This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
File: kIDbUP8LdD_6MredDdXDGQIdbiQ.mft (raw, json)
Hash identifier: 6gKWAKGGS0Dd+evOUb8d0+aLPwuGAuTVO8khLoyyW7A=
Subject key identifier: 62:5E:FA:69:97:C6:08:68:EA:36:B1:30:CB:6D:26:6B:5F:49:45:FA
Authority key identifier: 90:80:DB:50:FF:0B:74:3F:FA:32:B7:9D:0D:D5:C3:19:02:1D:6E:24
Certificate issuer: /CN=A91B5377/serialNumber=9080DB50FF0B743FFA32B79D0DD5C319021D6E24
Certificate serial: C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
Manifest number: C4
Signing time: Sun 25 Jan 2026 05:03:17 +0000
Manifest this update: Sun 25 Jan 2026 05:03:17 +0000
Manifest next update: Sun 01 Feb 2026 05:03:17 +0000
Files and hashes: 1: kIDbUP8LdD_6MredDdXDGQIdbiQ.crl (hash: 595qYo8Idi7rVDvT1CP5jSSr6d/WW3K2eyaZaRVfQNw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.crl
rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5377, serialNumber=9080DB50FF0B743FFA32B79D0DD5C319021D6E24
Validity
Not Before: Jan 25 05:03:17 2026 GMT
Not After : Feb 1 05:03:17 2026 GMT
Subject: CN=6975a415-93c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4b:9e:0c:2f:c8:fe:6d:52:48:a6:c8:70:67:
cb:09:cc:99:7d:8e:15:10:19:3e:c8:02:b5:7e:c4:
f2:42:ab:a9:65:6d:25:7f:ab:04:2b:58:0d:98:40:
7a:c5:22:98:a2:28:90:ba:0d:55:4a:f1:69:45:59:
b6:fd:a7:f4:ef:b1:db:8d:5f:40:fe:0f:f9:e5:d7:
e8:ce:29:f2:c7:12:f8:10:89:a0:30:9b:68:e9:10:
ac:37:06:85:86:5e:08:3b:c9:5a:93:31:da:ce:a5:
12:6a:76:61:5c:e9:b5:5a:d2:fa:b8:6f:6e:ab:0e:
f1:9a:cf:27:ce:c3:dc:93:c7:3b:0c:8a:da:60:6f:
20:08:04:07:59:d6:a2:a4:35:57:0a:c5:fd:d3:43:
9c:2a:75:56:60:5a:ad:1b:25:14:3c:07:41:e5:19:
32:68:2e:b9:ca:5e:12:30:5c:b5:cf:4e:43:02:d9:
4a:ba:90:b6:31:92:e7:46:12:dd:f6:71:94:8e:7c:
ec:2b:2d:2c:85:45:96:6d:fc:73:35:a8:f5:73:7c:
e7:76:59:b2:5f:13:f8:25:f1:6a:7b:09:59:3e:ec:
50:51:3c:b1:67:99:6f:42:f2:80:83:f2:dd:d1:31:
87:f0:01:31:bc:71:14:9d:07:92:19:5e:ba:b2:14:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5E:FA:69:97:C6:08:68:EA:36:B1:30:CB:6D:26:6B:5F:49:45:FA
X509v3 Authority Key Identifier:
keyid:90:80:DB:50:FF:0B:74:3F:FA:32:B7:9D:0D:D5:C3:19:02:1D:6E:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:af:eb:11:5b:23:28:9c:64:1f:65:09:cd:0d:6e:52:20:e2:
e4:5c:4f:81:cf:f7:d2:47:38:45:29:4d:e4:fc:45:f6:2a:1f:
f3:55:f2:25:b2:90:be:10:8c:76:6b:84:9c:4f:56:36:56:ce:
0f:0c:4b:22:62:19:3b:85:75:c7:93:76:34:4d:16:83:b6:41:
1f:e2:87:c7:4c:66:ea:cf:98:2f:af:bd:58:ad:96:69:1a:62:
25:d0:9a:92:48:79:44:eb:bf:9c:00:45:32:79:e6:b5:e3:56:
c4:5b:02:52:d2:28:b6:fa:03:b3:8c:5b:ab:e7:33:89:74:20:
a3:e6:b8:f8:de:87:74:66:c4:94:82:c9:e2:8f:ad:0b:da:16:
ef:4c:ca:16:8b:54:3a:7b:83:2f:b8:15:06:43:cc:4d:82:9f:
cf:e9:2a:06:2d:a9:19:5b:97:05:01:fb:33:17:8d:8d:dd:95:
c5:cf:26:d0:6b:21:03:35:c7:f9:3c:ce:8e:94:1f:68:04:cb:
e1:5b:0f:04:cd:24:a8:12:ee:ae:e2:40:8c:d7:1c:36:a9:f8:
d9:bc:0b:31:64:4c:dd:9d:46:4d:c2:93:2f:83:0b:60:02:d2:
4b:0e:20:95:3e:db:7b:d2:3c:cb:78:02:b0:19:b6:69:b2:c1:
a3:51:84:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:56:31 2026 by rpki-client