This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft
File: _Kk1XBq-QE8_PPUZL9NLEloAvxs.mft (raw, json)
Hash identifier: edfLxM3J5nCje2CLMwCEonbFQV/It2RYwru6N48B2ZQ=
Subject key identifier: 7B:9D:C8:1E:8B:DF:D4:00:05:46:1A:D4:F3:97:C1:72:6F:C4:6D:67
Authority key identifier: FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B
Certificate issuer: /CN=A91ADD64/serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B
Certificate serial: 0139
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft
Manifest number: 0134
Signing time: Thu 01 Jan 2026 04:06:59 +0000
Manifest this update: Thu 01 Jan 2026 04:06:58 +0000
Manifest next update: Thu 08 Jan 2026 04:06:58 +0000
Files and hashes: 1: _Kk1XBq-QE8_PPUZL9NLEloAvxs.crl (hash: YvL6/+yuLlrVbA3LJ6HyNfOq2TXPjN6EBsnqfDK/qxw=)
2: 5740BDF8370111F094BF7862C4F9AE02.roa (hash: cSZNA9xFMjtULJTWhj5iUzlZdi4hLGYSAlp+qRF7bTw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl
rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Jan 2026 04:06:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADD64, serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B
Validity
Not Before: Jan 1 04:06:58 2026 GMT
Not After : Jan 8 04:06:58 2026 GMT
Subject: CN=6955f2e3-f3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:1a:53:53:15:da:25:88:86:ba:ee:33:77:
d1:88:59:be:9d:fe:a1:ee:e6:25:4c:4f:05:59:78:
16:da:d8:ad:ae:6f:5c:13:68:39:9b:90:9b:24:93:
2b:df:59:d1:91:2b:87:ab:e2:5a:81:01:e3:ea:64:
ae:27:11:65:be:fc:e7:63:a9:6e:ca:c1:1d:43:b9:
3e:7e:69:b3:d8:c9:ba:28:09:c9:d6:7a:b8:84:ab:
5f:f7:83:47:21:0d:53:71:d3:49:dc:a4:cf:6d:e7:
c6:a7:c0:03:4e:af:96:eb:48:e4:11:73:04:46:98:
2f:ee:b3:d6:c9:21:c1:68:3e:cf:b0:3f:4e:96:4b:
db:8f:89:87:11:07:a9:1a:d2:8e:e8:fc:ff:0d:13:
91:46:f2:26:fd:16:e8:69:b7:87:ec:da:af:01:d9:
a3:2d:ce:b2:91:6c:70:40:1f:4d:4f:35:76:89:87:
f7:28:56:2c:ef:2c:35:ba:08:4a:6b:1a:ae:0b:d9:
73:58:ac:26:b7:bc:a6:f1:f1:60:4f:01:5a:b9:92:
f4:5c:f4:99:1f:36:be:0c:50:1a:2f:7d:ca:2e:ed:
7e:19:76:5b:50:28:fb:73:0c:19:53:4d:00:2a:db:
1e:43:25:c9:e1:2e:72:c8:a2:90:e3:a2:ac:41:d1:
62:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9D:C8:1E:8B:DF:D4:00:05:46:1A:D4:F3:97:C1:72:6F:C4:6D:67
X509v3 Authority Key Identifier:
keyid:FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:17:36:ac:c9:4d:7c:ed:e4:65:08:94:35:54:f2:30:5e:78:
ac:94:0d:0c:21:c8:6e:6c:da:1e:40:0d:95:10:a3:2e:95:46:
a5:60:f7:c9:b1:c2:a6:03:f6:88:b0:85:ca:8e:e7:37:0c:87:
8d:4e:ed:f1:29:1a:27:d2:8a:f8:7b:f1:72:04:cb:9c:41:f6:
f3:35:a1:23:f0:e4:7b:8f:47:e8:a1:5f:c2:ff:cb:91:3d:4b:
70:b0:1c:5c:de:0d:84:d1:86:fc:f6:28:1d:27:b8:cf:9f:31:
94:14:31:ca:6d:41:33:b7:b7:5a:a9:7c:63:86:1c:91:ad:28:
c3:48:df:04:1c:71:39:08:b6:bf:42:99:ec:1d:0c:13:63:ba:
8d:10:d2:3a:4f:82:46:7e:13:22:0c:b4:87:22:da:ee:c5:b0:
18:f6:5d:6c:d7:37:79:c1:3f:07:4c:e8:6d:25:4f:7f:06:8d:
d3:7d:f6:3a:e8:4d:12:8d:de:2f:18:2d:16:d4:53:e9:91:7b:
44:55:2b:c3:a2:bb:44:f3:78:e3:ca:d4:47:1a:e8:c3:84:91:
4d:ef:b7:fd:0c:f6:ee:ff:9a:f6:0c:fc:32:8a:c3:92:5e:cb:
97:99:14:f2:64:66:d5:9f:e8:4f:20:ed:0c:0d:9a:65:23:14:
10:9b:90:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 12:31:24 2026 by rpki-client