This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
File: rKBb-WKVthwuROndPExIxFm56Vw.mft (raw, json)
Hash identifier: vjZZULk5JVhWwLE2q7Q+7oexsyMoI9u3udtHQ7FNzPQ=
Subject key identifier: 2D:4E:71:8D:A9:55:5E:4E:0E:AF:FA:91:12:58:FA:3D:B1:50:01:79
Authority key identifier: AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C
Certificate issuer: /CN=A91547EC/serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C
Certificate serial: 4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
Manifest number: 4A
Signing time: Sun 25 Jan 2026 06:22:03 +0000
Manifest this update: Sun 25 Jan 2026 06:22:03 +0000
Manifest next update: Sun 01 Feb 2026 06:22:03 +0000
Files and hashes: 1: rKBb-WKVthwuROndPExIxFm56Vw.crl (hash: TpF701dyT+efz8gTlQ8ZmmMBEuqGsKEJ1CwfYg5ihJg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl
rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91547EC, serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C
Validity
Not Before: Jan 25 06:22:03 2026 GMT
Not After : Feb 1 06:22:03 2026 GMT
Subject: CN=6975b68b-d9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e7:43:55:7e:c2:25:f6:1d:b2:d1:db:4e:a1:
06:b4:e9:1e:a6:1b:4a:65:63:87:e8:5f:41:5c:cc:
7e:9b:63:e5:6a:8a:0b:8c:cc:ae:52:95:5c:c4:23:
f8:41:fa:5f:c0:d1:0f:30:9d:d4:e5:b8:1a:04:fd:
ce:af:9f:c2:a9:0b:0e:5f:6f:be:2b:76:da:b4:40:
68:38:ab:20:e0:c8:1e:55:61:8a:b8:68:da:2e:13:
92:d4:f9:cd:1c:3e:ca:60:26:ec:3e:c6:07:b2:12:
88:7b:e5:cc:71:0d:e2:e2:c2:e9:de:f8:8c:cb:73:
94:ac:bc:69:4e:9d:ec:ad:3c:4e:84:88:42:6e:e4:
80:19:e2:78:c9:c3:d0:77:18:5e:23:be:a1:c6:e5:
ff:30:40:cb:85:b6:12:2b:d1:0c:45:39:26:c7:d1:
58:14:5a:fb:84:19:bd:ad:b5:77:1c:66:90:8a:52:
3b:26:99:e3:48:2f:ed:ba:cc:76:8d:b4:62:af:64:
1b:d8:92:74:66:02:c4:49:f4:c3:5b:dc:27:cc:52:
7f:47:e2:af:ea:69:09:ce:05:c3:d3:9b:24:6c:ef:
55:af:67:1d:a5:55:a7:c3:9d:59:95:ed:28:55:1e:
fd:15:3d:fa:51:da:f6:19:da:bb:e8:15:81:40:59:
97:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4E:71:8D:A9:55:5E:4E:0E:AF:FA:91:12:58:FA:3D:B1:50:01:79
X509v3 Authority Key Identifier:
keyid:AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:8c:13:af:3f:a8:7e:73:26:fe:80:e8:70:b7:cd:06:14:8c:
87:f6:b4:f8:8c:db:c2:3a:4a:40:b6:71:a5:1b:ef:12:37:0a:
31:b8:71:02:03:53:26:ca:5b:66:ab:91:10:5e:84:cb:fa:3a:
14:1a:c5:5f:b3:37:4f:22:c1:8f:1b:0b:dc:80:70:bb:19:e9:
63:4c:83:19:25:c7:5a:39:a8:5b:6b:4f:53:80:f7:6a:d4:b9:
68:f0:b6:6d:3b:3e:c4:bd:b0:71:e4:f7:cc:d4:ff:2c:37:66:
e8:90:26:bf:97:8f:0f:96:b7:4d:8f:bc:36:a4:6f:00:07:42:
de:2b:09:88:11:08:f9:33:a0:6d:52:26:76:8b:0c:54:85:14:
24:f4:46:37:48:0b:dc:a5:8b:e7:b8:ea:3e:90:8d:c6:7a:26:
af:7f:98:9e:6c:5f:fb:43:91:d0:18:46:ea:c6:b5:bc:bd:85:
62:9e:14:08:0a:67:29:68:01:49:2c:36:5d:bd:aa:db:b2:84:
9f:c3:63:e5:08:cd:b6:b5:f6:29:3f:32:13:11:3c:7b:ad:67:
6b:cf:f6:3c:77:c5:9b:07:5e:ae:7d:ca:4d:6d:1d:ce:9a:9f:
a0:f7:d2:72:be:aa:cf:ee:19:8d:70:de:34:7c:b2:d3:38:c0:
1d:ec:5e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:41:42 2026 by rpki-client