This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft
File: CKORxrOJyBDpW8YTnOyynV05WMQ.mft (raw, json)
Hash identifier: lf3mxxaJB/99Zmwz6R+8TdNZJLmg4Vvz2KpQdiYYA4M=
Subject key identifier: 52:6D:48:7B:94:F7:78:B9:EC:D1:A6:2E:18:EE:21:D6:AA:AD:6E:F9
Authority key identifier: 08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4
Certificate issuer: /CN=A9145E09/serialNumber=08A391C6B389C810E95BC6139CECB29D5D3958C4
Certificate serial: A0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft
Manifest number: 9E
Signing time: Sun 25 Jan 2026 05:31:56 +0000
Manifest this update: Sun 25 Jan 2026 05:31:55 +0000
Manifest next update: Sun 01 Feb 2026 05:31:55 +0000
Files and hashes: 1: CKORxrOJyBDpW8YTnOyynV05WMQ.crl (hash: 2720GTmIcmVC6QlXzM9/TvBkz9Z9XN0GNeg5tnB+xQg=)
2: EE04266A08C811F09F9B7B57C4F9AE02.roa (hash: lfdyi++bWKTqNq0AntGKkt45cnrhAjp+IKIVrz1KfzY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.crl
rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145E09, serialNumber=08A391C6B389C810E95BC6139CECB29D5D3958C4
Validity
Not Before: Jan 25 05:31:55 2026 GMT
Not After : Feb 1 05:31:55 2026 GMT
Subject: CN=6975aacb-6725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:b6:ac:f5:28:b1:34:1d:15:5d:30:89:1e:
0d:61:9c:96:29:d8:02:0e:11:52:1a:6e:74:3a:c8:
41:3d:09:de:de:c4:43:41:af:36:08:f3:41:a6:9f:
24:14:d2:84:fa:38:2f:df:66:8a:dd:ca:7e:52:c6:
67:19:ea:34:4c:5b:a5:b9:e2:6b:15:d5:47:d3:d0:
be:91:58:fa:cb:54:9e:eb:86:50:fb:02:4d:d2:b1:
e3:c0:8e:4d:8c:47:8e:f7:df:49:fa:b3:56:f2:fb:
a1:61:9c:3c:96:f6:5b:67:4e:92:a8:05:44:83:b8:
cb:25:21:22:b7:97:8e:93:5d:f0:10:3e:50:f8:f7:
b1:63:b6:1c:ac:2b:12:ef:fc:76:fe:b7:b7:c8:89:
78:5b:48:00:1b:e1:64:9a:2e:32:ec:a9:37:9f:38:
eb:9a:fc:ac:9b:18:4d:e3:66:ee:09:3b:30:2b:88:
3a:5b:fd:63:f5:07:dc:c1:f1:b0:10:62:b5:f7:6a:
2a:aa:39:aa:37:70:5e:b6:c9:95:d5:3f:95:46:cc:
7d:70:b9:1e:29:ab:e9:79:f8:f7:93:b6:9a:d1:43:
3e:cd:6f:01:04:f8:95:c1:d0:3a:6c:08:03:7a:50:
3a:f6:ac:d0:46:14:dd:ac:37:ea:7b:bd:22:dc:15:
59:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6D:48:7B:94:F7:78:B9:EC:D1:A6:2E:18:EE:21:D6:AA:AD:6E:F9
X509v3 Authority Key Identifier:
keyid:08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:05:70:1c:fa:f6:e1:8d:7c:d2:a0:ee:50:5e:b4:4d:41:8c:
27:ad:0f:6f:df:ce:0c:3f:50:c6:88:3b:88:ad:c0:0c:71:90:
c3:13:59:64:ba:80:47:7c:45:bc:0c:e8:46:87:4c:09:2d:35:
7d:bd:65:b6:68:ca:39:77:83:3e:ae:74:84:b4:ac:25:df:95:
f2:5c:61:5a:1a:46:c2:d3:65:14:ac:81:35:8c:97:4b:09:92:
b8:23:e1:dc:41:b2:d6:71:28:fc:f1:d7:d4:14:32:62:11:47:
c5:bc:30:5e:36:68:c5:97:9d:b7:4e:19:08:cb:72:81:cc:d2:
ae:2e:3a:4b:b6:d8:42:54:0b:21:1f:04:ef:6f:72:1e:ee:eb:
92:91:70:df:1e:d7:c0:fc:63:8d:85:fd:1a:19:d0:bb:f7:6d:
67:d0:52:dc:4c:92:54:9b:a5:98:4a:8c:45:b9:c1:54:87:6d:
15:85:2b:18:32:95:f1:dc:23:a8:a4:50:fd:6d:95:1a:5d:76:
e0:3b:7b:98:14:76:9f:bb:66:2e:0c:e4:0a:0d:99:5d:af:04:
81:5a:5f:c4:4e:98:9a:78:35:ac:d9:71:d1:39:a6:32:1c:c3:
85:61:24:bc:60:24:79:e1:3b:da:a4:72:ba:97:7a:e9:a2:ba:
14:ee:a8:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDVFMDkxMTAvBgNVBAUTKDA4QTM5MUM2QjM4OUM4MTBFOTVCQzYxMzlDRUNCMjlE
NUQzOTU4QzQwHhcNMjYwMTI1MDUzMTU1WhcNMjYwMjAxMDUzMTU1WjAYMRYwFAYD
VQQDDA02OTc1YWFjYi02NzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn3m2rPUosTQdFV0wiR4NYZyWKdgCDhFSGm50OshBPQne3sRDQa82CPNBpp8k
FNKE+jgv32aK3cp+UsZnGeo0TFulueJrFdVH09C+kVj6y1Se64ZQ+wJN0rHjwI5N
jEeO999J+rNW8vuhYZw8lvZbZ06SqAVEg7jLJSEit5eOk13wED5Q+PexY7YcrCsS
7/x2/re3yIl4W0gAG+Fkmi4y7Kk3nzjrmvysmxhN42buCTswK4g6W/1j9QfcwfGw
EGK192oqqjmqN3BetsmV1T+VRsx9cLkeKavpefj3k7aa0UM+zW8BBPiVwdA6bAgD
elA69qzQRhTdrDfqe70i3BVZwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJtSHuU
93i57NGmLhjuIdaqrW75MB8GA1UdIwQYMBaAFAijkcazicgQ6VvGE5zssp1dOVjE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUUwOS84NzA1NUIzMjA4
QzgxMUYwQTBEMzRFNTZDNEY5QUUwMi9DS09SeHJPSnlCRHBXOFlUbk95eW5WMDVX
TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0NLT1J4ck9KeUJEcFc4WVRuT3l5blYwNVdNUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NUUwOS84NzA1NUIzMjA4QzgxMUYwQTBEMzRFNTZDNEY5QUUwMi9DS09SeHJPSnlC
RHBXOFlUbk95eW5WMDVXTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAxBXAc+vbhjXzSoO5QXrRNQYwnrQ9v384MP1DGiDuIrcAMcZDDE1lk
uoBHfEW8DOhGh0wJLTV9vWW2aMo5d4M+rnSEtKwl35XyXGFaGkbC02UUrIE1jJdL
CZK4I+HcQbLWcSj88dfUFDJiEUfFvDBeNmjFl523ThkIy3KBzNKuLjpLtthCVAsh
HwTvb3Ie7uuSkXDfHtfA/GONhf0aGdC7921n0FLcTJJUm6WYSoxFucFUh20VhSsY
MpXx3COopFD9bZUaXXbgO3uYFHafu2YuDOQKDZldrwSBWl/ETpiaeDWs2XHROaYy
HMOFYSS8YCR54TvapHK6l3rporoU7qix
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:23:20 2026 by rpki-client