This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
File: kN_cE0DUTo_iVh19jeSe71QGEII.mft (raw, json)
Hash identifier: T1yniHGhw04ZfgYfQOz8XNUBBZC5yHY9OnMGzoaMwKQ=
Subject key identifier: 24:66:A6:EC:C8:8D:CA:E3:A3:0E:24:DE:CE:A9:C2:05:B2:01:14:A1
Authority key identifier: 90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82
Certificate issuer: /CN=A91C9C05/serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082
Certificate serial: 34FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
Manifest number: 34FD
Signing time: Sat 24 Jan 2026 15:10:20 +0000
Manifest this update: Sat 24 Jan 2026 15:10:20 +0000
Manifest next update: Sat 31 Jan 2026 15:10:20 +0000
Files and hashes: 1: kN_cE0DUTo_iVh19jeSe71QGEII.crl (hash: G7+y3eGak5RqWVGzu9Co1URgMZPNGfRCmIEIpPaWj94=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl
rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13567 (0x34ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9C05, serialNumber=90DFDC1340D44E8FE2561D7D8DE49EEF54061082
Validity
Not Before: Jan 24 15:10:20 2026 GMT
Not After : Jan 31 15:10:20 2026 GMT
Subject: CN=6974e0dc-f63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:12:ab:16:e6:bb:7a:1f:04:35:4b:a3:b5:
66:0f:c6:0d:cc:2d:8e:d6:2e:10:5d:31:ef:e9:6e:
bd:73:0a:92:e3:f0:88:a6:db:71:84:06:8b:be:f2:
a0:9b:57:56:1d:03:39:fb:11:f2:8b:9e:0e:c8:90:
cd:be:5e:e7:b2:b7:f6:41:48:61:50:c4:0b:7e:f7:
ed:68:8c:14:32:fb:95:08:8f:fd:59:ee:ff:42:a5:
98:68:73:3d:65:b0:0e:2e:97:05:25:35:8e:7d:b2:
f2:23:69:35:ed:1a:0b:ec:1a:79:10:43:cb:03:54:
76:2b:9b:44:e0:8a:6b:bd:6f:52:23:a4:30:db:35:
1a:3e:71:1b:d3:c4:2a:26:95:04:62:6d:6d:15:4e:
71:c2:46:64:5a:26:f9:32:a6:3a:b2:9c:a0:c6:6b:
bf:8e:c1:af:40:6c:67:83:5f:6c:26:f1:8f:15:f1:
bd:3b:f7:93:a2:85:ca:d7:7a:52:4a:19:50:92:8f:
e9:d1:c3:25:5f:12:9c:2e:e9:51:97:b6:87:fb:43:
a6:c8:39:20:6b:5c:63:58:29:f2:0a:76:fa:22:1a:
70:18:f5:87:05:33:3c:50:31:a6:0d:29:af:65:13:
85:30:ee:32:28:e4:e3:af:d0:64:a4:e9:61:1d:b0:
44:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:66:A6:EC:C8:8D:CA:E3:A3:0E:24:DE:CE:A9:C2:05:B2:01:14:A1
X509v3 Authority Key Identifier:
keyid:90:DF:DC:13:40:D4:4E:8F:E2:56:1D:7D:8D:E4:9E:EF:54:06:10:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kN_cE0DUTo_iVh19jeSe71QGEII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9C05/E9D9A0221DAA11E28C98DBA608B02CD2/kN_cE0DUTo_iVh19jeSe71QGEII.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:c5:4d:bb:31:02:ff:42:45:9c:1b:33:5c:34:ea:40:ca:d8:
b5:18:84:57:e6:ef:6b:69:e4:ee:e7:eb:36:19:10:ea:40:b7:
1b:6c:e8:f0:80:a2:20:ee:3f:be:d3:70:a8:2c:42:60:2e:aa:
07:8c:2a:d6:b7:0f:45:bc:8d:b7:5d:46:f0:9a:a5:8b:a1:b1:
28:30:da:d8:90:40:64:26:0a:81:e0:4c:36:f1:44:aa:20:1e:
86:89:d1:4e:3b:15:92:48:e3:12:b9:50:fe:3e:76:e7:fe:50:
7e:24:5a:68:64:9f:64:39:ad:6b:e2:6c:e6:f6:cb:df:67:5f:
aa:c4:9b:7f:ee:d2:7d:ea:d4:e5:0d:a4:fb:05:c0:92:6b:06:
2d:45:b5:82:c0:9b:c2:cf:06:15:71:9c:53:8b:5d:6c:bc:da:
21:50:16:7e:c3:70:98:7c:d7:a9:51:65:cd:95:e4:61:85:ca:
5e:d1:28:d9:3f:31:da:61:97:82:47:63:47:02:1c:4b:ae:98:
88:fb:05:c7:ed:21:48:6d:94:10:b6:9d:ba:c4:58:bc:08:3e:
b2:89:a8:99:9d:47:af:be:84:09:a0:b5:58:f0:79:0f:bb:5f:
7f:e5:06:f4:a0:eb:48:4a:e4:cf:91:ba:29:74:8c:4b:9f:d7:
45:6b:9b:a8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzlDMDUxMTAvBgNVBAUTKDkwREZEQzEzNDBENDRFOEZFMjU2MUQ3RDhERTQ5RUVG
NTQwNjEwODIwHhcNMjYwMTI0MTUxMDIwWhcNMjYwMTMxMTUxMDIwWjAYMRYwFAYD
VQQDDA02OTc0ZTBkYy1mNjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwwsSqxbmu3ofBDVLo7VmD8YNzC2O1i4QXTHv6W69cwqS4/CIpttxhAaLvvKg
m1dWHQM5+xHyi54OyJDNvl7nsrf2QUhhUMQLfvftaIwUMvuVCI/9We7/QqWYaHM9
ZbAOLpcFJTWOfbLyI2k17RoL7Bp5EEPLA1R2K5tE4IprvW9SI6Qw2zUaPnEb08Qq
JpUEYm1tFU5xwkZkWib5MqY6spygxmu/jsGvQGxng19sJvGPFfG9O/eTooXK13pS
ShlQko/p0cMlXxKcLulRl7aH+0OmyDkga1xjWCnyCnb6IhpwGPWHBTM8UDGmDSmv
ZROFMO4yKOTjr9BkpOlhHbBEwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRmpuzI
jcrjow4k3s6pwgWyARShMB8GA1UdIwQYMBaAFJDf3BNA1E6P4lYdfY3knu9UBhCC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUMwNS9FOUQ5QTAyMjFE
QUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRvX2lWaDE5amVTZTcxUUdF
SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tOX2NFMERVVG9faVZoMTlqZVNlNzFRR0VJSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OUMwNS9FOUQ5QTAyMjFEQUExMUUyOEM5OERCQTYwOEIwMkNEMi9rTl9jRTBEVVRv
X2lWaDE5amVTZTcxUUdFSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQxU27MQL/QkWcGzNcNOpAyti1GIRX5u9raeTu5+s2GRDqQLcbbOjw
gKIg7j++03CoLEJgLqoHjCrWtw9FvI23XUbwmqWLobEoMNrYkEBkJgqB4Ew28USq
IB6GidFOOxWSSOMSuVD+Pnbn/lB+JFpoZJ9kOa1r4mzm9svfZ1+qxJt/7tJ96tTl
DaT7BcCSawYtRbWCwJvCzwYVcZxTi11svNohUBZ+w3CYfNepUWXNleRhhcpe0SjZ
PzHaYZeCR2NHAhxLrpiI+wXH7SFIbZQQtp26xFi8CD6yiaiZnUevvoQJoLVY8HkP
u19/5Qb0oOtISuTPkbopdIxLn9dFa5uo
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:00:28 2026 by rpki-client