16:36:07:63:f5:13:73:4f:97:9f:70:0c:6b:6f:75:49:1a:
60:6f:45:fc:e5:5d:5f:8b:7d:ea:34:d9:78:be:c0:a1:ee:3a:
7c:1b:fc:44:a2:d1:8b:97:be:bd:72:2a:cf:76:be:fc:25:b5:
a0:c7:6e:7b:1c:a9:03:d5:ff:38:e9:f2:50:53:99:a9:2c:1d:
2b:f7:b6:4c:78:6a:82:4f:09:ba:3e:43:10:e6:7f:55:9e:c5:
82:b7:bb:eb:f6:58:a2:75:65:2c:20:92:cf:31:be:af:a8:58:
ea:a6:d2:30:b3:6c:09:d8:ea:b2:a7:fe:59:4b:96:05:eb:c8:
72:b8:71:56:23:b2:bc:59:a5:9b:62:6f:6e:51:f5:73:86:8c:
33:e4:c4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:11:43 2026 by rpki-client