This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft
File: KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft (raw, json)
Hash identifier: bKD+lcNaW9JbjBTVtQSGLYlCXXpAS45gBKdkXMwpUuM=
Subject key identifier: A1:8F:E6:D7:0C:0D:C6:A0:0C:37:C3:A7:FF:DD:6C:DF:F6:0A:6E:5B
Authority key identifier: 28:F1:8E:C7:49:EA:91:B5:A3:29:97:49:F2:AB:E2:78:8A:10:C6:91
Certificate issuer: /CN=A91DA252/serialNumber=28F18EC749EA91B5A3299749F2ABE2788A10C691
Certificate serial: 0A26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft
Manifest number: 0A20
Signing time: Sat 24 Jan 2026 19:14:39 +0000
Manifest this update: Sat 24 Jan 2026 19:14:39 +0000
Manifest next update: Sat 31 Jan 2026 19:14:39 +0000
Files and hashes: 1: KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl (hash: Sso/w1thKBmlI6UErHbKE/JSfan/evBzqad5kS+y3Cs=)
2: 81E66AB486DD11EAA5DCD466C4F9AE02.roa (hash: PABbUqoLwf3xZn77dm2ppG3YXtLL0LLzakgXhNUgKAg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl
rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2598 (0xa26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA252, serialNumber=28F18EC749EA91B5A3299749F2ABE2788A10C691
Validity
Not Before: Jan 24 19:14:39 2026 GMT
Not After : Jan 31 19:14:39 2026 GMT
Subject: CN=69751a1f-678d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:b4:18:c6:4a:d8:9a:bd:44:3e:f6:e8:1d:
46:12:fa:b3:0b:2a:92:70:62:dd:56:53:a0:4a:0d:
29:9d:fe:df:49:43:12:8e:a2:f9:4d:c3:0a:75:34:
df:2a:5a:4c:de:bd:81:b0:ab:ad:e5:4a:54:16:72:
38:76:43:cb:96:1e:e9:23:29:f2:51:9f:b4:37:4a:
4a:77:4c:cf:7f:18:7f:a3:f0:4e:7b:49:30:61:3b:
a9:78:97:66:a5:6d:a8:c2:fa:63:dd:10:f5:de:e7:
f5:36:df:0e:44:6d:e2:ad:7f:f5:4a:b8:22:5c:d4:
e0:da:e5:35:77:42:56:7b:2e:3d:c1:49:e9:be:db:
ee:38:b7:96:eb:ce:8d:22:fb:36:d9:de:94:87:84:
33:18:98:84:74:c0:09:9f:d1:33:cb:70:7b:aa:83:
c6:f5:bb:6c:ff:67:a8:2d:68:81:51:be:de:39:95:
28:9e:0d:61:b4:46:e5:72:5a:01:26:a7:2e:ae:22:
09:4f:db:a1:66:db:c4:30:58:c5:22:5f:30:47:c8:
da:e0:c0:cf:b4:87:f8:80:56:da:74:18:3a:b3:21:
4b:7e:e3:ac:c8:ac:19:77:35:73:84:97:4f:a6:b4:
72:ab:8a:5a:a7:d3:cd:9b:15:90:7c:00:23:24:0b:
ef:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8F:E6:D7:0C:0D:C6:A0:0C:37:C3:A7:FF:DD:6C:DF:F6:0A:6E:5B
X509v3 Authority Key Identifier:
keyid:28:F1:8E:C7:49:EA:91:B5:A3:29:97:49:F2:AB:E2:78:8A:10:C6:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:bc:06:96:43:29:34:b5:db:5f:a5:a5:85:09:b7:53:10:cf:
7f:3a:75:f4:35:d4:3e:b4:96:85:10:1d:14:ce:b3:5d:2c:43:
8e:c0:3e:59:24:cb:78:eb:be:d5:be:8c:16:c1:50:b1:1f:62:
0a:48:50:d4:f3:8a:07:51:76:b4:51:27:c8:40:3b:2b:ad:6f:
b3:6f:c7:d8:53:01:95:18:b5:92:2b:25:b0:01:26:80:3b:9d:
84:cf:b1:94:16:9d:af:ff:4c:98:ee:f4:1c:57:80:fd:40:5f:
de:27:ce:fe:06:e6:65:1c:9e:88:92:c6:75:0d:47:94:27:67:
93:74:e0:9f:0a:ac:df:ba:34:cd:8b:dc:22:57:e0:9b:e9:c9:
1f:de:1f:75:d3:01:f6:1b:55:1e:ab:3a:7d:6f:9c:af:ea:4a:
e0:7b:aa:e3:55:02:01:21:b5:d8:23:48:0a:a7:3b:c0:72:68:
5f:71:26:b9:27:48:d9:b5:c5:0b:3a:2a:ff:4f:a9:e8:de:77:
d3:62:f0:57:a3:ae:ff:7a:fa:08:91:99:75:d4:f0:9c:d7:82:
ca:25:4e:65:5a:3f:6a:82:8b:af:9e:90:a0:48:50:7f:f8:38:
16:f8:6a:a4:c7:db:ae:97:b1:3f:dc:8f:fc:50:e0:c2:4e:63:
95:5b:25:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:21:14 2026 by rpki-client