This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft
File: Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft (raw, json)
Hash identifier: do/iRr55S/B164R3xpXxNLEytM07qgNqASZd4l6QtOQ=
Subject key identifier: 54:03:41:C6:F0:AE:78:C6:64:3A:9D:EF:ED:98:B8:E9:F1:6B:B4:FD
Authority key identifier: 2B:3E:E4:4E:A9:CB:5B:81:29:6B:B6:7D:F0:F5:46:F8:AA:C8:A4:B4
Certificate issuer: /CN=A91F4F00/serialNumber=2B3EE44EA9CB5B81296BB67DF0F546F8AAC8A4B4
Certificate serial: 0806
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft
Manifest number: 07FC
Signing time: Sat 24 Jan 2026 20:29:29 +0000
Manifest this update: Sat 24 Jan 2026 20:29:29 +0000
Manifest next update: Sat 31 Jan 2026 20:29:29 +0000
Files and hashes: 1: Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.crl (hash: U2GCxSIEnZor0iUiNFzlTdQpVZv3nSQCsspsJC6/ebU=)
2: E7BAB834B5F511F0B410AD78C4F9AE02.roa (hash: fxQZfbaLKR/d/fZu/fhyY8IFle3U5GHLuzj+qPAQsuQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.crl
rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2054 (0x806)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4F00, serialNumber=2B3EE44EA9CB5B81296BB67DF0F546F8AAC8A4B4
Validity
Not Before: Jan 24 20:29:29 2026 GMT
Not After : Jan 31 20:29:29 2026 GMT
Subject: CN=69752ba9-dc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fb:d5:9a:fa:70:4a:c2:39:40:c6:5c:5e:4a:
ed:69:44:49:e1:c6:30:58:9a:58:89:14:e5:7b:e0:
e5:2e:a2:d0:05:23:34:43:2d:9e:83:81:81:f1:0a:
f4:ea:2a:9f:ce:35:25:bc:93:2a:55:48:e2:62:4b:
02:c6:1d:94:3d:cb:d7:ca:a7:d8:a7:f6:cc:5b:ae:
80:2b:a7:cf:d7:03:19:b7:db:d5:e2:ed:a7:5d:d4:
1c:fb:10:81:5f:6d:84:23:6c:ee:9c:21:9f:aa:5f:
6f:6a:67:db:7f:3d:32:0d:c2:f1:08:e5:8a:7f:e7:
68:90:ed:49:4f:58:f1:0a:be:0b:b4:a7:2c:25:e1:
51:6a:0e:da:e2:5e:2d:7e:ad:39:6a:8c:32:52:3c:
a9:eb:5f:ac:52:aa:76:92:45:83:e3:49:2e:95:e4:
74:b0:94:ab:90:f3:c8:15:07:68:80:54:6d:7f:46:
90:c9:d1:68:b2:df:3d:2f:20:20:7b:d3:08:82:eb:
28:92:60:11:26:32:96:a9:d0:3d:b8:98:3e:30:58:
c3:79:30:94:6c:0f:62:a5:e4:8c:0a:9f:78:92:c9:
13:36:ff:f0:85:f7:3c:78:95:78:68:46:e2:ac:d3:
2e:04:67:03:85:17:6c:1c:7b:f1:87:07:90:f3:de:
72:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:03:41:C6:F0:AE:78:C6:64:3A:9D:EF:ED:98:B8:E9:F1:6B:B4:FD
X509v3 Authority Key Identifier:
keyid:2B:3E:E4:4E:A9:CB:5B:81:29:6B:B6:7D:F0:F5:46:F8:AA:C8:A4:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4F00/3DA69016135711EBA23DA714C4F9AE02/Kz7kTqnLW4Epa7Z98PVG-KrIpLQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:ec:05:0d:55:86:2d:0d:54:6a:25:f8:8a:6c:e0:58:14:2e:
dd:09:b9:84:b4:15:42:24:39:4f:0b:fc:e2:5c:83:ae:01:2c:
42:57:d9:ba:21:c3:6c:0b:c8:28:d6:88:57:9f:0f:e1:46:cf:
08:5f:20:a7:ec:f9:d5:49:ba:f9:98:cb:af:47:1b:23:ae:95:
c8:1f:bd:d5:1e:91:bf:9d:d4:1d:bb:0a:36:76:36:99:a0:55:
d5:f5:f4:93:35:0f:02:a7:6f:51:28:d3:25:51:0f:db:4d:1d:
bd:e4:4e:c1:a5:d6:10:2d:9d:70:8b:98:dd:80:3a:08:42:db:
87:84:28:d7:71:c8:08:e6:11:1d:f3:cf:63:f4:ab:2b:70:01:
c3:aa:93:fd:4a:7b:49:fc:fa:f3:bb:87:cc:c2:b7:64:1b:cf:
87:a3:ea:ff:9b:e8:3d:08:7c:2f:b8:07:97:91:4d:e9:34:97:
ff:43:0c:21:39:e3:3d:30:dd:b3:9f:fd:c6:40:cb:89:99:c5:
9e:b8:d8:1e:e1:79:b4:c1:24:66:3e:76:bd:6c:67:5e:17:77:
a2:34:48:56:c3:a1:22:8d:ec:c2:5c:67:3f:d7:a5:73:05:88:
b7:fd:90:90:de:3c:0c:0d:ad:24:a3:f6:a2:c2:c8:2a:1c:56:
2e:ec:80:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:24:39 2026 by rpki-client