This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
File: KTzh3tGmQEsAssDM-z886vshpQg.mft (raw, json)
Hash identifier: 2zATltjvc5p1EtuIR+bIl742ehS4HFt22SULa3FdUB8=
Subject key identifier: 5D:DF:DF:4E:38:C5:04:DC:8E:C9:8F:4E:96:AF:C6:E5:D6:EB:A6:04
Authority key identifier: 29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08
Certificate issuer: /CN=A91790EC/serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508
Certificate serial: 0126
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
Manifest number: 0123
Signing time: Sun 25 Jan 2026 03:57:07 +0000
Manifest this update: Sun 25 Jan 2026 03:57:07 +0000
Manifest next update: Sun 01 Feb 2026 03:57:07 +0000
Files and hashes: 1: KTzh3tGmQEsAssDM-z886vshpQg.crl (hash: 61m9gnwIBO6jCXU22UHBqUBlOuOSzkAhG1ge1i++hhs=)
2: 81AA7D1A3E5811EFAE13B943C4F9AE02.roa (hash: JuJ8UV9zS3u6YlD9fVuda03e1VrBUKTpfcG8rbwxbcQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.crl
rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:57:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294 (0x126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91790EC, serialNumber=293CE1DED1A6404B00B2C0CCFB3F3CEAFB21A508
Validity
Not Before: Jan 25 03:57:07 2026 GMT
Not After : Feb 1 03:57:07 2026 GMT
Subject: CN=69759493-ddeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:33:41:10:36:a1:e6:89:0a:77:4d:71:30:0d:
34:c9:a0:6a:5b:d8:57:d8:ad:19:19:8c:82:b2:cd:
6b:0e:70:a9:04:1c:f7:79:bf:2b:c4:a0:6b:f0:e2:
46:25:91:68:4a:17:91:d8:0e:d0:ba:3f:dd:bd:83:
b6:c7:71:32:b8:0f:4a:92:48:fe:d5:6a:8d:05:56:
79:e5:84:1c:88:78:63:2e:df:c9:df:bc:77:a3:1f:
cf:51:ea:b7:44:ba:83:30:cc:df:2a:79:e9:d3:5c:
01:17:a5:3a:30:68:e9:e5:18:8e:95:58:9c:ce:1b:
cf:79:46:54:06:5e:b8:b5:f6:8e:d0:c8:6a:a6:85:
a6:1b:02:56:0b:fa:cd:51:9f:65:50:12:7b:be:53:
14:97:b1:ed:a7:af:39:6a:da:8f:e6:2f:23:58:30:
36:96:4e:ad:5a:82:57:9e:82:2c:2c:69:e6:60:04:
4b:91:99:a6:a4:b9:03:04:c5:f1:20:75:aa:20:5a:
e5:59:66:70:b3:0e:ec:16:e6:5f:76:49:44:08:62:
25:b4:35:29:f1:66:32:c2:61:74:cf:8d:03:15:53:
e6:4e:f2:89:00:f8:ef:15:a1:3a:b2:59:c8:f6:49:
e6:10:a5:fc:5b:02:de:a0:0e:4a:00:61:b8:4f:17:
9f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DF:DF:4E:38:C5:04:DC:8E:C9:8F:4E:96:AF:C6:E5:D6:EB:A6:04
X509v3 Authority Key Identifier:
keyid:29:3C:E1:DE:D1:A6:40:4B:00:B2:C0:CC:FB:3F:3C:EA:FB:21:A5:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTzh3tGmQEsAssDM-z886vshpQg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790EC/24B8BFE03E5811EF996DA321C4F9AE02/KTzh3tGmQEsAssDM-z886vshpQg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:c8:12:f8:40:f7:5b:c1:3c:17:4b:de:21:82:45:84:f8:d3:
d2:35:af:64:02:11:b6:ad:4f:93:63:3b:96:bb:8e:06:1c:99:
13:a2:e8:dd:93:12:25:b1:d0:42:15:f8:b0:8f:7d:11:a6:0f:
93:c6:39:d0:9b:d2:a9:f7:8a:40:26:4e:f5:71:8a:ef:bf:ba:
69:e1:c8:14:22:9b:aa:a6:70:59:51:04:55:86:02:1d:f0:0f:
b6:13:67:fd:3e:54:e4:0c:d8:04:52:4b:2d:e5:fe:7b:9a:0a:
d1:59:f4:62:0f:46:40:b4:0d:c0:64:44:57:ce:1b:47:40:de:
e4:d8:5d:15:4f:40:ee:92:eb:18:bd:0a:b6:c8:15:32:6f:97:
97:43:29:9f:88:2b:8e:3e:d8:bc:b2:db:b4:b0:c5:d4:c5:aa:
59:98:44:79:e9:46:40:2f:49:0b:e7:7f:95:5d:5c:3d:b2:73:
74:fc:4a:69:84:81:c4:82:74:59:9d:b0:b5:c2:ff:11:7c:19:
77:38:c8:a7:fd:ba:df:15:2d:a4:36:bd:7b:89:1e:4e:9a:b8:
1a:52:4a:df:0f:53:7b:f9:7f:08:00:f0:83:39:5b:7d:8d:3a:
30:e8:46:58:61:f8:55:da:04:37:a7:9e:8b:4b:c7:14:de:f8:
81:b8:5a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:36:13 2026 by rpki-client