This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
File: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft (raw, json)
Hash identifier: MY84KTqI/AGiUcAt5frkIA9dY2F/AqvYHVqcjNxfZrs=
Subject key identifier: 9D:AC:4E:BB:F4:32:AA:E5:98:39:43:63:05:C1:7A:F9:F1:EE:B4:03
Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64
Certificate issuer: /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464
Certificate serial: 15AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
Manifest number: 15A1
Signing time: Sat 24 Jan 2026 16:30:35 +0000
Manifest this update: Sat 24 Jan 2026 16:30:34 +0000
Manifest next update: Sat 31 Jan 2026 16:30:34 +0000
Files and hashes: 1: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl (hash: iK0wzyfRgil9lrOyRJKiCQL5DDkINv95p1QAMxRaJbI=)
2: 5E5F16A4551811F0B9246E54C4F9AE02.roa (hash: tCvJCiKT1CxBWkl8Ab7Cnl377oruRnl6LjKbMrrQtv8=)
3: 6208BAD4499611E8B421BE5CC4F9AE02.roa (hash: tik1gv8xWyjalWVShAfgsNZP/VovqqNlmgUqnA0wMDk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl
rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5550 (0x15ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2695, serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464
Validity
Not Before: Jan 24 16:30:34 2026 GMT
Not After : Jan 31 16:30:34 2026 GMT
Subject: CN=6974f3aa-0ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:b4:a7:48:36:37:f4:58:b9:40:62:50:31:
06:0b:dd:55:eb:79:51:aa:32:ac:c9:6e:b4:9e:19:
f7:99:d5:b7:df:d0:cf:35:2e:74:df:cc:f7:fc:ad:
17:4f:d6:56:9f:c1:a2:d8:7e:53:d1:ed:e2:58:c6:
f2:4b:a3:fa:cb:05:be:85:1a:2d:d3:a4:33:2d:87:
30:bd:82:b2:30:11:3d:2c:9a:3f:0a:d9:ad:c0:c1:
31:b6:a8:3c:96:aa:dd:7b:e1:92:20:69:69:be:97:
df:89:78:66:d8:9e:d9:df:c8:a9:30:d8:4f:07:92:
42:85:f7:ac:ca:a1:1f:b8:33:fc:17:84:5b:c7:d0:
90:ab:df:7b:d1:c7:42:09:cd:e9:38:07:5a:e8:de:
b4:a5:93:f4:ec:bc:db:12:eb:b1:40:62:e8:4f:45:
6d:68:b1:a2:81:82:8c:05:d9:bc:c4:e6:ab:9e:ce:
63:b6:95:fc:d7:02:cc:8a:a5:71:d7:e8:42:81:31:
8d:c5:96:33:84:df:84:96:96:09:4f:b6:57:32:c2:
0d:c0:3b:b2:f7:15:3f:f7:75:d7:20:e8:2a:06:8f:
46:b5:5b:77:5b:46:55:0b:17:85:a1:28:6a:d7:82:
89:fa:0e:e9:bd:aa:11:83:06:a2:63:a8:2f:37:16:
1c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AC:4E:BB:F4:32:AA:E5:98:39:43:63:05:C1:7A:F9:F1:EE:B4:03
X509v3 Authority Key Identifier:
keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:3b:c7:e9:c5:ef:ef:50:bf:84:ec:96:51:58:ac:cb:b3:f9:
a3:28:24:8c:52:6f:3f:ae:48:37:aa:a9:b0:77:28:3a:df:32:
4c:2c:b5:ed:91:1d:2b:c6:30:4a:90:31:d4:c0:71:48:85:3c:
70:43:4b:ba:62:e5:62:54:05:ec:a1:39:b7:10:8e:28:e3:3e:
59:29:61:3b:90:b2:72:b7:78:8d:52:33:fa:98:e0:6d:56:d6:
9d:11:81:9a:ea:e6:f7:0e:37:4e:4f:81:ce:c2:f6:55:07:aa:
f1:31:bd:02:6a:98:94:f4:21:54:f4:b7:4a:16:9a:bd:71:b1:
2e:e7:b3:1e:ee:11:b0:99:98:91:b0:ac:90:d9:52:3d:52:3b:
e4:32:54:bb:8b:e0:5a:e9:18:75:b4:4a:e8:d2:db:29:37:e7:
11:33:5e:d7:ae:d8:68:cc:25:0e:e1:22:52:b0:ba:de:8f:9c:
9d:78:dd:89:d0:6b:77:d3:e5:ed:ec:db:53:5c:9d:43:12:c3:
51:ad:e6:38:b8:a7:0b:d3:18:06:6b:f0:cb:45:e9:52:3d:44:
ca:81:56:68:89:0d:6d:5f:fa:20:f4:ad:37:39:31:bc:32:01:
9b:3e:f3:9f:ba:00:18:69:06:ad:18:8b:66:f0:d2:9b:02:f0:
1a:ec:3a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:37:58 2026 by rpki-client