This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft
File: kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft (raw, json)
Hash identifier: Tdkq6DRKTX6XcGwva5cF4Ooh1u89bCy7AHzGbQI1Urc=
Subject key identifier: 2A:08:95:4B:36:B1:9A:E8:80:BB:00:A1:A6:FC:2E:01:4B:F7:0D:9F
Authority key identifier: 92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34
Certificate issuer: /CN=A91FDCFE/serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334
Certificate serial: 046D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft
Manifest number: 0461
Signing time: Sat 24 Jan 2026 23:22:52 +0000
Manifest this update: Sat 24 Jan 2026 23:22:52 +0000
Manifest next update: Sat 31 Jan 2026 23:22:52 +0000
Files and hashes: 1: kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl (hash: MxoiYGU5axg0Dkl0hWBWfdtiQitk26/Cs0aN1RZOanQ=)
2: 8AB7936E5FF111F092635949C4F9AE02.roa (hash: ZKGRhr8pcRlZGuDYruEwy7xDWFkv+Zae+rNW87nRb4Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl
rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:22:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1133 (0x46d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDCFE, serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334
Validity
Not Before: Jan 24 23:22:52 2026 GMT
Not After : Jan 31 23:22:52 2026 GMT
Subject: CN=6975544c-9a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:27:64:07:3e:b0:24:d8:d3:65:9e:7e:df:
b6:4a:28:be:d4:49:43:1d:18:52:4f:4f:55:64:09:
cb:4f:d2:34:a0:aa:f9:02:a2:3c:8e:b1:36:6d:3a:
22:5f:08:5a:db:36:a9:f8:c7:21:8c:17:71:b9:36:
ba:cc:f8:f5:bf:d2:ee:6a:1f:a8:6c:55:82:c5:b4:
38:d3:b3:81:5e:40:39:66:d2:b2:0a:69:78:08:c0:
9f:9e:47:a7:78:53:fd:29:70:18:a3:e6:73:b8:6c:
9a:23:b5:19:fc:21:00:26:eb:8e:7f:52:2f:71:26:
93:92:d1:ce:3f:9a:5a:36:18:94:c7:67:fb:8b:be:
a9:ce:fc:33:78:19:a3:7b:3e:64:6d:af:09:be:8e:
c4:78:e5:1b:c4:0f:65:f1:fe:74:98:f8:70:c4:af:
02:ea:3d:a0:d8:b5:2b:35:52:98:52:5a:1b:29:4e:
34:49:d0:45:23:12:5b:b6:2d:76:59:8d:e0:b9:f3:
14:21:31:68:81:00:8c:5e:bf:f4:c1:89:f7:9d:f1:
60:f7:0e:2e:d8:98:3e:e3:9a:50:bd:3b:65:32:ae:
c5:0a:b2:a2:f3:50:fc:84:a7:c0:9d:5d:bd:fd:aa:
22:a1:4b:42:ea:b3:70:95:84:b5:a3:b8:22:1b:ea:
61:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:08:95:4B:36:B1:9A:E8:80:BB:00:A1:A6:FC:2E:01:4B:F7:0D:9F
X509v3 Authority Key Identifier:
keyid:92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:bf:95:7b:2d:9f:4c:99:69:73:92:12:73:6c:6a:64:b9:bc:
19:bb:04:1d:78:59:30:31:bc:76:43:94:ed:76:5a:10:dc:fb:
fe:87:d8:04:a4:4c:b7:5c:bc:ba:b7:ce:96:34:73:9e:db:e5:
f5:0b:25:bf:d0:7f:97:8a:7b:d7:43:1a:8f:02:b0:fa:2d:ef:
04:41:42:37:32:47:75:73:57:a3:2d:c9:3b:c9:a2:d7:bd:ac:
50:f4:8f:eb:27:1f:ef:06:36:5e:81:4a:0a:1e:7c:64:f8:00:
f5:62:4f:7a:60:d1:7b:eb:b1:6d:a6:13:c6:19:5a:47:40:28:
e8:b9:87:09:d9:bb:21:d0:e3:9e:23:b5:8f:2d:95:23:c5:5e:
c0:6c:50:f6:34:bb:17:a1:64:fe:ab:2a:d4:68:c7:00:3e:95:
41:e5:ba:6c:a6:44:42:af:94:a6:0b:47:b7:3a:ed:b9:34:98:
23:7d:7b:52:ac:e1:00:92:4c:c1:f9:3f:cf:04:37:0e:ec:77:
3a:2c:30:da:ec:ab:44:7d:fb:cf:93:9b:fe:bb:77:32:c1:7c:
27:17:88:4e:7b:f8:29:9d:b3:e2:5f:ca:7a:32:08:c2:ae:aa:
8d:34:53:e9:17:78:6c:5c:27:a5:4b:8d:bd:30:15:a1:cf:bb:
ea:9c:54:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:00:58 2026 by rpki-client