This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft File: kFj-3Oxfh289_hYZQxnBRcnAzLU.mft (raw, json) Hash identifier: nObxp2NvTDCZPnIFxbNSQi46SfMkKUuaOGynm95SEyI= Subject key identifier: 86:2D:BD:97:0A:8E:34:6D:83:49:4B:88:D2:43:A4:64:1D:F6:9F:C7 Authority key identifier: 90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5 Certificate issuer: /CN=A9185B0F/serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5 Certificate serial: 06D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft Manifest number: 06D2 Signing time: Sat 24 Jan 2026 21:26:28 +0000 Manifest this update: Sat 24 Jan 2026 21:26:27 +0000 Manifest next update: Sat 31 Jan 2026 21:26:27 +0000 Files and hashes: 1: kFj-3Oxfh289_hYZQxnBRcnAzLU.crl (hash: dI98CQMgTu/68pJnxUVC8NEVy8kkbioGkT2dOeo40RQ=) 2: 25A7FE7E855211EB8DEDD812C4F9AE02.roa (hash: 3KVNAeWh03dGVWnQ63cP0I/qibdtWKvdfNbIMy7dwHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1752 (0x6d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B0F, serialNumber=9058FEDCEC5F876F3DFE16194319C145C9C0CCB5 Validity Not Before: Jan 24 21:26:27 2026 GMT Not After : Jan 31 21:26:27 2026 GMT Subject: CN=69753904-256d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:37:b5:81:c4:5e:30:86:33:61:28:d6:8b:e5: 1c:2b:f1:10:09:27:d6:7a:b9:88:9a:92:27:ea:c9: 09:be:76:74:82:01:00:59:b9:d4:ae:39:1a:67:3b: fc:48:31:3a:ed:38:cf:dc:42:cb:98:7b:43:0d:2f: d4:75:21:98:c1:ef:e2:a3:18:a9:d1:81:be:49:3a: 0b:42:70:31:b5:da:7a:eb:c3:6c:11:08:9b:af:e3: f1:7b:2c:3a:0d:d9:20:04:72:08:b4:96:5b:9e:78: 1e:ee:bb:d7:35:c1:1f:a7:a1:a0:6f:eb:88:18:2c: 83:d6:7f:0f:47:6e:89:a3:31:88:79:7d:0c:99:77: 5a:36:1d:7e:33:f2:26:8c:31:75:fd:00:b4:91:6c: 9a:b5:3f:3f:3e:0d:c4:e5:9f:d9:5a:8b:ed:bf:55: 0f:d1:f5:a9:11:7d:e9:0e:78:95:ea:ba:70:fb:1a: 01:61:71:c7:bf:76:8f:d7:65:dd:17:be:17:82:4b: 64:96:05:fb:d6:50:c7:1b:04:89:79:3e:03:4b:86: 18:66:63:38:61:bd:68:cd:c3:d7:8e:f8:c4:49:0e: 3a:93:08:46:7d:2f:b2:b4:ce:15:ab:ac:20:4b:31: 75:51:aa:57:5d:0f:94:0a:78:68:69:e1:d3:4e:2d: ad:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2D:BD:97:0A:8E:34:6D:83:49:4B:88:D2:43:A4:64:1D:F6:9F:C7 X509v3 Authority Key Identifier: keyid:90:58:FE:DC:EC:5F:87:6F:3D:FE:16:19:43:19:C1:45:C9:C0:CC:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kFj-3Oxfh289_hYZQxnBRcnAzLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B0F/52D0A120854E11EBB75BB009C4F9AE02/kFj-3Oxfh289_hYZQxnBRcnAzLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:46:43:f4:c9:d8:94:25:3f:86:ab:e3:64:7a:c5:d3:81:cd: 4f:17:54:81:ef:ca:a8:52:06:cb:37:84:10:35:d1:c9:86:c1: cf:c9:48:f3:08:24:92:2e:82:4e:9f:1b:79:f4:99:5d:9e:52: 18:40:24:f8:9f:05:4e:a9:be:10:8c:51:a7:3a:d8:ba:af:0a: 9a:79:5b:42:50:d7:6d:f1:1e:b7:05:78:c4:f2:02:54:51:11: 5c:63:9e:3a:d7:e6:eb:26:e3:6b:37:fd:c3:cb:a1:9c:c0:60: 18:57:9c:e9:32:e1:a2:f3:89:13:69:56:6c:43:19:98:d4:d2: 48:b5:de:3c:b9:40:ec:3b:4b:ea:97:32:dc:71:88:c8:1d:94: 39:d9:2d:b7:93:3f:70:27:2c:39:b7:10:5c:74:12:25:40:56: 8c:97:94:ce:4d:50:4b:c9:14:ff:a5:1c:27:3c:cb:94:5a:43: e9:c3:6d:fb:c5:ee:61:b3:7e:71:06:e0:1f:02:af:2f:80:cc: f5:d3:1b:c2:6d:02:73:ea:ab:48:f7:f2:ac:08:b2:7b:dd:81: 65:a6:bf:cc:b6:32:de:00:33:8e:ab:5f:c5:bc:50:cb:54:d9: 23:72:20:97:1e:dd:9a:f4:eb:49:36:e0:c6:90:e5:0c:97:fe: 31:16:d2:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCMEYxMTAvBgNVBAUTKDkwNThGRURDRUM1Rjg3NkYzREZFMTYxOTQzMTlDMTQ1 QzlDMENDQjUwHhcNMjYwMTI0MjEyNjI3WhcNMjYwMTMxMjEyNjI3WjAYMRYwFAYD VQQDDA02OTc1MzkwNC0yNTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArze1gcReMIYzYSjWi+UcK/EQCSfWermImpIn6skJvnZ0ggEAWbnUrjkaZzv8 SDE67TjP3ELLmHtDDS/UdSGYwe/ioxip0YG+SToLQnAxtdp668NsEQibr+Pxeyw6 DdkgBHIItJZbnnge7rvXNcEfp6Ggb+uIGCyD1n8PR26JozGIeX0MmXdaNh1+M/Im jDF1/QC0kWyatT8/Pg3E5Z/ZWovtv1UP0fWpEX3pDniV6rpw+xoBYXHHv3aP12Xd F74XgktklgX71lDHGwSJeT4DS4YYZmM4Yb1ozcPXjvjESQ46kwhGfS+ytM4Vq6wg SzF1UapXXQ+UCnhoaeHTTi2tQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYtvZcK jjRtg0lLiNJDpGQd9p/HMB8GA1UdIwQYMBaAFJBY/tzsX4dvPf4WGUMZwUXJwMy1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUIwRi81MkQwQTEyMDg1 NEUxMUVCQjc1QkIwMDlDNEY5QUUwMi9rRmotM094ZmgyODlfaFlaUXhuQlJjbkF6 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tGai0zT3hmaDI4OV9oWVpReG5CUmNuQXpMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUIwRi81MkQwQTEyMDg1NEUxMUVCQjc1QkIwMDlDNEY5QUUwMi9rRmotM094Zmgy ODlfaFlaUXhuQlJjbkF6TFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWRkP0ydiUJT+Gq+NkesXTgc1PF1SB78qoUgbLN4QQNdHJhsHPyUjz CCSSLoJOnxt59JldnlIYQCT4nwVOqb4QjFGnOti6rwqaeVtCUNdt8R63BXjE8gJU URFcY5461+brJuNrN/3Dy6GcwGAYV5zpMuGi84kTaVZsQxmY1NJItd48uUDsO0vq lzLccYjIHZQ52S23kz9wJyw5txBcdBIlQFaMl5TOTVBLyRT/pRwnPMuUWkPpw237 xe5hs35xBuAfAq8vgMz10xvCbQJz6qtI9/KsCLJ73YFlpr/MtjLeADOOq1/FvFDL VNkjciCXHt2a9OtJNuDGkOUMl/4xFtL7 -----END CERTIFICATE-----Generated at Sun Jan 25 10:00:02 2026 by rpki-client