This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft
File: KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft (raw, json)
Hash identifier: PcelVnBIvCuskJjp19UX3iQv6+zuLUEFrYxlZm44Dj4=
Subject key identifier: 8B:DD:A9:EE:C5:93:19:82:99:18:CA:F0:0B:50:5B:DD:89:C4:81:06
Authority key identifier: 28:F0:71:10:E4:35:84:A3:BA:6A:3A:4A:87:D6:8E:9E:B7:D3:E9:02
Certificate issuer: /CN=A91C5021/serialNumber=28F07110E43584A3BA6A3A4A87D68E9EB7D3E902
Certificate serial: 07B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft
Manifest number: 079F
Signing time: Sat 24 Jan 2026 20:52:31 +0000
Manifest this update: Sat 24 Jan 2026 20:52:30 +0000
Manifest next update: Sat 31 Jan 2026 20:52:30 +0000
Files and hashes: 1: KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl (hash: 5ZOFHjfe4UMg0/eWdzegbuZAwDxSvgh74UnU2gmm8pI=)
2: C42CEC7ECC3611EF9C79665CC4F9AE02.roa (hash: vScPDcKQqioESY3fiWqsXqSq+CDEGlxPspBb4jYpPj8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl
rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:52:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1975 (0x7b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5021, serialNumber=28F07110E43584A3BA6A3A4A87D68E9EB7D3E902
Validity
Not Before: Jan 24 20:52:30 2026 GMT
Not After : Jan 31 20:52:30 2026 GMT
Subject: CN=6975310f-931c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:b3:72:11:b2:16:7f:04:30:6e:d7:7f:86:
a7:ce:4b:09:bf:ea:d8:d4:13:9b:25:0a:1a:71:ab:
7b:cb:6a:c7:78:1f:16:67:ef:d9:1b:e6:0c:50:28:
42:69:ec:ed:c4:db:b3:ae:ab:e0:a7:a4:55:9c:a9:
68:8d:bf:6d:1e:f1:92:57:ea:fa:c6:34:28:c2:38:
4b:97:02:0e:e7:9a:c6:d6:5a:dd:7d:3a:fa:2c:de:
38:a1:2c:d4:4e:49:a0:ad:bc:5e:de:3a:9a:d5:42:
7d:57:dc:74:31:c5:3a:88:ad:08:f4:82:6f:9d:ef:
41:6a:aa:b6:dc:f8:01:8a:68:4b:06:79:ec:7c:9d:
7c:df:cd:e2:30:bb:35:7d:6f:8a:d3:9c:13:2b:5a:
ce:d4:ed:a2:ae:52:ad:81:da:43:18:83:a6:6c:d5:
11:50:60:9f:44:f2:8c:fb:ed:49:c2:5b:10:bc:18:
f4:ec:29:b6:e3:e0:2a:88:e6:1a:7e:44:f9:92:09:
a1:27:e6:c0:3b:89:5a:56:88:ea:d6:f6:df:8d:79:
d8:a2:65:c7:97:9a:21:e5:c1:5b:77:96:1a:3f:fe:
0b:85:3c:13:53:c0:e1:2d:a9:08:4a:76:be:da:37:
c3:4b:6a:74:a7:76:05:e9:69:d7:99:42:b1:83:e1:
f7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DD:A9:EE:C5:93:19:82:99:18:CA:F0:0B:50:5B:DD:89:C4:81:06
X509v3 Authority Key Identifier:
keyid:28:F0:71:10:E4:35:84:A3:BA:6A:3A:4A:87:D6:8E:9E:B7:D3:E9:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5021/9AFD486C3BBC11EBA776F161C4F9AE02/KPBxEOQ1hKO6ajpKh9aOnrfT6QI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:23:a7:ec:59:cb:2f:c5:d2:1d:4b:f8:97:e0:39:c4:d7:1b:
fd:29:b1:7d:8d:f2:59:9b:58:78:b4:f0:2e:90:a3:9c:07:1c:
ff:16:dc:11:98:d1:cc:9e:28:e7:aa:39:af:14:fc:39:a3:5f:
3a:d7:09:d7:2e:58:53:bf:20:f1:ed:82:c4:c7:34:b6:e0:ab:
ca:77:84:52:e3:cc:da:13:e4:8c:86:d3:6f:56:a5:50:ba:07:
0f:c9:4d:8e:b0:99:9b:3d:e4:48:1d:31:30:6c:f6:d4:68:3b:
36:93:6a:40:d5:c2:88:be:dc:6b:12:ef:a7:eb:02:91:90:d6:
1e:7e:88:64:0a:b5:fa:9c:08:8d:59:8e:f9:f5:99:d4:a4:0b:
0c:8b:32:fd:30:d3:d4:13:32:01:a3:92:e7:a0:75:87:c6:8e:
86:07:28:9b:0a:1a:58:8d:e6:45:cc:cc:84:ff:86:a3:ae:3a:
25:60:52:eb:86:3b:5c:3c:e3:99:11:7a:09:d1:6c:91:b4:34:
26:26:4a:1a:da:e7:5b:72:6a:90:84:9b:60:4a:6e:76:8b:f3:
05:39:5c:51:aa:22:a8:43:d8:8f:b7:43:92:49:34:3c:9c:5a:
8e:fe:dc:52:b8:99:54:68:46:0b:9b:a1:21:21:d4:45:f8:8f:
82:08:4b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:08:13 2026 by rpki-client