This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
File: kGjeIDMsvR2zmyN0NbF03nCZTwM.mft (raw, json)
Hash identifier: HKz9IZQlkB4bGBMHVy/ey7dpngc/kPFruJdo1aBJlAY=
Subject key identifier: EA:23:A9:19:9E:0E:9C:7B:C2:22:64:8C:D7:6F:60:CA:27:9B:7E:D6
Authority key identifier: 90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03
Certificate issuer: /CN=A91813E4/serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
Certificate serial: 0657
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
Manifest number: 064F
Signing time: Sat 10 Jan 2026 21:56:31 +0000
Manifest this update: Sat 10 Jan 2026 21:56:30 +0000
Manifest next update: Sat 17 Jan 2026 21:56:30 +0000
Files and hashes: 1: kGjeIDMsvR2zmyN0NbF03nCZTwM.crl (hash: yWpsx5PT1NyzzePVexPOUNMbzWsgDT+rMqA6XRs11ZY=)
2: 9609416A33D611EFB34E2C40C4F9AE02.roa (hash: yTRObH5HORzIjpQc8hjpzukLHQFJTBfO9ossVqi4KUU=)
3: 4DF7BBE0B9A411EB8621D13CC4F9AE02.roa (hash: 7ouwwfgk28NyLw1cYRcaWcwCb0VnFZR8rpTez7FwTos=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl
rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 21:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1623 (0x657)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91813E4, serialNumber=9068DE20332CBD1DB39B237435B174DE70994F03
Validity
Not Before: Jan 10 21:56:30 2026 GMT
Not After : Jan 17 21:56:30 2026 GMT
Subject: CN=6962cb0f-1a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:29:d0:f3:a1:b8:6d:94:d7:52:00:85:ab:
f7:cf:13:a4:bb:90:fe:11:63:90:e1:21:ab:02:ec:
13:c6:ca:d6:d2:bc:c9:05:cf:03:92:ff:85:c3:db:
9e:32:a6:b8:6c:91:cd:63:67:ba:41:1f:bd:fd:e0:
a1:49:39:73:20:f7:34:7c:0f:75:87:a8:d7:a4:3e:
17:c3:52:69:7f:9b:9a:e3:f0:bf:70:ac:9d:24:90:
18:c9:76:d8:4e:2a:d2:ff:8b:90:07:48:2f:38:c4:
00:a1:2e:67:3e:dc:4f:3d:02:c6:f8:0f:0a:8c:e0:
cd:0d:5a:c5:7e:5e:67:2c:7d:45:4c:b3:c3:ec:2f:
d5:30:3a:a6:ea:47:ed:23:3c:4c:6c:be:1f:99:04:
a3:1f:a1:e2:09:ef:a7:83:88:97:c2:9e:77:13:cf:
38:23:bf:83:1a:6c:46:b0:70:c9:8a:cd:da:1e:74:
91:29:7b:31:c6:98:d8:b1:98:ca:16:d8:bd:46:a8:
c6:64:27:8a:04:46:7f:5d:22:64:6c:df:3b:8d:a9:
c7:88:93:63:bd:53:7b:08:b1:95:6e:e5:65:a1:88:
c3:ac:75:84:0e:a0:97:05:64:e9:10:e4:63:7d:04:
3f:7d:50:4a:15:5c:7f:7f:58:a7:34:f9:21:2b:55:
fb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:23:A9:19:9E:0E:9C:7B:C2:22:64:8C:D7:6F:60:CA:27:9B:7E:D6
X509v3 Authority Key Identifier:
keyid:90:68:DE:20:33:2C:BD:1D:B3:9B:23:74:35:B1:74:DE:70:99:4F:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kGjeIDMsvR2zmyN0NbF03nCZTwM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813E4/27505882B9A211EB95C68839C4F9AE02/kGjeIDMsvR2zmyN0NbF03nCZTwM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:c1:f0:71:a0:89:e0:65:f5:de:9d:47:c4:50:48:07:97:c6:
3b:46:96:b2:a3:c6:fe:dc:a4:ac:4e:e7:30:5c:7e:30:14:16:
9b:07:79:fe:cf:1c:b5:5f:c8:6f:e5:d7:08:8a:dd:40:86:e9:
c0:d4:f5:1e:66:08:6c:d8:35:e8:ed:5d:e5:39:3c:90:eb:c3:
52:9d:97:93:ef:4e:93:9d:37:2d:7c:e6:98:a2:64:31:10:ac:
4d:88:4d:62:0b:49:16:5e:d7:a9:a7:74:50:31:94:3a:a3:74:
44:ed:c6:a9:ee:96:b4:e1:00:93:38:e4:06:43:ba:f1:cb:84:
ae:8f:31:86:97:ed:58:63:11:96:3e:38:3a:1a:84:99:82:82:
3c:d5:5a:4d:53:5b:93:9f:94:56:cf:e5:39:5b:40:3c:29:08:
a3:e0:54:82:cb:de:74:00:9c:2c:6b:73:36:ae:38:26:90:d0:
44:5d:d0:14:f8:1e:95:2a:2d:67:a1:90:cf:86:43:88:2e:4b:
29:5b:bd:02:83:d9:9d:fc:66:a2:11:84:e7:20:1b:00:44:15:
6a:a9:2f:2c:5d:2d:37:82:40:42:a7:46:af:3c:d9:6b:3a:38:
e4:5a:25:51:82:5f:f1:82:c8:0d:e0:d0:a1:d4:41:7f:6a:66:
a7:7e:d5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 19:57:46 2026 by rpki-client