This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
File: k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft (raw, json)
Hash identifier: 3TYK1QS1TyZnHiadzvWoAgesbQucU9eAx/c0qwBP210=
Subject key identifier: 96:C6:53:6E:D1:52:E0:80:88:E8:A6:9C:6C:4A:6A:B0:5A:56:E9:4A
Authority key identifier: 93:68:EA:49:4F:51:1E:20:C1:D5:F7:3D:D5:39:E3:D8:46:5B:DA:9C
Certificate issuer: /CN=A91410B7/serialNumber=9368EA494F511E20C1D5F73DD539E3D8465BDA9C
Certificate serial: 07F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
Manifest number: 07EE
Signing time: Sat 10 Jan 2026 20:31:19 +0000
Manifest this update: Sat 10 Jan 2026 20:31:19 +0000
Manifest next update: Sat 17 Jan 2026 20:31:19 +0000
Files and hashes: 1: k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl (hash: HxHoTJeV0lxk/kWXkgPNjwr6wY0AsxWN1qzL0QIOD3o=)
2: B097C8B013B111EB8864681BC4F9AE02.roa (hash: 9S4PdbQBnS1bjpFuDpIOJsT6W0eeeQu3f8/ulTYvG/g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl
rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 20:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2037 (0x7f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91410B7, serialNumber=9368EA494F511E20C1D5F73DD539E3D8465BDA9C
Validity
Not Before: Jan 10 20:31:19 2026 GMT
Not After : Jan 17 20:31:19 2026 GMT
Subject: CN=6962b717-c0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:96:41:c3:43:55:2b:cd:e8:dc:d9:13:08:19:
7d:ab:3c:e0:32:1b:55:53:bc:a8:0f:59:25:07:d6:
97:fa:7e:8c:8a:17:90:61:97:83:2e:e1:fd:4d:bf:
be:73:6f:14:8f:9e:b8:f7:8a:31:2f:ae:9b:89:dc:
42:8a:0b:40:0b:fc:31:c3:f2:6b:9b:49:82:a8:57:
2d:d6:cf:d2:fa:c6:33:37:d8:69:37:9a:a1:82:87:
2c:14:6d:05:d0:dc:57:31:fa:fc:e1:be:a5:18:b6:
19:b3:6a:a9:5f:83:bc:25:72:f7:9f:b5:5d:f6:96:
15:ee:d1:c1:c6:fb:f8:5d:41:b1:3a:a4:2d:f6:1f:
31:0c:63:9c:cb:0d:f9:ef:23:aa:f7:1d:01:31:34:
ac:f1:cc:b8:0a:0b:e3:cc:26:67:9b:0e:5d:f8:a8:
0d:71:57:d1:f5:1d:ef:4c:51:ea:8a:d0:54:33:57:
b1:f9:61:ea:f8:ba:ae:49:6e:f3:3e:22:d7:65:99:
28:4a:ef:42:0d:91:0c:9c:52:cb:96:68:5e:7f:94:
0b:37:16:16:98:e5:fb:79:54:97:23:44:77:b5:c7:
02:39:05:f5:60:cf:63:76:cc:82:5a:c7:4b:58:a4:
80:3a:13:1c:0d:c2:27:9a:e7:f2:73:38:72:db:88:
2e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C6:53:6E:D1:52:E0:80:88:E8:A6:9C:6C:4A:6A:B0:5A:56:E9:4A
X509v3 Authority Key Identifier:
keyid:93:68:EA:49:4F:51:1E:20:C1:D5:F7:3D:D5:39:E3:D8:46:5B:DA:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k2jqSU9RHiDB1fc91Tnj2EZb2pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410B7/75ABC9FC13AE11EBBC7C6815C4F9AE02/k2jqSU9RHiDB1fc91Tnj2EZb2pw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:98:46:a8:9e:89:24:bc:ae:d9:0c:25:08:45:02:85:51:a4:
c5:25:d4:8f:9f:3e:38:47:5f:95:ed:7c:3b:69:8c:6c:84:47:
0b:ad:d8:ba:38:a9:a2:b0:d8:9e:a5:23:c0:4e:c5:4b:f7:ad:
9e:b0:5a:60:fd:12:38:07:7a:5c:b8:b8:60:07:15:13:17:0d:
f0:ca:e8:d2:52:e3:31:ca:a5:4a:4e:20:07:ba:a2:3d:2f:a6:
a3:b1:3b:9a:f9:b3:1e:33:7f:f2:68:1f:72:9b:35:35:b7:3a:
15:d9:01:10:61:c2:2c:70:5a:99:a1:1c:ca:03:51:ca:fa:89:
e1:da:25:b3:cd:0e:22:f9:4c:e9:15:e6:88:69:b8:08:a9:45:
37:79:de:a6:6a:4f:f0:68:c2:8e:53:6e:54:a5:6e:fa:76:f5:
58:ca:71:07:c7:9d:5c:49:8b:3c:62:9d:d9:04:ed:1c:d2:2b:
9b:b5:d2:90:b3:a5:f6:ed:3d:97:4a:8c:35:f8:21:9c:b7:d9:
b3:be:9b:44:39:31:16:ca:2f:d2:92:f3:e8:92:84:dd:f5:a2:
e6:8f:2e:d5:2a:8e:0d:6c:90:c8:9e:89:f7:4c:9a:43:7c:70:
6c:09:4c:dd:a8:4c:1b:4e:26:77:49:1e:1d:03:85:94:6f:7b:
bc:ac:e9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 10:56:46 2026 by rpki-client