This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft
File: KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft (raw, json)
Hash identifier: 9cmONV026VXONTbXIvwxXV/RQYhe39noQk5xRxPrXMM=
Subject key identifier: C2:D2:55:1B:06:1C:38:68:8B:91:B1:69:DE:1E:78:36:18:50:DE:1D
Authority key identifier: 29:3A:C6:40:53:09:DE:94:95:16:87:FE:17:29:6A:DD:CD:95:72:FC
Certificate issuer: /CN=A9152329/serialNumber=293AC6405309DE94951687FE17296ADDCD9572FC
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft
Manifest number: E2
Signing time: Sun 25 Jan 2026 04:45:06 +0000
Manifest this update: Sun 25 Jan 2026 04:45:06 +0000
Manifest next update: Sun 01 Feb 2026 04:45:06 +0000
Files and hashes: 1: KTrGQFMJ3pSVFof-Fylq3c2Vcvw.crl (hash: RUMM6beM3dd/EvtqlDt+RnKK28qiQofSHODLFbMqOYQ=)
2: 38161248A26911EFBF6D0319C4F9AE02.roa (hash: n0Thufh5JkG5zit4bqbChTpHcB8GdZqVj3xLM+DLazE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.crl
rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:45:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152329, serialNumber=293AC6405309DE94951687FE17296ADDCD9572FC
Validity
Not Before: Jan 25 04:45:06 2026 GMT
Not After : Feb 1 04:45:06 2026 GMT
Subject: CN=69759fd2-f455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:bd:75:88:af:b4:8b:99:ac:59:c4:4c:25:
39:a3:50:cc:54:57:29:04:ea:42:fb:cc:f9:88:c6:
f7:8d:75:1b:61:1e:bb:39:ed:4e:a9:1c:fe:00:91:
df:07:b7:bf:43:e6:86:79:22:05:62:89:cb:69:aa:
c3:73:d0:b3:26:30:d5:71:ac:e7:f5:a0:3f:cb:95:
df:17:e7:e4:b4:81:24:68:6e:ed:36:7a:b6:4e:ae:
cc:e5:e5:e3:d8:cd:77:09:43:6d:6d:32:c1:26:d4:
4a:48:3c:0c:47:f2:e1:db:3c:aa:87:91:a9:29:76:
84:8c:39:d7:f6:03:d4:9c:54:63:92:3e:85:8e:0d:
05:85:3f:ce:08:55:2d:0c:14:89:4c:eb:9f:4f:4d:
5c:ac:61:b3:ce:0a:f6:34:12:71:ba:19:43:96:15:
8f:78:a5:55:03:57:52:fc:1f:fc:c6:0c:17:57:8c:
45:2d:5d:b1:6b:aa:61:a5:0e:d8:31:bf:d5:99:39:
84:bb:ab:71:70:96:b0:76:96:de:a3:3b:f1:11:02:
d7:65:1b:a2:f2:11:3f:f9:ef:1e:1c:cb:82:ce:ab:
75:14:ef:e1:54:fe:1e:91:4b:4f:a1:65:d7:55:00:
7e:23:67:50:16:47:d7:c9:4b:61:e0:53:61:79:fb:
cc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D2:55:1B:06:1C:38:68:8B:91:B1:69:DE:1E:78:36:18:50:DE:1D
X509v3 Authority Key Identifier:
keyid:29:3A:C6:40:53:09:DE:94:95:16:87:FE:17:29:6A:DD:CD:95:72:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:90:77:8a:92:b4:8b:0f:24:7a:92:c1:f1:77:6c:da:d0:30:
0b:7a:92:5a:ea:a0:5d:44:38:0a:55:cc:d1:a0:0b:41:1a:7c:
01:ab:64:4e:77:2c:3c:de:9d:d3:4e:7e:ee:ae:c9:90:4f:18:
77:cf:3c:84:54:ab:51:f0:09:24:e9:7e:01:7a:29:eb:1f:28:
79:7b:7d:96:51:3d:55:60:e0:1f:d9:02:ac:20:b7:7e:ae:1f:
55:a7:a0:53:53:1e:47:1e:90:cc:3e:4f:3f:36:84:6e:ce:ff:
29:f8:f6:ef:1c:ad:0c:62:d7:3e:79:68:f3:21:5b:f1:1a:b3:
2f:50:50:45:6d:a8:50:4f:db:9e:a8:4c:a5:b7:40:a9:76:ec:
c9:da:fd:c6:3f:60:5a:5f:89:3b:91:11:23:6f:18:5d:a1:6a:
53:3e:fe:91:8d:51:c4:53:a5:82:04:bc:19:ca:9a:2c:4f:e4:
bc:f6:57:6f:e1:bc:60:da:15:a0:bb:ae:d8:63:bc:c2:e2:59:
d2:d4:c7:22:d1:43:73:b6:3e:2b:a6:1b:14:0b:46:45:8f:60:
b9:7c:c8:52:05:61:f8:cb:f6:3a:92:85:2b:9b:58:55:bf:33:
c1:2e:f1:8e:41:3c:44:a9:44:7d:73:f8:64:c2:11:fa:69:0b:
61:45:59:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:23:04 2026 by rpki-client