This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
File: KgD9XV6u-B8ysAsuXILF7NrBJpM.mft (raw, json)
Hash identifier: 8EXicC9Chs0T73O/nt2cwE2UJanO7XJf9xpojkUaLLM=
Subject key identifier: 37:C2:C6:FE:60:99:2E:E8:3B:91:7F:ED:06:09:12:2C:6E:D7:45:E9
Authority key identifier: 2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93
Certificate issuer: /CN=A91B6B4B/serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693
Certificate serial: 8D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
Manifest number: 8B
Signing time: Sun 25 Jan 2026 05:42:35 +0000
Manifest this update: Sun 25 Jan 2026 05:42:34 +0000
Manifest next update: Sun 01 Feb 2026 05:42:34 +0000
Files and hashes: 1: KgD9XV6u-B8ysAsuXILF7NrBJpM.crl (hash: dwhl8nG8d4uFhOXAdk1YkoPIHU7aapzoc+CzUoUPLuU=)
2: B3F95F9A24C411F0A4C45287C4F9AE02.roa (hash: xB68FJMR3JM3Cs61xN748kWOuQa0imSlnpLBddD+vsM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl
rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6B4B, serialNumber=2A00FD5D5EAEF81F32B00B2E5C82C5ECDAC12693
Validity
Not Before: Jan 25 05:42:34 2026 GMT
Not After : Feb 1 05:42:34 2026 GMT
Subject: CN=6975ad4b-a056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1b:d3:3e:4b:9f:aa:71:70:b0:03:2d:de:b6:
7c:9d:3c:f3:4f:3c:1e:32:36:e3:21:f5:35:8d:06:
c2:c4:50:b5:ef:11:e7:91:69:97:d3:7e:97:29:1f:
fb:cd:15:df:0b:b8:62:0b:ad:a0:7f:85:ac:ae:3a:
0f:29:b3:37:f9:62:83:28:36:18:4b:72:9e:52:de:
01:3f:7c:6f:f8:05:d8:99:ac:04:59:d1:6a:dd:d9:
63:e4:6c:59:29:ed:5f:5d:6e:16:c5:3a:e1:21:3e:
45:2d:66:9e:61:85:94:2d:e8:c7:62:6a:f0:47:c9:
00:fc:72:6c:36:61:81:f8:eb:f3:14:fb:33:00:12:
be:4b:eb:77:bd:3b:36:ef:af:b4:a5:18:e1:2d:fe:
30:16:cc:ca:50:e7:d0:bf:d7:28:f9:61:0e:8c:21:
ea:3f:90:e5:9d:b1:9f:b2:a0:89:5b:55:e8:a4:dc:
84:3d:37:b3:fe:9d:09:81:d4:64:c8:97:4a:ba:9f:
72:ac:34:b6:70:1c:15:a6:08:e3:ba:1e:a5:69:1f:
e1:06:f5:b5:0c:9d:c0:f5:c5:fa:7a:fb:50:05:f4:
df:de:4e:34:40:6f:ac:42:eb:b5:2b:69:dd:04:f9:
df:88:fa:6f:9d:9f:fb:84:f0:e6:7a:80:cc:29:eb:
02:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C2:C6:FE:60:99:2E:E8:3B:91:7F:ED:06:09:12:2C:6E:D7:45:E9
X509v3 Authority Key Identifier:
keyid:2A:00:FD:5D:5E:AE:F8:1F:32:B0:0B:2E:5C:82:C5:EC:DA:C1:26:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KgD9XV6u-B8ysAsuXILF7NrBJpM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6B4B/BB42C1DE24C311F096C68481C4F9AE02/KgD9XV6u-B8ysAsuXILF7NrBJpM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:f2:4f:cd:ff:93:31:f7:60:c1:26:02:86:31:d8:46:ad:a8:
77:83:56:68:19:de:a7:34:46:64:7e:19:ec:3a:7d:dc:21:c9:
90:17:52:92:a5:49:e8:6d:c4:b2:a8:f1:2f:b1:b9:76:6e:98:
75:71:ff:87:03:26:a7:cb:33:05:5a:b9:ab:89:98:28:76:e8:
78:77:93:4d:42:82:a5:f9:0c:65:5b:52:d2:31:bd:77:6f:bf:
32:2a:44:2f:37:f2:1c:15:ca:e5:96:bf:b7:43:cc:e5:1c:be:
87:12:88:40:a4:d4:d9:b3:7b:27:7f:4d:60:3c:26:bb:15:e0:
62:50:ee:bc:e6:1d:19:12:d1:3a:3a:c1:ab:d1:1a:5a:56:b2:
74:a2:96:d8:6e:c1:2c:a7:1a:c5:75:29:be:4f:0b:80:57:e9:
70:3d:13:64:83:bf:17:35:46:49:de:e3:c6:b5:0b:77:53:d3:
d0:c5:79:c9:50:66:66:f3:6e:c6:0d:a8:5b:9b:c7:63:a7:d8:
cb:35:b7:3a:a4:ea:51:81:75:7b:82:62:c0:57:61:c9:ea:b4:
06:4d:ba:2a:3a:76:39:76:77:52:79:bd:9c:87:4d:d2:72:21:
93:ad:28:78:c0:e2:89:ae:d2:8c:ca:20:0c:d9:25:e1:70:51:
1d:17:8d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:43:54 2026 by rpki-client