This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
File: kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft (raw, json)
Hash identifier: w8bd3z50ny12/rH1UfpqgUOZf6+7mHJsVFx9Ba/xmZY=
Subject key identifier: BD:10:2A:54:C6:71:0D:66:2B:AC:55:DF:CA:AE:E1:F1:37:50:F2:ED
Authority key identifier: 90:2B:A5:A9:25:18:61:DA:3E:8E:2F:DB:1E:12:64:CC:D8:B0:53:74
Certificate issuer: /CN=A91A038D/serialNumber=902BA5A9251861DA3E8E2FDB1E1264CCD8B05374
Certificate serial: 51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
Manifest number: 4A
Signing time: Fri 23 Jan 2026 06:27:09 +0000
Manifest this update: Fri 23 Jan 2026 06:27:09 +0000
Manifest next update: Fri 30 Jan 2026 06:27:09 +0000
Files and hashes: 1: kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl (hash: WQIiioyXAWUXlZXKSrlrpdloscNo6P+7dt3CkpHodWk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl
rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A038D, serialNumber=902BA5A9251861DA3E8E2FDB1E1264CCD8B05374
Validity
Not Before: Jan 23 06:27:09 2026 GMT
Not After : Jan 30 06:27:09 2026 GMT
Subject: CN=697314bd-f1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:44:54:ac:93:6e:8e:d5:d7:cd:7f:58:e9:
70:ee:e0:f0:0f:e1:46:78:8d:9c:52:f1:ae:83:a6:
a0:66:08:7e:d0:74:70:a5:56:cd:d9:43:ac:0c:19:
db:ea:f0:2f:a2:8b:79:9d:ea:c0:f0:e1:88:8b:ab:
6d:08:7e:06:62:75:64:95:e4:87:60:ed:29:66:52:
1d:b5:93:46:d6:e3:29:8a:6a:a3:8e:5c:ab:d1:a6:
70:45:87:16:8c:9b:1f:8a:f3:05:b1:bc:d4:20:61:
77:01:00:4d:a9:57:d2:92:2a:6e:52:cb:ac:34:f0:
8e:3a:38:8c:69:d1:33:56:88:c2:92:de:13:82:1d:
f2:44:30:67:ca:5b:de:75:48:53:f8:91:7e:27:25:
47:ad:49:56:b5:6b:c7:86:7d:14:34:ee:f9:a7:e2:
85:0f:15:89:ba:ba:99:9a:25:a6:bd:ce:22:f0:09:
90:ca:9b:d6:55:c9:c1:8c:7a:b8:d3:d3:20:49:db:
6c:40:76:02:03:95:f9:0d:85:cd:fa:12:e2:db:a8:
03:49:d4:4f:64:41:1b:e9:78:42:a9:8a:02:76:65:
65:ac:db:a3:aa:92:71:26:3d:ab:e6:5e:90:87:40:
73:63:0a:bc:bb:1d:18:00:66:dd:ac:4f:a6:13:68:
41:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:10:2A:54:C6:71:0D:66:2B:AC:55:DF:CA:AE:E1:F1:37:50:F2:ED
X509v3 Authority Key Identifier:
keyid:90:2B:A5:A9:25:18:61:DA:3E:8E:2F:DB:1E:12:64:CC:D8:B0:53:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCulqSUYYdo-ji_bHhJkzNiwU3Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A038D/55F0114E99D811F09A4D8E40C4F9AE02/kCulqSUYYdo-ji_bHhJkzNiwU3Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:a6:48:0e:c2:21:41:e9:cd:69:02:a6:87:d5:e9:b7:db:1e:
9d:da:f6:48:6d:60:72:4e:09:fd:41:a3:41:23:88:dd:9c:1c:
da:99:ab:5e:66:23:67:ad:fb:ea:09:38:07:87:f3:b2:50:19:
c7:0b:d6:b3:fc:f8:47:d0:ea:aa:5a:24:55:49:d6:d9:15:a6:
0a:39:03:a4:db:43:93:54:08:01:47:91:af:f7:a6:a9:eb:e6:
4a:1b:01:9c:14:37:79:c2:af:6d:86:ae:0d:c5:1d:0f:cc:aa:
64:5f:46:0d:b5:47:61:af:9a:0a:30:34:3e:b8:30:fe:22:8e:
af:0d:77:08:1c:51:8f:9d:46:bd:95:ec:18:e5:4c:0e:3d:27:
c1:db:ba:29:49:67:90:b5:53:d7:a1:9b:78:f7:98:b6:59:0c:
5b:7d:e3:b2:e2:22:ce:0e:23:9a:a2:da:7e:5b:d2:5d:3d:2a:
fc:ec:eb:20:f1:87:a3:a1:3d:9b:3d:3e:08:f3:1a:56:52:20:
b4:de:9e:2e:c9:c4:61:05:f8:d9:05:92:a1:90:33:ee:16:50:
82:dd:db:8d:8f:77:93:48:6c:b8:ef:83:32:73:32:2a:23:47:
03:03:9b:d2:e0:62:de:a0:23:fb:d7:ff:42:96:45:c3:05:81:
5e:05:b2:b8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
MDM4RDExMC8GA1UEBRMoOTAyQkE1QTkyNTE4NjFEQTNFOEUyRkRCMUUxMjY0Q0NE
OEIwNTM3NDAeFw0yNjAxMjMwNjI3MDlaFw0yNjAxMzAwNjI3MDlaMBgxFjAUBgNV
BAMMDTY5NzMxNGJkLWYxYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0TERUrJNujtXXzX9Y6XDu4PAP4UZ4jZxS8a6DpqBmCH7QdHClVs3ZQ6wMGdvq
8C+ii3md6sDw4YiLq20IfgZidWSV5Idg7SlmUh21k0bW4ymKaqOOXKvRpnBFhxaM
mx+K8wWxvNQgYXcBAE2pV9KSKm5Sy6w08I46OIxp0TNWiMKS3hOCHfJEMGfKW951
SFP4kX4nJUetSVa1a8eGfRQ07vmn4oUPFYm6upmaJaa9ziLwCZDKm9ZVycGMerjT
0yBJ22xAdgIDlfkNhc36EuLbqANJ1E9kQRvpeEKpigJ2ZWWs26OqknEmPavmXpCH
QHNjCry7HRgAZt2sT6YTaEHHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvRAqVMZx
DWYrrFXfyq7h8TdQ8u0wHwYDVR0jBBgwFoAUkCulqSUYYdo+ji/bHhJkzNiwU3Qw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwMzhELzU1RjAxMTRFOTlE
ODExRjA5QTREOEU0MEM0RjlBRTAyL2tDdWxxU1VZWWRvLWppX2JIaEprek5pd1Uz
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIva0N1bHFTVVlZZG8tamlfYkhoSmt6Tml3VTNRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw
MzhELzU1RjAxMTRFOTlEODExRjA5QTREOEU0MEM0RjlBRTAyL2tDdWxxU1VZWWRv
LWppX2JIaEprek5pd1UzUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADimSA7CIUHpzWkCpofV6bfbHp3a9khtYHJOCf1Bo0EjiN2cHNqZq15m
I2et++oJOAeH87JQGccL1rP8+EfQ6qpaJFVJ1tkVpgo5A6TbQ5NUCAFHka/3pqnr
5kobAZwUN3nCr22Grg3FHQ/MqmRfRg21R2GvmgowND64MP4ijq8NdwgcUY+dRr2V
7BjlTA49J8HbuilJZ5C1U9ehm3j3mLZZDFt947LiIs4OI5qi2n5b0l09Kvzs6yDx
h6OhPZs9PgjzGlZSILTeni7JxGEF+NkFkqGQM+4WUILd242Pd5NIbLjvgzJzMioj
RwMDm9LgYt6gI/vX/0KWRcMFgV4Fsrg=
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:51 2026 by rpki-client