This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
File: VKpPIROg0aG37lUSvq5TcextpCE.mft (raw, json)
Hash identifier: PkTl6kfgtQQBIZJBvzeledTHh+FFXTSkdV/aynvzl8A=
Subject key identifier: A0:91:D7:44:01:24:FF:DF:64:73:42:72:1B:18:D6:A9:B7:D9:E7:7A
Authority key identifier: 54:AA:4F:21:13:A0:D1:A1:B7:EE:55:12:BE:AE:53:71:EC:6D:A4:21
Certificate issuer: /CN=A9165556/serialNumber=54AA4F2113A0D1A1B7EE5512BEAE5371EC6DA421
Certificate serial: 0150
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
Manifest number: 014D
Signing time: Fri 23 Jan 2026 03:29:15 +0000
Manifest this update: Fri 23 Jan 2026 03:29:15 +0000
Manifest next update: Fri 30 Jan 2026 03:29:15 +0000
Files and hashes: 1: VKpPIROg0aG37lUSvq5TcextpCE.crl (hash: MwDLCfFGXAkZ1FjvuItqeBWhrHn2/wUy4oOTgj/5OMw=)
2: E135D94C04A511EF84B5D783C4F9AE02.roa (hash: ntYNg2NxlTO59svip/Wfi9QINiH7RWI4kV7Rh6n46eE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.crl
rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 03:29:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 336 (0x150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165556, serialNumber=54AA4F2113A0D1A1B7EE5512BEAE5371EC6DA421
Validity
Not Before: Jan 23 03:29:15 2026 GMT
Not After : Jan 30 03:29:15 2026 GMT
Subject: CN=6972eb0b-d643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:45:71:ce:09:f0:b7:f0:e7:4e:63:6c:d7:b4:
7b:b8:8e:fc:c7:4e:79:02:2c:33:54:95:c4:5f:68:
8d:23:1d:85:5d:fd:63:52:04:c3:21:a7:92:dc:7c:
c6:27:87:8f:52:ec:db:e0:a6:84:bd:6a:a2:42:9c:
72:83:c2:aa:8d:80:f7:f5:1e:f9:83:1f:8c:65:bf:
84:22:b2:d1:eb:58:60:43:a8:7b:cb:8c:6b:ab:b1:
8f:9a:8c:b8:67:9b:ff:9f:b5:30:91:12:0b:b0:f4:
c8:c5:78:82:00:99:01:eb:6c:73:f5:e5:03:99:03:
c6:8e:f2:56:53:e2:ab:e7:31:8b:a5:c0:51:ec:82:
9e:70:0f:c0:bd:0c:fd:aa:72:78:70:05:6f:61:ae:
d8:d6:da:2e:33:b8:85:dc:5c:34:b0:57:f6:c7:1c:
3e:a1:11:45:2b:5d:e8:21:67:bc:f1:75:c2:1f:f1:
ac:a7:3f:70:ff:cc:65:e5:05:95:e1:87:76:fc:78:
d6:45:bd:f5:92:75:26:ad:cf:dd:95:cf:84:eb:30:
8e:28:36:49:43:b0:44:5b:d3:88:ac:4d:27:2a:57:
f0:bb:1d:b9:3e:ef:d5:3c:97:a0:50:51:90:6f:8d:
60:dd:cb:e6:c8:a5:c2:db:30:03:7d:f8:34:a3:0b:
13:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:91:D7:44:01:24:FF:DF:64:73:42:72:1B:18:D6:A9:B7:D9:E7:7A
X509v3 Authority Key Identifier:
keyid:54:AA:4F:21:13:A0:D1:A1:B7:EE:55:12:BE:AE:53:71:EC:6D:A4:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:42:20:dd:02:0a:8c:fa:2f:8c:4b:ff:86:63:81:79:a6:a8:
fd:97:b1:75:ec:07:a3:38:40:f8:63:97:cb:84:69:25:48:a3:
3b:a1:a9:06:59:c0:70:24:71:14:b4:75:42:17:38:9a:c2:4d:
6b:f3:96:a8:1d:0c:09:65:40:09:d8:98:0e:41:4d:61:96:34:
a4:dc:75:9c:e0:68:a1:72:07:0d:46:5a:59:6c:28:5c:26:a8:
45:56:e7:20:f8:44:d9:e4:83:1d:51:0f:1c:7c:7d:89:53:d8:
54:ff:28:b8:33:6e:1e:c8:3a:b5:47:22:ef:1e:59:d8:4f:0b:
9b:8d:90:89:5c:80:93:02:db:21:89:5c:a5:99:da:54:c9:af:
4f:ac:04:d7:2f:8c:2b:9a:81:b4:bc:d5:15:16:ea:37:fe:c9:
b4:95:ec:93:95:be:dc:7b:ed:83:43:da:0c:fa:f1:a1:87:c5:
94:2d:e3:0c:bb:9c:cc:1c:f7:e5:1b:4a:42:78:2f:ae:51:74:
dc:84:de:7e:66:7b:2e:6a:73:5e:1d:09:43:52:7e:aa:6d:c7:
3b:4e:1a:90:3f:69:70:57:7e:c3:f1:29:1f:a0:3b:b6:cd:3a:
de:95:27:3f:f9:47:de:64:de:e0:ee:77:c2:55:31:08:c9:c3:
e9:9d:c7:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU1NTYxMTAvBgNVBAUTKDU0QUE0RjIxMTNBMEQxQTFCN0VFNTUxMkJFQUU1Mzcx
RUM2REE0MjEwHhcNMjYwMTIzMDMyOTE1WhcNMjYwMTMwMDMyOTE1WjAYMRYwFAYD
VQQDDA02OTcyZWIwYi1kNjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8kVxzgnwt/DnTmNs17R7uI78x055AiwzVJXEX2iNIx2FXf1jUgTDIaeS3HzG
J4ePUuzb4KaEvWqiQpxyg8KqjYD39R75gx+MZb+EIrLR61hgQ6h7y4xrq7GPmoy4
Z5v/n7UwkRILsPTIxXiCAJkB62xz9eUDmQPGjvJWU+Kr5zGLpcBR7IKecA/AvQz9
qnJ4cAVvYa7Y1touM7iF3Fw0sFf2xxw+oRFFK13oIWe88XXCH/Gspz9w/8xl5QWV
4Yd2/HjWRb31knUmrc/dlc+E6zCOKDZJQ7BEW9OIrE0nKlfwux25Pu/VPJegUFGQ
b41g3cvmyKXC2zADffg0owsTswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCR10QB
JP/fZHNCchsY1qm32ed6MB8GA1UdIwQYMBaAFFSqTyEToNGht+5VEr6uU3HsbaQh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU1Ni9CMTQ1RDAyRTAx
N0MxMUVGQjg2NDMyNUFDNEY5QUUwMi9WS3BQSVJPZzBhRzM3bFVTdnE1VGNleHRw
Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZLcFBJUk9nMGFHMzdsVVN2cTVUY2V4dHBDRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTU1Ni9CMTQ1RDAyRTAxN0MxMUVGQjg2NDMyNUFDNEY5QUUwMi9WS3BQSVJPZzBh
RzM3bFVTdnE1VGNleHRwQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAeQiDdAgqM+i+MS/+GY4F5pqj9l7F17AejOED4Y5fLhGklSKM7oakG
WcBwJHEUtHVCFziawk1r85aoHQwJZUAJ2JgOQU1hljSk3HWc4GihcgcNRlpZbChc
JqhFVucg+ETZ5IMdUQ8cfH2JU9hU/yi4M24eyDq1RyLvHlnYTwubjZCJXICTAtsh
iVylmdpUya9PrATXL4wrmoG0vNUVFuo3/sm0leyTlb7ce+2DQ9oM+vGhh8WULeMM
u5zMHPflG0pCeC+uUXTchN5+ZnsuanNeHQlDUn6qbcc7ThqQP2lwV37D8SkfoDu2
zTrelSc/+UfeZN7g7nfCVTEIycPpncdx
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:54:07 2026 by rpki-client