This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft
File: kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft (raw, json)
Hash identifier: wU3OT1VnuSzQiOeSINI22/l1WhcwW+MOhz+nFDKBnxI=
Subject key identifier: 58:9B:74:A5:B1:A9:92:A3:72:57:C6:C1:0B:68:9C:3B:B1:A2:AE:80
Authority key identifier: 91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79
Certificate issuer: /CN=A914669D/serialNumber=91126E86F18C609404D190F298C32CD609FCFA79
Certificate serial: 06C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft
Manifest number: 06C1
Signing time: Sat 24 Jan 2026 21:32:39 +0000
Manifest this update: Sat 24 Jan 2026 21:32:39 +0000
Manifest next update: Sat 31 Jan 2026 21:32:39 +0000
Files and hashes: 1: kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl (hash: WjVArUR2yUuM/EGyjm4BGmSnW6VSoffQ03tlf9A2sl0=)
2: E521C8BE8DB011EBBA0A3723C4F9AE02.roa (hash: kyXa2/fOky6ixQEZzJ/YTQjRwQzmiBb1i8hW42gK6jE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl
rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:32:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1735 (0x6c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914669D, serialNumber=91126E86F18C609404D190F298C32CD609FCFA79
Validity
Not Before: Jan 24 21:32:39 2026 GMT
Not After : Jan 31 21:32:39 2026 GMT
Subject: CN=69753a77-3aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:2d:85:95:33:5d:c2:16:96:3d:d0:f6:f6:
48:75:7a:a3:a2:74:ec:d0:3f:36:61:4f:c3:4a:1d:
bd:b7:fb:c5:ec:fb:da:c4:e7:fb:88:b4:f9:fb:64:
b4:89:f3:8c:fd:15:24:7d:7e:fc:31:d8:05:e3:c6:
0f:6a:b2:0b:41:18:30:52:a1:f7:48:ad:fb:e3:5d:
85:80:4f:38:de:ac:63:05:e3:56:06:ad:e4:45:2b:
24:6f:f9:32:ae:56:cf:ad:b1:0a:55:1b:e8:ac:a9:
ec:56:ee:91:b7:ee:ea:97:e6:d9:1c:4e:13:c4:b9:
a5:5c:15:7f:cb:c5:f7:bf:b4:d1:f5:f3:15:b1:d0:
d9:1b:f2:47:de:66:fb:b9:1e:18:a5:48:c3:f5:bd:
d7:f3:c1:ae:a6:cf:09:b9:0b:37:84:71:ad:a3:c0:
0a:49:ea:e0:94:ad:5b:38:ee:bc:7e:1a:69:dd:e7:
f8:8d:7b:5e:7c:7f:c1:9c:88:30:a9:4d:c2:48:bc:
82:d5:b2:22:a3:e5:54:fb:ab:a0:f3:59:e7:6d:b7:
5d:25:b5:2e:cb:d8:35:41:c0:33:af:53:b1:ed:f0:
a1:85:37:5a:a1:24:45:68:44:23:27:2e:cf:27:df:
50:60:3e:5a:8c:71:70:4a:cb:b0:5e:5c:11:6e:23:
8e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9B:74:A5:B1:A9:92:A3:72:57:C6:C1:0B:68:9C:3B:B1:A2:AE:80
X509v3 Authority Key Identifier:
keyid:91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:68:49:8e:c1:7a:d8:a3:67:87:3b:a2:30:64:66:0b:39:60:
9e:fd:58:29:5e:ca:2e:b5:e6:7e:c3:5c:03:d3:21:b6:e0:63:
c1:89:5e:2e:20:0f:08:fc:14:b7:1e:d7:c0:4b:27:79:29:69:
6a:6f:b3:71:fd:73:a8:fc:75:05:81:89:79:4f:40:97:85:43:
48:35:b4:05:43:f9:a9:ac:e5:03:b3:f9:03:47:0b:b0:b0:56:
79:f1:ae:3d:47:94:c0:87:76:03:fb:ea:31:95:d4:c8:14:1d:
e6:55:ee:7b:db:15:e2:38:a0:a0:14:89:22:7b:7b:88:8f:ac:
92:ea:50:0e:4c:3b:07:1b:47:97:f0:b3:9e:74:43:d6:43:e7:
a0:28:77:0a:64:c6:76:e3:b8:77:68:85:73:77:44:11:f4:57:
04:83:ad:08:08:98:73:46:25:25:48:53:08:ee:11:c1:88:e5:
71:41:47:7a:0f:c5:27:ed:09:f0:dd:76:b7:b9:99:7c:20:e9:
3a:21:c2:9d:95:3d:37:be:0c:85:a1:20:06:63:37:45:ea:0b:
b5:73:6c:f2:95:62:a3:11:74:a4:56:a6:bf:f0:af:ca:5d:62:
7e:ee:6e:e4:f1:5e:cc:70:79:77:c5:5f:8a:fc:95:21:1c:62:
7e:66:02:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:41:49 2026 by rpki-client