This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
File: pAislKDTNvRzJJBakYrySQLw3os.mft (raw, json)
Hash identifier: 5qkILchqvcyx5NHiRMp8N6FKwga22O1CVmKnV8RUnpQ=
Subject key identifier: 05:1B:80:05:46:FC:FD:39:05:6B:4C:EB:02:94:7B:DF:18:D9:3C:BB
Authority key identifier: A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B
Certificate issuer: /CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
Certificate serial: 01BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
Manifest number: 01AB
Signing time: Sun 25 Jan 2026 02:43:15 +0000
Manifest this update: Sun 25 Jan 2026 02:43:14 +0000
Manifest next update: Sun 01 Feb 2026 02:43:14 +0000
Files and hashes: 1: pAislKDTNvRzJJBakYrySQLw3os.crl (hash: H/moD/J4XM5E2TjWEY/5nuevkS5gUD8fFgItr2eFy8Q=)
2: 31A1996898F711EEB7B27877C4F9AE02.roa (hash: inpneUp76nQQX6Q/CpN1dgRfEj/8zpxJb6ddO35TdAM=)
3: 62C61398C93A11EEA1A4CA4FC4F9AE02.roa (hash: jax3qkALNRFMNrAOXKyN2WiovYFpDRlk86jOWinHUwU=)
4: 62258D42C93A11EEA1A4CA4FC4F9AE02.roa (hash: TLDnWAlNl4+LlNPMq6EhX78RX8oFwqpDV+CE22BbZbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl
rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446 (0x1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158620, serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
Validity
Not Before: Jan 25 02:43:14 2026 GMT
Not After : Feb 1 02:43:14 2026 GMT
Subject: CN=69758343-358d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:15:65:d1:80:0d:32:cf:6f:35:78:be:a2:
26:31:55:66:53:ad:1d:b7:6d:b0:8f:44:78:d9:b6:
72:6e:70:1c:03:f7:06:3a:cd:9e:d1:af:71:19:59:
6b:a7:f2:28:d0:8c:8a:f8:bd:68:07:2c:97:b0:3f:
70:20:95:48:98:2f:33:7b:f7:9f:35:24:ff:0a:fd:
d0:38:22:04:9f:8d:89:71:54:dd:80:cd:1e:6f:35:
d4:71:ee:49:8d:97:9e:da:60:64:30:a2:d2:e1:6a:
1e:cf:31:cb:11:dd:7a:df:05:c7:18:ce:43:c2:62:
d2:47:38:14:fd:bc:ad:d2:cb:cb:62:4d:b3:44:05:
21:c2:46:46:60:f5:b2:bf:ae:69:4d:3a:62:da:4c:
a5:5b:a8:a8:c1:59:b9:43:f7:f8:fc:e2:b4:b9:1a:
e8:8a:69:ea:a6:6a:10:dc:60:40:56:65:b4:a7:42:
fb:b9:fe:c4:f6:a9:ff:50:51:97:bd:41:d3:f0:f1:
78:37:fe:56:61:04:d8:a1:5b:24:11:66:b7:e6:13:
fe:93:16:82:11:9d:45:9b:c9:20:c9:44:31:13:87:
19:f0:7c:64:4e:11:72:de:1b:f5:db:5f:c8:a7:1a:
5a:2a:ea:d4:a0:8b:67:37:80:cd:be:e2:a5:b5:53:
3f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1B:80:05:46:FC:FD:39:05:6B:4C:EB:02:94:7B:DF:18:D9:3C:BB
X509v3 Authority Key Identifier:
keyid:A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:83:c0:2b:37:ca:1a:0c:e5:30:4f:f9:a3:6b:a7:66:08:1c:
1a:4b:6d:e2:7b:f7:39:2c:cc:42:27:73:8a:2c:c1:8a:20:3b:
c2:77:76:1f:e5:29:12:c6:22:e1:e9:b5:dd:ab:ef:f8:e7:d2:
c5:19:f2:45:27:78:79:bb:8d:8e:f6:1a:04:b1:a2:1b:d7:b8:
54:ee:e3:cf:40:44:09:d8:48:ce:20:c6:99:0c:f8:5c:e9:50:
24:cb:d5:99:6e:85:16:c2:0e:83:09:e2:10:4f:d6:8f:81:fc:
a4:b3:cd:bd:f1:f3:23:ae:30:14:b1:cf:1b:fe:34:3c:86:63:
e9:01:84:54:c2:74:c4:20:86:db:53:9c:fe:e3:6c:69:55:55:
af:2e:e4:e8:a9:98:d3:ab:6b:28:b9:e3:be:91:53:25:1a:f8:
a0:50:43:57:c6:e3:88:c0:c8:83:9e:32:ec:a3:fe:17:ce:a0:
af:c9:a3:94:54:8d:82:3a:91:23:e2:e1:7d:ab:06:59:5d:b8:
a1:02:f1:79:f7:46:a8:d6:ce:e7:91:ae:4f:e2:a7:39:37:dd:
f0:0f:90:c5:2a:13:79:ce:6d:68:8f:38:b1:e9:e8:6c:43:0a:
8b:58:94:5f:43:94:0b:8a:30:38:ec:24:d7:e0:32:c6:ca:8a:
69:e7:ce:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:04:30 2026 by rpki-client