This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
File: K0QMfEWQAwVRV2J95yFOnKwSi0w.mft (raw, json)
Hash identifier: Sexq+n8y3VE335/+z4aR0t3F5nnIgzPDSGOYlAHOMME=
Subject key identifier: D4:7A:70:3D:58:33:23:BD:67:9A:2B:6B:A7:F8:7F:14:44:E5:31:B7
Authority key identifier: 2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C
Certificate issuer: /CN=A9187729/serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C
Certificate serial: 044A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
Manifest number: 0445
Signing time: Sat 24 Jan 2026 23:26:50 +0000
Manifest this update: Sat 24 Jan 2026 23:26:50 +0000
Manifest next update: Sat 31 Jan 2026 23:26:50 +0000
Files and hashes: 1: K0QMfEWQAwVRV2J95yFOnKwSi0w.crl (hash: VbancoEWLrLpOjLngMWpyaPdcNVyNWUyI+94diP6ls0=)
2: 394B48F6889811EC9D1DF920C4F9AE02.roa (hash: l0TDwbIQKnn22v377SYBCTiXJEwlU244XaVGT+AApO8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl
rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1098 (0x44a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187729, serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C
Validity
Not Before: Jan 24 23:26:50 2026 GMT
Not After : Jan 31 23:26:50 2026 GMT
Subject: CN=6975553a-b92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c1:ba:32:10:4a:a6:67:83:c8:21:0a:b5:eb:
e2:78:d9:a3:e7:b4:c3:b9:8f:67:88:f7:09:ef:c9:
54:ae:4c:02:08:5e:de:63:e9:c4:d7:79:d0:ee:71:
0c:b3:a5:d5:d6:fe:3a:da:5c:96:b1:86:1a:37:0b:
ee:84:7d:71:4e:15:cf:45:2a:f7:0e:ce:78:30:86:
ea:f1:d2:32:aa:39:4b:6a:5d:95:85:4c:56:94:a8:
87:d0:0f:62:c5:e9:26:9a:be:0a:e8:59:c3:e3:0e:
3b:72:30:a9:dc:c6:10:57:0c:2e:82:73:e8:16:3a:
2a:71:4a:e1:86:b7:0f:ee:b8:25:5f:6d:67:3e:8d:
d5:c5:e2:28:28:b1:9d:5c:25:c4:75:81:65:b4:1a:
84:55:55:7f:7a:ff:56:10:89:01:ab:5a:92:7c:f3:
4a:a6:d9:62:f6:cf:a7:d3:23:78:4c:52:b3:30:8b:
a7:15:bd:16:9a:81:13:83:6d:a7:1c:8d:69:8d:36:
5f:d3:1d:3a:6f:83:0a:25:c2:ae:46:f3:d0:cb:b4:
28:41:bc:64:5b:67:08:dd:fa:d3:23:78:cc:d8:90:
d8:80:65:4c:03:47:bc:88:16:e6:51:23:cc:37:b2:
8f:99:cd:3f:0b:26:1f:1d:42:b4:ee:a3:2f:2a:7a:
d7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7A:70:3D:58:33:23:BD:67:9A:2B:6B:A7:F8:7F:14:44:E5:31:B7
X509v3 Authority Key Identifier:
keyid:2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c1:3a:aa:af:bb:c9:26:db:23:d2:aa:df:81:92:d6:5c:75:
95:cd:c2:fa:6f:9a:dc:85:b0:bc:eb:5e:03:4b:5d:49:bc:0e:
11:b1:2c:0d:2f:dc:33:f3:09:7a:88:98:d6:af:80:d3:bf:03:
7d:8b:f9:9c:38:77:da:50:79:00:64:e1:e6:ac:0f:c1:67:87:
1a:35:d8:38:98:71:23:ef:c3:dd:98:b2:1a:19:da:a7:5a:b5:
47:4d:3f:b9:da:16:6c:5f:67:16:0a:c0:74:f7:3b:b1:e4:72:
b7:7f:93:d6:14:3d:5d:da:59:52:b8:62:a2:85:31:2d:ae:24:
a0:fa:ee:0c:7c:f4:05:62:26:cb:b4:3a:7a:f5:d8:d5:fb:e0:
fa:e5:bf:bd:84:97:be:d1:69:51:75:24:b5:63:1b:a1:67:0e:
a7:93:df:78:e9:2d:f5:70:5c:25:e8:a8:2b:28:d0:dd:9e:4c:
87:21:3d:f3:04:21:e0:4e:fd:55:ff:c9:e2:e4:ce:de:f5:f4:
3f:66:87:18:9f:d8:7e:5a:c9:3f:c6:db:09:9a:81:b8:0c:2a:
bf:48:86:13:43:b6:f3:90:d4:25:ee:1d:48:6d:b8:51:5a:ec:
1f:15:af:bf:8d:d8:5d:07:0c:9e:8c:58:51:b2:42:40:90:d2:
d7:e3:0f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:33:18 2026 by rpki-client