This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
File: kCs-s81I0JqgoQybLLKA0KDNLbo.mft (raw, json)
Hash identifier: tdDZx9CP71yHMxM3x11kSIjG0O0LCVGqqEbMaFj6bPQ=
Subject key identifier: BB:FB:13:27:11:69:72:78:4B:72:9C:10:C9:F9:00:CE:2F:96:34:99
Authority key identifier: 90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA
Certificate issuer: /CN=A915A161/serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA
Certificate serial: 1064
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
Manifest number: 1064
Signing time: Sat 24 Jan 2026 17:04:54 +0000
Manifest this update: Sat 24 Jan 2026 17:04:54 +0000
Manifest next update: Sat 31 Jan 2026 17:04:54 +0000
Files and hashes: 1: kCs-s81I0JqgoQybLLKA0KDNLbo.crl (hash: 99CWSTHg6Ewk5sNNI3l5jjobKSKaAXz1oQJhxrdI9Nc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl
rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:04:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4196 (0x1064)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A161, serialNumber=902B3EB3CD48D09AA0A10C9B2CB280D0A0CD2DBA
Validity
Not Before: Jan 24 17:04:54 2026 GMT
Not After : Jan 31 17:04:54 2026 GMT
Subject: CN=6974fbb6-d526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:46:4e:80:34:81:e3:3f:de:e2:56:96:a0:af:
63:51:ab:b7:54:9a:4c:d8:8b:5d:50:d8:e0:d0:8f:
f1:75:bd:da:9b:cf:f7:3d:e7:0b:cd:19:9e:15:02:
1a:e7:ed:6c:96:4e:89:d5:ab:8e:36:1f:8c:bd:8d:
24:04:fe:7c:0c:8b:17:8e:23:66:18:6a:7b:ff:f7:
45:1f:7c:ec:d2:33:b0:38:6b:fa:25:6b:94:43:50:
51:80:50:9e:0e:98:a9:9f:85:67:2e:fc:c9:34:dc:
40:6e:8f:75:c4:2b:78:51:13:9c:85:6f:d3:0e:82:
1a:64:2c:a9:f5:88:74:e4:1b:e7:75:27:04:ce:c1:
41:21:aa:a9:3c:e3:ff:05:a8:44:0f:79:ae:f7:1c:
59:64:f4:d2:38:c4:da:76:cb:d5:97:89:af:dc:af:
49:15:b1:1c:28:7a:0f:02:35:80:c8:34:7b:f1:19:
61:b5:75:d4:11:a9:3f:fa:ff:15:55:e0:6e:e4:f7:
5b:4d:bd:ff:de:e9:81:0a:54:9f:3d:e9:97:47:5e:
4e:bf:0c:06:27:e4:99:6e:1c:38:60:33:17:83:a9:
73:56:01:22:da:e5:2c:6f:f2:b8:1c:3d:e9:5a:bf:
84:68:24:41:f1:91:9a:c2:c4:1b:fd:e0:ad:a5:75:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FB:13:27:11:69:72:78:4B:72:9C:10:C9:F9:00:CE:2F:96:34:99
X509v3 Authority Key Identifier:
keyid:90:2B:3E:B3:CD:48:D0:9A:A0:A1:0C:9B:2C:B2:80:D0:A0:CD:2D:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCs-s81I0JqgoQybLLKA0KDNLbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A161/B07B2AB84B1011E9AAE3EE43C4F9AE02/kCs-s81I0JqgoQybLLKA0KDNLbo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:39:01:5f:74:2b:fe:fe:fe:90:cd:c3:8e:aa:cf:7c:da:05:
d7:b7:75:e9:7c:4b:56:2b:80:57:cc:e9:c2:d5:ec:ca:f0:d8:
07:38:b6:46:82:41:17:f1:4f:81:8e:54:b7:93:b3:da:2d:e5:
45:c9:94:f6:69:4b:9a:87:b4:ff:79:4b:2e:ac:37:fc:62:44:
6c:a8:0a:b9:a9:41:29:4f:7f:4c:af:06:23:3a:32:bc:5e:82:
19:ea:60:d0:82:47:6a:45:be:e5:43:2e:41:c5:d6:4a:1a:aa:
b6:80:03:e5:70:bb:72:9d:7c:08:ce:ab:4d:f3:99:5c:13:78:
29:1d:1b:23:f6:1e:b9:16:c1:e3:00:ac:23:8e:e1:65:26:b1:
c7:ed:68:ff:be:d3:eb:64:25:62:5c:29:32:1a:57:fd:97:e7:
a6:c5:d1:51:f4:69:a0:b9:b7:0f:b5:7e:29:ed:f5:f0:f8:e8:
a3:b2:be:7e:12:20:f8:2b:f5:e1:af:d8:8d:69:8b:50:41:ea:
2a:3f:a2:63:9a:de:1e:62:c4:97:1a:e8:53:f7:27:aa:3c:bd:
8b:f2:69:bb:11:02:7a:2c:a5:c8:ac:89:15:df:9a:95:5e:92:
5e:72:f7:b4:85:89:22:4d:03:ed:b6:1c:71:cd:6f:a1:78:90:
41:48:fc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:23:01 2026 by rpki-client