This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft
File: k-dhjM_iZIDXknoYcbrYP--d9IQ.mft (raw, json)
Hash identifier: 0P3NsuCCPwI2nNG0UTL6GtMq5WW28sNHKYAgMxOMxZo=
Subject key identifier: 37:70:59:03:0F:79:3B:3C:1D:4F:23:DF:40:DE:E1:98:57:22:87:30
Authority key identifier: 93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84
Certificate issuer: /CN=A915F438/serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484
Certificate serial: 25A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft
Manifest number: 258E
Signing time: Sat 24 Jan 2026 15:35:17 +0000
Manifest this update: Sat 24 Jan 2026 15:35:16 +0000
Manifest next update: Sat 31 Jan 2026 15:35:16 +0000
Files and hashes: 1: k-dhjM_iZIDXknoYcbrYP--d9IQ.crl (hash: iQz+CBEi4Wz6cy5+BGjzr7YEaFxdLomO0qby8ixAtd4=)
2: 657B47B61C2F11E880C4ED7BC4F9AE02.roa (hash: SqubnCOkk8RsrmFBLZGk+dGzptnKgDT9xCotCHCxhuo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl
rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:35:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9635 (0x25a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F438, serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484
Validity
Not Before: Jan 24 15:35:16 2026 GMT
Not After : Jan 31 15:35:16 2026 GMT
Subject: CN=6974e6b4-27bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:50:c7:1e:d2:d2:fc:72:1f:63:d2:59:fc:
76:6e:a0:cf:91:e7:a7:97:1d:a9:d9:8a:5c:a1:d3:
0f:52:5a:15:5c:49:f1:3f:91:4f:6c:c3:f5:06:a0:
43:5f:4c:93:b7:2a:f4:02:6c:e0:38:c2:ee:e9:db:
b2:f3:cb:65:7e:1f:0a:b3:f1:ec:54:cb:ec:c5:59:
a7:7a:f3:67:4b:aa:0e:3f:f1:7e:ab:bb:47:67:ba:
b7:9a:b0:7d:eb:6f:50:5e:55:6b:61:a8:85:ff:85:
1c:d1:86:d0:46:88:2e:7b:7d:f6:b1:86:4c:06:0b:
37:95:be:b5:e2:56:91:6c:63:d8:fe:b9:41:e4:e6:
b3:e3:52:95:6e:da:f7:d8:ed:41:d6:14:27:d6:23:
11:00:99:b3:6e:f9:d8:31:e7:80:4f:00:96:c9:3b:
80:6d:06:17:e4:d8:3e:34:9d:42:c4:2b:c3:f3:4b:
0b:af:8d:16:7c:3f:e5:20:64:06:6e:d9:a9:5c:c5:
b5:5e:1b:30:8f:00:e5:d7:6f:cb:79:03:9d:56:f0:
e7:81:84:9c:4f:ee:63:94:3f:37:46:d9:67:5e:86:
f6:c7:cf:05:f8:17:98:cb:48:80:9f:80:fe:cc:21:
1e:f2:92:fb:4d:49:9f:a0:b5:e0:de:8f:1c:88:f1:
53:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:70:59:03:0F:79:3B:3C:1D:4F:23:DF:40:DE:E1:98:57:22:87:30
X509v3 Authority Key Identifier:
keyid:93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:fd:fc:17:8a:d2:e5:08:5e:a4:e3:67:54:04:46:43:e3:36:
58:c4:f7:9e:19:fc:c7:3f:d1:3d:6e:2f:03:d5:12:0b:70:48:
41:4a:c1:66:d6:45:96:86:d3:49:23:8e:76:03:46:6d:14:b9:
e7:3d:72:f1:0e:35:bd:e4:35:3a:22:20:5b:8f:47:d5:79:08:
63:9e:7c:c0:73:2d:30:63:a4:7d:0f:f3:81:13:ec:60:18:a5:
13:7f:ad:22:ca:ba:4f:bc:13:64:af:ce:e3:45:89:df:cd:18:
6c:36:18:97:48:36:28:3c:6f:73:7d:10:1c:d3:1a:8d:8c:47:
b1:64:93:1b:6f:32:19:89:2c:09:76:3a:e8:40:56:20:06:9a:
2b:c0:fe:9f:0e:86:da:dd:83:15:d1:49:31:1c:ad:6b:f3:7a:
e8:02:c6:05:8c:de:f9:61:34:f3:28:97:f2:fc:1e:59:07:6d:
ac:27:59:79:ad:84:81:4d:aa:69:78:80:28:78:eb:05:cd:f3:
b2:ac:25:71:c0:98:d8:39:02:80:0e:a1:0a:eb:21:df:6b:20:
4f:fd:d2:05:14:5e:8e:0d:24:0d:e9:6d:86:47:c6:6b:52:a4:
88:35:ae:1a:e2:87:23:9e:90:ff:fb:35:86:b7:7e:3e:5c:52:
f7:d3:82:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY0MzgxMTAvBgNVBAUTKDkzRTc2MThDQ0ZFMjY0ODBENzkyN0ExODcxQkFEODNG
RUY5REY0ODQwHhcNMjYwMTI0MTUzNTE2WhcNMjYwMTMxMTUzNTE2WjAYMRYwFAYD
VQQDDA02OTc0ZTZiNC0yN2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxBtQxx7S0vxyH2PSWfx2bqDPkeenlx2p2YpcodMPUloVXEnxP5FPbMP1BqBD
X0yTtyr0AmzgOMLu6duy88tlfh8Ks/HsVMvsxVmnevNnS6oOP/F+q7tHZ7q3mrB9
629QXlVrYaiF/4Uc0YbQRogue332sYZMBgs3lb614laRbGPY/rlB5Oaz41KVbtr3
2O1B1hQn1iMRAJmzbvnYMeeATwCWyTuAbQYX5Ng+NJ1CxCvD80sLr40WfD/lIGQG
btmpXMW1XhswjwDl12/LeQOdVvDngYScT+5jlD83RtlnXob2x88F+BeYy0iAn4D+
zCEe8pL7TUmfoLXg3o8ciPFTNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdwWQMP
eTs8HU8j30De4ZhXIocwMB8GA1UdIwQYMBaAFJPnYYzP4mSA15J6GHG62D/vnfSE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjQzOC9CN0VGNTNGRTJC
NEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJRFhrbm9ZY2JyWVAtLWQ5
SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2stZGhqTV9pWklEWGtub1ljYnJZUC0tZDlJUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RjQzOC9CN0VGNTNGRTJCNEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJ
RFhrbm9ZY2JyWVAtLWQ5SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB0/fwXitLlCF6k42dUBEZD4zZYxPeeGfzHP9E9bi8D1RILcEhBSsFm
1kWWhtNJI452A0ZtFLnnPXLxDjW95DU6IiBbj0fVeQhjnnzAcy0wY6R9D/OBE+xg
GKUTf60iyrpPvBNkr87jRYnfzRhsNhiXSDYoPG9zfRAc0xqNjEexZJMbbzIZiSwJ
djroQFYgBporwP6fDoba3YMV0UkxHK1r83roAsYFjN75YTTzKJfy/B5ZB22sJ1l5
rYSBTappeIAoeOsFzfOyrCVxwJjYOQKADqEK6yHfayBP/dIFFF6ODSQN6W2GR8Zr
UqSINa4a4ocjnpD/+zWGt34+XFL304J6
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:20:56 2026 by rpki-client