This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
File: kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft (raw, json)
Hash identifier: E3WZGGdJp7RLf/C33cJR8X9wwlOFuAFzYhtdZXCaNTQ=
Subject key identifier: 70:B7:A2:AD:89:33:44:C8:AE:99:09:A8:EE:8D:32:CB:9E:90:36:1D
Authority key identifier: 90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4
Certificate issuer: /CN=A9167A72/serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
Certificate serial: 0166
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
Manifest number: 0162
Signing time: Fri 23 Jan 2026 03:14:21 +0000
Manifest this update: Fri 23 Jan 2026 03:14:20 +0000
Manifest next update: Fri 30 Jan 2026 03:14:20 +0000
Files and hashes: 1: kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl (hash: 7PClkz0kx9Gsdx4E0TIUpbVUy+DlaqB5SPS1LqNA8rA=)
2: F81F7E0EE2A111EEA2DD9E18C4F9AE02.roa (hash: d6abLKyd7fr1z0R2GJ3OwWkvRu3wB2ZUv3mxpyp6whI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl
rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 03:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167A72, serialNumber=90A47F3C659B3718FDC82D3007A9D34249CCC8F4
Validity
Not Before: Jan 23 03:14:20 2026 GMT
Not After : Jan 30 03:14:20 2026 GMT
Subject: CN=6972e78d-72f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:67:c2:d5:04:d6:44:9a:84:63:d3:37:08:3c:
58:5a:3c:12:06:a3:1d:c1:3e:08:58:1d:73:00:52:
d4:72:61:ce:3d:c5:35:8f:36:d6:36:06:0b:70:67:
a5:12:30:98:79:99:11:84:b7:3e:c4:8c:a4:34:87:
bc:4a:ad:cc:b4:f4:0c:de:e3:5a:ab:e8:ac:30:7a:
12:ee:04:fd:e1:98:97:53:60:75:c9:f3:4f:02:15:
cc:a0:e7:2b:a1:7b:8a:48:35:3b:f3:a1:56:ba:9d:
ad:08:f9:ed:83:5d:21:39:06:43:e0:d1:59:6e:08:
0d:d1:a2:43:cf:c6:d1:cd:16:99:ab:97:81:10:40:
0f:d5:2c:db:ba:73:6b:aa:11:00:5f:73:88:6a:06:
0f:98:f5:0f:99:ae:d3:48:3d:09:a9:1e:6f:c5:f0:
ca:07:61:c6:3b:aa:bb:50:43:ed:ac:33:0c:4c:a8:
e2:8d:e1:37:94:57:a1:f0:f4:90:f1:6b:36:03:4e:
f4:f4:bb:8b:5c:d5:d7:49:a8:3a:a3:66:d2:ea:73:
76:71:05:cd:41:f0:84:ec:15:77:e1:81:4d:8c:2f:
de:47:50:83:74:0f:e0:a7:99:20:93:1f:c3:23:93:
5d:65:29:f4:2c:5a:b9:47:b4:2e:f1:44:4f:3f:56:
18:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B7:A2:AD:89:33:44:C8:AE:99:09:A8:EE:8D:32:CB:9E:90:36:1D
X509v3 Authority Key Identifier:
keyid:90:A4:7F:3C:65:9B:37:18:FD:C8:2D:30:07:A9:D3:42:49:CC:C8:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKR_PGWbNxj9yC0wB6nTQknMyPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167A72/22FD121ADCF011EEBC90311EC4F9AE02/kKR_PGWbNxj9yC0wB6nTQknMyPQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:91:b0:d7:53:5a:1e:6e:d6:5c:8a:ec:e6:f7:1f:a6:bb:9b:
87:90:9b:5b:91:44:4d:51:71:20:46:9e:1d:2c:2b:e6:20:73:
20:c7:f1:17:7f:69:fd:72:83:aa:67:d0:0d:0c:0d:15:2b:0e:
82:a4:ec:8a:17:a6:cb:65:a5:fe:f9:1d:e7:71:e1:9e:9a:86:
3f:27:63:ab:d1:11:fd:c5:88:60:c2:b8:d8:1a:8b:59:65:97:
f0:39:54:88:cc:ec:ca:ff:1f:ec:04:9d:83:3b:67:ba:a3:57:
00:79:3f:bd:17:7f:d4:98:15:43:f1:c3:bd:a0:89:7f:a4:b7:
a2:b7:38:ea:ee:78:6e:8d:15:6a:c0:e7:f6:33:bd:f3:b1:3f:
5c:cd:2f:f1:b0:ea:a2:92:c8:fe:6d:18:50:a0:94:34:66:f4:
f1:ce:a8:1f:d4:6c:01:0d:94:89:8f:a5:73:66:1a:e8:64:12:
a9:da:b6:3d:9a:8d:9a:e5:49:7a:05:49:c2:b2:5e:c0:d0:83:
f2:b3:13:e5:10:a6:33:79:0f:20:c5:5e:b8:c3:19:c1:b5:d6:
82:61:e1:d2:24:ef:49:d0:e7:7f:67:30:55:c3:82:c6:03:ce:
57:f4:6d:1f:c8:b9:77:9b:ef:e0:64:2b:1d:b6:9e:78:68:40:
bb:80:1f:c5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjdBNzIxMTAvBgNVBAUTKDkwQTQ3RjNDNjU5QjM3MThGREM4MkQzMDA3QTlEMzQy
NDlDQ0M4RjQwHhcNMjYwMTIzMDMxNDIwWhcNMjYwMTMwMDMxNDIwWjAYMRYwFAYD
VQQDDA02OTcyZTc4ZC03MmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAomfC1QTWRJqEY9M3CDxYWjwSBqMdwT4IWB1zAFLUcmHOPcU1jzbWNgYLcGel
EjCYeZkRhLc+xIykNIe8Sq3MtPQM3uNaq+isMHoS7gT94ZiXU2B1yfNPAhXMoOcr
oXuKSDU786FWup2tCPntg10hOQZD4NFZbggN0aJDz8bRzRaZq5eBEEAP1SzbunNr
qhEAX3OIagYPmPUPma7TSD0JqR5vxfDKB2HGO6q7UEPtrDMMTKjijeE3lFeh8PSQ
8Ws2A0709LuLXNXXSag6o2bS6nN2cQXNQfCE7BV34YFNjC/eR1CDdA/gp5kgkx/D
I5NdZSn0LFq5R7Qu8URPP1YYtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHC3oq2J
M0TIrpkJqO6NMsuekDYdMB8GA1UdIwQYMBaAFJCkfzxlmzcY/cgtMAep00JJzMj0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0E3Mi8yMkZEMTIxQURD
RjAxMUVFQkM5MDMxMUVDNEY5QUUwMi9rS1JfUEdXYk54ajl5QzB3QjZuVFFrbk15
UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tLUl9QR1diTnhqOXlDMHdCNm5UUWtuTXlQUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
N0E3Mi8yMkZEMTIxQURDRjAxMUVFQkM5MDMxMUVDNEY5QUUwMi9rS1JfUEdXYk54
ajl5QzB3QjZuVFFrbk15UFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCqkbDXU1oebtZciuzm9x+mu5uHkJtbkURNUXEgRp4dLCvmIHMgx/EX
f2n9coOqZ9ANDA0VKw6CpOyKF6bLZaX++R3nceGemoY/J2Or0RH9xYhgwrjYGotZ
ZZfwOVSIzOzK/x/sBJ2DO2e6o1cAeT+9F3/UmBVD8cO9oIl/pLeitzjq7nhujRVq
wOf2M73zsT9czS/xsOqiksj+bRhQoJQ0ZvTxzqgf1GwBDZSJj6VzZhroZBKp2rY9
mo2a5Ul6BUnCsl7A0IPysxPlEKYzeQ8gxV64wxnBtdaCYeHSJO9J0Od/ZzBVw4LG
A85X9G0fyLl3m+/gZCsdtp54aEC7gB/F
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:50:45 2026 by rpki-client