This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
File: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft (raw, json)
Hash identifier: r3cPU16xiG0NN7fGztTJORpYdVxI3d5xvD9VA1ql0Gg=
Subject key identifier: 9E:1B:46:83:5A:48:D6:85:BE:DE:21:BD:2B:8F:73:BA:18:DC:F2:5B
Authority key identifier: 2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46
Certificate issuer: /CN=A916DDB4/serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546
Certificate serial: 065E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
Manifest number: 0656
Signing time: Sat 24 Jan 2026 21:54:24 +0000
Manifest this update: Sat 24 Jan 2026 21:54:24 +0000
Manifest next update: Sat 31 Jan 2026 21:54:24 +0000
Files and hashes: 1: Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl (hash: YtU8BdYHuFTh2DI+qdbQ2hcV9PrzNFrdwkcZ12j+0eM=)
2: B951F87ABE6D11EF933FE870C4F9AE02.roa (hash: vz/od99V/qh8nLdVrGtgO/ikEdfCO+I8D/5B73OuzVE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl
rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:54:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1630 (0x65e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DDB4, serialNumber=2A477537F323EFB59DBD8DBEB3AFAB1F1582F546
Validity
Not Before: Jan 24 21:54:24 2026 GMT
Not After : Jan 31 21:54:24 2026 GMT
Subject: CN=69753f90-47e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:78:2d:d7:93:33:cc:33:96:7f:53:f8:d1:d4:
af:c1:08:0d:cb:cd:b4:e0:f6:38:75:41:c8:42:28:
65:aa:01:ea:c5:8b:83:5c:60:ae:36:f3:b4:f5:7b:
0e:a6:5b:7f:24:71:78:0b:19:7f:60:20:54:3e:06:
8d:b1:24:e4:f0:9c:93:3c:ad:c4:f4:68:83:a1:39:
c9:63:7f:37:1f:f6:83:2f:a0:0f:d6:40:06:04:d3:
42:02:bc:d6:92:84:af:16:48:ab:63:bf:28:0c:4c:
0a:3f:30:f4:06:82:bb:7a:30:a3:3d:94:dc:2a:93:
48:98:e8:23:d3:96:3c:43:65:a8:1d:8b:5b:bb:bb:
d5:67:78:c5:6c:e4:27:10:3f:3e:b9:a4:a7:6c:10:
a6:0c:0e:77:00:5d:a6:db:d0:60:18:c1:8f:9d:7c:
9d:e9:fb:41:f3:8d:a3:71:75:75:30:f7:be:1b:21:
5d:73:d8:a3:64:13:3d:57:1d:b5:9f:9c:c3:ad:e2:
5c:3d:d0:1b:1d:e8:e2:09:c5:8b:87:0e:5b:42:d5:
c9:bf:5c:b3:88:53:3c:d2:68:56:f4:8b:54:4b:1c:
a2:60:c1:d1:6f:8a:20:dd:b7:60:54:01:fd:c6:8e:
3e:77:f7:ec:4a:b9:40:42:e0:3a:be:70:ae:ef:68:
8a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1B:46:83:5A:48:D6:85:BE:DE:21:BD:2B:8F:73:BA:18:DC:F2:5B
X509v3 Authority Key Identifier:
keyid:2A:47:75:37:F3:23:EF:B5:9D:BD:8D:BE:B3:AF:AB:1F:15:82:F5:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DDB4/A6008316B93211EBB95D063CC4F9AE02/Kkd1N_Mj77WdvY2-s6-rHxWC9UY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:22:d5:ff:f7:4c:39:f1:c1:af:11:83:0b:7a:20:d3:02:cb:
99:75:9a:cb:7d:da:6d:bf:54:ee:2c:cc:38:eb:a7:6b:c1:06:
9d:74:49:90:69:37:37:88:2b:33:b9:f5:13:d0:50:cf:2c:b0:
54:7d:57:8b:b9:8f:d4:34:12:23:c2:15:75:a7:9a:13:5f:6e:
2b:eb:b2:33:03:cb:18:47:b5:d3:88:f8:3c:cd:4f:7f:98:f6:
48:e2:30:2f:11:eb:4b:38:cc:e1:ef:23:51:40:95:58:82:71:
3e:21:86:8b:de:d1:a9:52:6e:74:b7:61:77:92:11:0e:3f:91:
2d:a0:55:4b:a1:ae:d5:7e:37:77:38:2a:70:22:c5:1c:fc:65:
63:59:9d:2e:21:84:e4:8b:01:5a:f3:3d:15:b4:f5:4e:88:8e:
1e:a5:7a:fb:09:40:10:28:26:1d:5f:a0:36:27:34:70:7a:3a:
8a:9d:68:32:de:b6:f4:a6:c3:cd:a0:d8:26:ce:77:c9:05:59:
c4:61:56:a5:dd:d1:1c:59:58:24:b0:00:f7:f6:8a:67:56:93:
d2:cc:cf:a3:08:4a:ae:87:71:c1:c8:ec:3b:86:14:08:07:a4:
65:f6:5f:52:29:39:fc:f0:d5:8f:fa:82:c6:9c:84:2b:55:38:
b8:87:cf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:28 2026 by rpki-client