This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft
File: kakyPLNEJvPZyJDjl4Ag1BezWfU.mft (raw, json)
Hash identifier: WiO3a88eN05yOSLw36vwzM4q5gpjfnDsS+NJnTomqQ4=
Subject key identifier: 5D:19:62:26:0B:87:60:13:22:61:59:76:DD:96:98:02:0E:B2:C1:89
Authority key identifier: 91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5
Certificate issuer: /CN=A9151265/serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5
Certificate serial: 04D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft
Manifest number: 04D2
Signing time: Sat 24 Jan 2026 23:02:30 +0000
Manifest this update: Sat 24 Jan 2026 23:02:29 +0000
Manifest next update: Sat 31 Jan 2026 23:02:29 +0000
Files and hashes: 1: kakyPLNEJvPZyJDjl4Ag1BezWfU.crl (hash: NhBSPZmuL15NStGoVutbfiaDeZ4SFMtiPZUd31zDOOM=)
2: B1334FD4522011ECB0594C2BC4F9AE02.roa (hash: L/DAW8Ka/ZQ70dTAaIp8b3yTT3hMsyA6jtH7bmtzLEk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl
rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1240 (0x4d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151265, serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5
Validity
Not Before: Jan 24 23:02:29 2026 GMT
Not After : Jan 31 23:02:29 2026 GMT
Subject: CN=69754f86-4353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:26:66:66:0f:0a:99:79:b3:08:81:13:ac:4a:
71:0d:10:fb:1a:26:f6:d8:cd:ca:17:a8:9a:21:09:
44:94:63:7c:27:4b:3a:de:ae:79:e2:52:48:39:10:
cb:76:56:9f:f8:dc:b9:bf:3a:ed:b5:62:ed:af:35:
c9:e2:a0:ac:18:b0:9d:6e:e3:39:e2:5b:80:a3:71:
ef:20:d4:34:58:65:ea:8c:46:5d:bb:52:11:11:a3:
c0:45:c5:48:6a:99:d6:be:b9:6b:8f:f3:8f:c4:84:
f4:7e:dc:7d:02:08:48:59:2e:5d:c2:c1:dc:0c:55:
55:25:7c:40:50:ef:69:18:28:eb:32:91:0a:b7:b4:
bb:66:f2:c4:16:e1:6b:ed:12:98:ec:7b:6b:9f:8d:
c0:27:e1:a3:3c:b2:56:db:63:cb:7a:b1:ee:03:29:
69:21:9b:c8:0c:72:cb:a6:48:3e:9d:93:32:fe:8a:
30:a2:a6:52:a4:f4:39:fa:e9:83:94:dd:55:b4:25:
14:f1:2c:af:87:da:07:0a:1d:31:64:90:e7:4f:c1:
c7:42:67:6e:f6:b7:24:0a:d2:67:08:54:db:c8:03:
d0:8c:ff:0c:5b:f8:a7:43:01:1c:aa:56:8a:30:17:
67:09:2b:4d:37:3d:7e:dc:a4:9c:d2:12:a8:bd:35:
5c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:19:62:26:0B:87:60:13:22:61:59:76:DD:96:98:02:0E:B2:C1:89
X509v3 Authority Key Identifier:
keyid:91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:2c:98:1d:e8:95:e8:3f:13:16:f9:92:eb:70:18:38:45:d5:
56:87:30:30:c8:ad:1b:06:ae:ad:93:a7:9f:64:1f:8f:99:9c:
20:c3:8e:ac:da:51:0f:8c:46:4c:a6:5a:92:4b:0f:04:b4:cf:
a9:2d:49:90:ca:72:4c:89:e3:f2:cc:9d:63:27:2f:83:fc:b6:
6a:51:85:32:5a:ff:bd:53:15:50:83:1a:29:c0:e3:82:96:75:
64:f6:8d:00:16:69:12:bf:f4:9b:2a:c3:80:21:f2:1f:51:4c:
0f:f1:9c:22:c1:34:c8:80:99:ff:54:e1:80:e9:60:82:15:10:
38:49:9f:46:b5:07:44:9f:44:25:04:1d:8f:ea:1e:ea:fa:ef:
06:00:d9:41:fa:3f:3d:04:90:56:e2:62:57:a7:a7:62:c2:8d:
a2:37:86:69:08:37:58:61:cc:dc:62:35:e8:b9:49:14:18:f0:
32:bc:61:af:0a:f1:99:c9:cb:22:32:c1:e8:5f:72:72:97:18:
3c:64:01:dc:71:1d:18:93:2b:42:60:07:ee:a7:8b:6d:8b:a3:
e6:6c:ca:67:6c:71:87:41:d0:91:2a:3e:f0:88:1b:af:98:7d:
79:fe:61:02:e6:3b:83:a7:4f:ed:e7:40:e3:c6:95:97:62:f5:
e5:21:4e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:31:20 2026 by rpki-client