This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft
File: KaAJAT90Md42nADKtUcWypNFJtM.mft (raw, json)
Hash identifier: iIeL3XX6+o87BqTMgOpmGdbVm7Mwfs0K1g9QQsK5cQ8=
Subject key identifier: B9:BA:87:15:58:A8:85:F8:70:8B:C1:82:7F:37:28:51:CE:35:17:2B
Authority key identifier: 29:A0:09:01:3F:74:31:DE:36:9C:00:CA:B5:47:16:CA:93:45:26:D3
Certificate issuer: /CN=A91651CF/serialNumber=29A009013F7431DE369C00CAB54716CA934526D3
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft
Manifest number: F3
Signing time: Fri 23 Jan 2026 04:27:05 +0000
Manifest this update: Fri 23 Jan 2026 04:27:05 +0000
Manifest next update: Fri 30 Jan 2026 04:27:05 +0000
Files and hashes: 1: KaAJAT90Md42nADKtUcWypNFJtM.crl (hash: i5oFaWFngJfqFoskjqwjSupfcGA/f36rKQgGOZGh5rY=)
2: C731AFD03B9A11F0B7924C1FC4F9AE02.roa (hash: EmmsOqkiT007YavefYEjF7jWl6E1fCl7urJJNV6C63g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.crl
rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 04:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91651CF, serialNumber=29A009013F7431DE369C00CAB54716CA934526D3
Validity
Not Before: Jan 23 04:27:05 2026 GMT
Not After : Jan 30 04:27:05 2026 GMT
Subject: CN=6972f899-8d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:36:31:a9:fb:ef:02:a2:33:21:a2:cc:95:98:
cb:0a:9c:74:24:b3:0a:68:54:92:0f:9f:41:f2:75:
17:f2:d1:78:72:08:b0:b1:5b:f1:1d:10:3a:83:9b:
9d:7a:be:ca:fd:4d:d8:bb:56:2e:6d:0e:d6:d5:36:
3e:56:dc:9d:f1:d3:d2:07:8b:1b:3d:4d:82:b6:e7:
fa:96:be:70:f8:98:02:1e:ed:8e:62:32:7c:cf:7d:
cb:2e:d8:89:1e:eb:a5:35:65:e3:f7:6c:43:a8:2f:
76:1f:8b:e6:9c:df:c5:3f:03:ff:e0:36:2a:c2:a3:
19:2f:0b:95:91:b0:d7:05:72:55:8e:26:58:00:4d:
a4:32:c6:6a:3c:bb:1b:66:09:4e:4f:c5:3a:f5:85:
a6:dc:4b:df:8b:2b:95:73:77:90:de:da:1d:40:93:
53:38:b2:87:a1:9b:0c:f6:1b:cd:1b:1d:88:7c:81:
29:45:8f:2b:3f:0c:f2:0a:79:7d:a2:99:a4:35:b5:
af:cb:29:7b:84:0e:00:59:45:32:64:93:f5:26:07:
93:a3:33:fd:eb:22:50:ea:47:72:e2:94:60:1d:4d:
71:5b:f1:d0:17:54:18:f6:53:fd:fd:65:99:11:24:
5a:3e:81:92:5f:2d:f5:90:7b:f8:56:ac:5a:7b:ed:
c2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BA:87:15:58:A8:85:F8:70:8B:C1:82:7F:37:28:51:CE:35:17:2B
X509v3 Authority Key Identifier:
keyid:29:A0:09:01:3F:74:31:DE:36:9C:00:CA:B5:47:16:CA:93:45:26:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KaAJAT90Md42nADKtUcWypNFJtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/3043635C86D711EF854DD47BC4F9AE02/KaAJAT90Md42nADKtUcWypNFJtM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:31:37:c3:ff:23:83:c0:c1:e2:de:e5:74:be:d7:91:f0:e6:
51:da:80:a9:d9:cc:e6:1d:8b:33:24:87:d7:e1:6b:36:ee:23:
bd:a7:2a:f5:b6:ab:3e:bb:36:0c:83:7d:94:cf:ca:91:9a:17:
f0:d3:22:d2:2a:b0:8b:30:0a:46:a4:a0:c1:5b:1c:bc:38:ae:
31:a2:7a:e2:04:73:d9:54:7c:79:55:c4:4b:37:8a:46:cb:23:
f3:aa:a0:ae:b0:ef:cf:3f:fb:64:85:b2:e1:2c:c3:3a:81:87:
4a:41:81:bb:89:89:ac:7b:2b:c6:9f:93:54:f8:81:58:77:9d:
f8:25:35:2a:1c:01:0c:82:d0:c0:01:f7:78:7c:89:cd:c9:27:
d6:70:88:a1:1d:c5:03:89:19:07:ae:30:6b:c7:41:37:24:11:
f8:bf:fc:e6:9c:81:cc:08:e4:9f:55:f2:42:14:4e:d0:7a:06:
a2:6d:51:cd:4c:45:39:5e:c8:a2:cc:c5:b5:f5:cc:94:eb:7c:
4e:b8:e3:f9:36:11:9b:b0:49:d6:57:a3:00:03:ec:a3:a1:3e:
dd:68:93:ae:85:02:31:6e:2b:21:3a:28:31:fe:0b:0f:56:0e:
52:25:5d:5b:a1:03:e1:67:07:28:75:71:c4:f3:6d:55:c3:7b:
13:5d:9d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:36:28 2026 by rpki-client