This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.mft
File: kDo4Q2eaCxBdykhcPWSPPREnL7c.mft (raw, json)
Hash identifier: Zrkf4KkzqZIIf0jj2sb5dg+W8BD1sKZ0xWlfzUazuQ8=
Subject key identifier: B6:9B:F4:C1:CE:71:F1:7D:2E:B5:59:5D:CE:B6:F4:E1:C6:29:44:B4
Authority key identifier: 90:3A:38:43:67:9A:0B:10:5D:CA:48:5C:3D:64:8F:3D:11:27:2F:B7
Certificate issuer: /CN=A914E488/serialNumber=903A3843679A0B105DCA485C3D648F3D11272FB7
Certificate serial: 02BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDo4Q2eaCxBdykhcPWSPPREnL7c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.mft
Manifest number: 02B8
Signing time: Sun 25 Jan 2026 00:36:12 +0000
Manifest this update: Sun 25 Jan 2026 00:36:11 +0000
Manifest next update: Sun 01 Feb 2026 00:36:11 +0000
Files and hashes: 1: kDo4Q2eaCxBdykhcPWSPPREnL7c.crl (hash: Qi92yCUX+8DsFhpWkZnQ3luNwaNrbWHekDttE/W+R9Y=)
2: 606EB6AE240911EDBFA59C27C4F9AE02.roa (hash: NNo4SAwO23W3h7iwFhvtQVGgAhn5LQhxSRbEa+xKr7I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.crl
rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDo4Q2eaCxBdykhcPWSPPREnL7c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 700 (0x2bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E488, serialNumber=903A3843679A0B105DCA485C3D648F3D11272FB7
Validity
Not Before: Jan 25 00:36:11 2026 GMT
Not After : Feb 1 00:36:11 2026 GMT
Subject: CN=6975657b-ec0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:07:17:71:b9:e7:af:ed:b2:f3:06:6f:b6:bd:
2a:5e:56:c4:51:fc:d0:fd:81:80:b5:9a:ce:2b:50:
fd:eb:0e:73:b0:ef:f6:d7:b9:94:46:9b:9f:0d:6a:
cd:ff:9e:e7:17:fc:45:3f:ef:86:db:aa:00:e8:f8:
7c:b0:01:28:81:69:17:bc:0e:86:bf:4e:04:c8:ad:
d5:62:8b:3e:4e:9d:2c:45:e4:cb:45:16:df:d7:98:
0b:14:11:95:f8:4d:ff:48:f7:1f:39:a6:8a:f6:b8:
da:f7:27:a0:69:3d:24:cb:c7:1b:bd:57:23:6a:f4:
a5:f8:28:c9:21:83:b3:82:1d:97:64:30:cb:34:d7:
bb:ba:49:2a:7f:f1:b3:bf:fe:17:ae:fa:8e:90:4c:
13:65:02:6d:55:36:e1:b4:8c:79:56:f5:bd:29:45:
7d:de:d1:38:3a:b5:06:62:f5:77:a3:ce:58:96:f9:
10:36:3c:cc:45:ba:35:a0:8f:48:df:8c:22:bf:c9:
c1:d9:11:3a:9b:0b:10:a8:3b:2a:46:df:aa:8c:0e:
4a:5f:f2:bb:9d:af:f0:a5:6c:99:b2:a0:9b:9b:3b:
04:27:a9:7d:8f:f3:28:a3:94:55:da:f4:e0:aa:21:
a6:54:56:d4:59:43:a0:8d:b5:31:40:b1:c8:e6:66:
ae:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9B:F4:C1:CE:71:F1:7D:2E:B5:59:5D:CE:B6:F4:E1:C6:29:44:B4
X509v3 Authority Key Identifier:
keyid:90:3A:38:43:67:9A:0B:10:5D:CA:48:5C:3D:64:8F:3D:11:27:2F:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kDo4Q2eaCxBdykhcPWSPPREnL7c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E488/F88698CA240511EDB987B823C4F9AE02/kDo4Q2eaCxBdykhcPWSPPREnL7c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:0e:c7:e0:e2:5b:0e:04:b6:96:68:d2:e4:27:e3:9b:12:74:
a8:6f:81:a3:d7:e0:4f:e9:39:b2:49:a4:bc:bb:7b:46:00:1c:
47:97:7f:5f:a7:51:ea:a6:c2:09:7a:23:4f:a0:b0:94:7b:82:
09:ce:fb:c1:5a:ec:04:64:97:3b:aa:44:5a:78:7e:59:15:6d:
2d:dd:64:e4:ec:bc:97:72:54:59:30:e3:9b:db:e1:75:a8:ba:
07:50:3b:53:b7:84:fd:4f:ce:d6:3c:a6:a0:7e:04:46:90:fa:
36:0d:cf:f6:3b:e6:0a:a3:ff:5a:ec:f9:c9:36:4d:2e:c3:e2:
52:06:74:15:92:a7:40:57:1c:a3:67:fe:95:08:9a:db:14:c3:
cd:5e:e9:d4:11:04:bf:e7:4c:10:91:8f:c4:9b:5f:c9:3b:25:
18:b7:98:82:ce:ae:75:0b:33:f7:b5:bb:e4:cd:10:1e:19:0b:
85:5e:99:98:8b:ce:63:37:d5:f9:e1:d6:1a:20:c0:10:d4:f5:
a5:22:82:89:b7:f1:0b:99:5b:2e:51:6a:20:18:b8:f5:f8:64:
73:58:6a:59:9c:ad:2b:19:52:14:b7:cb:60:8d:f4:84:8e:f1:
e2:3e:99:df:cc:fc:13:29:83:96:5c:37:03:bf:bf:a5:5e:0f:
a7:fb:6b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:52:25 2026 by rpki-client