This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
File: KoE65dYVKWBF2z4sQsuPzaxq0gw.mft (raw, json)
Hash identifier: FePz/brLkJyvt/HkBrdWqlvRb8dousn22HeEQ4OcIsU=
Subject key identifier: 82:4A:20:EF:5D:0D:E1:00:73:D9:51:1D:22:25:9F:B9:2E:48:D8:02
Authority key identifier: 2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C
Certificate issuer: /CN=A9193BF8/serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C
Certificate serial: 020B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
Manifest number: 0207
Signing time: Sun 25 Jan 2026 01:40:52 +0000
Manifest this update: Sun 25 Jan 2026 01:40:51 +0000
Manifest next update: Sun 01 Feb 2026 01:40:51 +0000
Files and hashes: 1: KoE65dYVKWBF2z4sQsuPzaxq0gw.crl (hash: KX5vkIQtcwEzak0ptFM2ucPzA9x68QnmGGoCbqudyIg=)
2: B8F3C5B4E01811ED8385DA62C4F9AE02.roa (hash: KmbLnAg6ov5pbSc4GHHtI4bgompHpB3w8fab5eJbYog=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl
rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:40:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 523 (0x20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193BF8, serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C
Validity
Not Before: Jan 25 01:40:51 2026 GMT
Not After : Feb 1 01:40:51 2026 GMT
Subject: CN=697574a4-6874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5e:4e:4a:77:0f:13:93:ca:d1:e6:c6:2d:fb:
d0:89:fc:00:ef:67:5e:37:40:ea:e0:38:7a:99:cd:
8b:0d:2d:b3:be:4c:af:4a:b3:65:80:83:9a:41:7d:
06:62:b8:8c:21:00:f9:61:cc:cf:97:1d:09:4a:fa:
01:9f:7c:be:19:31:05:a1:43:2a:13:ec:dc:22:09:
a7:33:f9:e3:22:a4:c3:ff:5e:11:87:42:d2:9b:69:
20:39:9b:23:b4:76:77:02:8a:ef:b2:9a:4a:2c:3e:
e7:26:97:0b:9b:41:8d:90:ea:66:8a:3c:16:77:54:
ef:15:aa:75:e0:2d:24:95:f0:05:b3:47:24:a0:b9:
6c:2f:4f:3b:af:fa:24:94:ca:1c:77:10:44:a0:11:
6f:c8:5a:e6:f5:30:d5:d2:42:f6:bb:9c:6b:53:18:
78:84:34:4b:cb:d0:de:9d:70:08:17:79:0e:bb:32:
9f:4e:8b:ce:3b:77:46:22:1e:1b:6d:d1:eb:da:0e:
e3:65:f0:e4:37:55:08:54:a9:ab:81:f4:f5:ed:ab:
36:41:7c:38:03:a5:43:bb:46:54:dd:83:81:18:e9:
5c:21:c4:92:6c:1a:f3:47:3c:fb:cf:f7:c5:40:d3:
d9:60:a8:96:fa:6f:4d:0b:81:84:c1:6f:8c:83:7c:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4A:20:EF:5D:0D:E1:00:73:D9:51:1D:22:25:9F:B9:2E:48:D8:02
X509v3 Authority Key Identifier:
keyid:2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:4f:95:4f:a1:da:e3:66:b6:42:6b:82:41:3f:eb:8f:de:90:
1d:34:a2:de:2e:c7:49:98:d9:d3:87:16:72:00:90:8c:ce:0d:
89:08:e0:27:31:63:e6:b2:ed:39:41:44:b2:23:86:30:5d:35:
72:f4:ab:b0:8c:3e:52:69:3a:3a:85:73:de:52:5a:25:ec:1f:
ac:ed:d4:5c:26:e9:3a:b5:41:6f:8e:32:d3:cd:35:70:eb:0f:
40:36:2c:1a:fe:7f:c4:d1:5a:e8:24:aa:03:fb:19:3e:c8:02:
02:11:74:23:a0:b9:aa:49:ab:14:a1:ad:5c:59:4d:67:53:98:
43:00:df:52:35:21:95:6a:24:1c:62:42:28:d7:14:2c:f6:9a:
67:4e:84:f9:57:b6:ce:a3:d7:bc:2c:3d:08:5f:46:bb:02:e1:
f3:7e:82:2a:38:57:30:bc:98:5f:37:76:a5:19:cc:04:33:01:
ae:ff:54:b9:39:93:ac:ee:06:ff:41:d5:1b:c3:30:ff:5f:ba:
be:92:ca:87:02:13:e4:90:6a:ba:7b:1f:83:51:93:ff:12:3a:
2a:32:d6:2a:93:5b:b9:26:88:28:f6:84:01:59:ee:da:2f:16:
e6:36:cc:fd:c7:d1:6d:25:49:fe:d6:27:e0:86:aa:65:b0:ad:
72:4d:26:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTNCRjgxMTAvBgNVBAUTKDJBODEzQUU1RDYxNTI5NjA0NURCM0UyQzQyQ0I4RkNE
QUM2QUQyMEMwHhcNMjYwMTI1MDE0MDUxWhcNMjYwMjAxMDE0MDUxWjAYMRYwFAYD
VQQDDA02OTc1NzRhNC02ODc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtF5OSncPE5PK0ebGLfvQifwA72deN0Dq4Dh6mc2LDS2zvkyvSrNlgIOaQX0G
YriMIQD5YczPlx0JSvoBn3y+GTEFoUMqE+zcIgmnM/njIqTD/14Rh0LSm2kgOZsj
tHZ3AorvsppKLD7nJpcLm0GNkOpmijwWd1TvFap14C0klfAFs0ckoLlsL087r/ok
lMocdxBEoBFvyFrm9TDV0kL2u5xrUxh4hDRLy9DenXAIF3kOuzKfTovOO3dGIh4b
bdHr2g7jZfDkN1UIVKmrgfT17as2QXw4A6VDu0ZU3YOBGOlcIcSSbBrzRzz7z/fF
QNPZYKiW+m9NC4GEwW+Mg3yqXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJKIO9d
DeEAc9lRHSIln7kuSNgCMB8GA1UdIwQYMBaAFCqBOuXWFSlgRds+LELLj82satIM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0JGOC9BMjJCRDE1OEUw
MTUxMUVEQjE2NjY5NjFDNEY5QUUwMi9Lb0U2NWRZVktXQkYyejRzUXN1UHpheHEw
Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0tvRTY1ZFlWS1dCRjJ6NHNRc3VQemF4cTBndy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
M0JGOC9BMjJCRDE1OEUwMTUxMUVEQjE2NjY5NjFDNEY5QUUwMi9Lb0U2NWRZVktX
QkYyejRzUXN1UHpheHEwZ3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB0T5VPodrjZrZCa4JBP+uP3pAdNKLeLsdJmNnThxZyAJCMzg2JCOAn
MWPmsu05QUSyI4YwXTVy9KuwjD5SaTo6hXPeUlol7B+s7dRcJuk6tUFvjjLTzTVw
6w9ANiwa/n/E0VroJKoD+xk+yAICEXQjoLmqSasUoa1cWU1nU5hDAN9SNSGVaiQc
YkIo1xQs9ppnToT5V7bOo9e8LD0IX0a7AuHzfoIqOFcwvJhfN3alGcwEMwGu/1S5
OZOs7gb/QdUbwzD/X7q+ksqHAhPkkGq6ex+DUZP/EjoqMtYqk1u5Jogo9oQBWe7a
LxbmNsz9x9FtJUn+1ifghqplsK1yTSZP
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:04:01 2026 by rpki-client