This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
File: K1MJHcnLOER3WOYdne4VNUFBPtA.mft (raw, json)
Hash identifier: zI+knzzRW5+KO7bD7dBUR6T0HpKuEWNfQneX1PMGfrY=
Subject key identifier: A2:73:1D:2B:7F:73:AB:75:9C:CF:01:F4:69:C9:97:09:61:D2:20:23
Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0
Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0
Certificate serial: 0916
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
Manifest number: 08EC
Signing time: Sat 24 Jan 2026 19:48:43 +0000
Manifest this update: Sat 24 Jan 2026 19:48:43 +0000
Manifest next update: Sat 31 Jan 2026 19:48:43 +0000
Files and hashes: 1: K1MJHcnLOER3WOYdne4VNUFBPtA.crl (hash: uWVCmyyDlhHsGu7qTqkqMpJJUX+JzBPhzyKfEoKlybg=)
2: 0649562CC63A11EAB59CC262C4F9AE02.roa (hash: RJDI3i7hM1nBIPS/73ED0LFQix8Jwqczz+z+Slz7wW8=)
3: 057EA0EEC63A11EAB59CC262C4F9AE02.roa (hash: mTee11vC2WHUjxpYpzX5Cx2s5T+zTjrHiz6j8S4XOXs=)
4: 5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa (hash: Ug8T2jAnxBEFXcI9OyfxIdrB1/QKIOy0uEZRs/AiI9w=)
5: ECE7A9D2EB3F11F09567C020426F56BC.roa (hash: b/odK3fyg/jlDP71Lmw4LV7WggxUFrl8lRxTF5frNAw=)
6: 0009F0B0EB4011F0804B8821426F56BC.roa (hash: bewmclnmrJWEsHLDmCXH14/YujDcIGWpfsGeSMRrytw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl
rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2326 (0x916)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142241, serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0
Validity
Not Before: Jan 24 19:48:43 2026 GMT
Not After : Jan 31 19:48:43 2026 GMT
Subject: CN=6975221b-49ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:b0:48:32:02:85:6e:64:d4:65:b8:52:3c:
d6:45:93:25:2b:b5:d3:68:44:37:8d:ee:9d:55:e3:
c9:3b:c5:fc:88:c1:05:6f:41:ca:33:de:00:75:3f:
a6:7d:f5:ec:c1:28:19:20:ff:fa:9d:d3:19:c6:5c:
e1:2c:33:a9:3d:62:7c:6a:a6:56:70:a4:c6:a3:ad:
c5:9d:6a:df:9a:3f:ed:ea:10:9d:5d:d9:6d:63:22:
eb:49:2c:d7:e3:e3:0c:43:f4:8c:03:4f:1d:2c:b6:
fe:d4:dd:1f:4b:fa:f2:e1:a7:8d:37:54:6d:19:6e:
51:44:55:af:80:b1:93:0d:b7:a7:af:92:b1:67:15:
da:e6:37:fb:4f:0a:ec:9a:02:0c:11:f5:a3:0b:23:
bb:82:29:21:9a:96:07:58:47:86:66:bb:b7:ce:de:
25:ee:16:cb:e7:ab:c3:58:1b:40:2a:b7:d2:ac:50:
8a:cc:9f:64:a8:29:80:4a:43:8b:5c:10:46:55:c8:
67:3e:c6:a1:f3:72:32:4c:26:a0:ff:4f:b8:46:f1:
82:af:fa:85:9f:90:b0:55:8e:e8:b5:77:7e:37:7b:
46:a7:10:d9:dc:2b:25:0e:f4:ae:ae:f5:84:9d:54:
91:da:b5:08:8f:a2:c1:90:df:c1:95:85:ad:ea:f6:
19:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:73:1D:2B:7F:73:AB:75:9C:CF:01:F4:69:C9:97:09:61:D2:20:23
X509v3 Authority Key Identifier:
keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7f:1c:93:d6:9a:fd:63:71:86:05:17:e5:c1:9c:d5:d4:48:
4d:77:e9:27:64:2d:f7:5e:bf:8b:04:94:2b:00:2a:8a:24:4f:
f3:74:c9:f4:76:2f:ea:bb:f8:a5:56:54:ae:5b:97:b3:fc:28:
5f:5f:24:23:0e:4a:c4:f8:da:75:d5:3b:7a:ff:1c:58:3a:51:
e7:35:ec:26:6b:db:75:70:f1:dd:9d:34:25:9e:ab:68:f7:59:
36:de:ee:1a:d2:2e:5c:d2:d9:b6:67:e0:17:53:b7:23:6e:ef:
da:b7:09:36:bd:1e:ef:88:10:57:6b:68:6a:1f:6b:46:2b:f0:
43:88:0a:91:11:f3:6a:74:08:78:c0:bf:db:1a:58:22:2a:f2:
20:a1:42:e3:6b:07:75:a7:d7:d3:86:b4:d6:ca:db:b3:20:7b:
b6:14:34:1e:3e:85:c7:31:18:88:96:ae:e0:04:ad:07:fc:23:
93:f9:01:b8:c9:54:7a:04:fa:01:9e:a3:77:ff:21:2c:fc:5e:
90:c8:99:e9:bd:39:fd:65:14:f6:ea:bc:59:1e:62:11:23:f8:
88:e6:d5:91:65:0e:c4:01:e4:e6:94:1b:dd:fc:c6:12:01:3d:
7b:c2:d5:e4:ce:c6:62:40:d9:ce:1c:04:3f:86:24:6b:54:fd:
20:7a:46:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:58 2026 by rpki-client