This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
File: kzrI56xL07WCmJ_Mty_JJ9cWQks.mft (raw, json)
Hash identifier: dPoGAGOJrRUzZ2/gW5Tm2Vgtim+WHPMsDPAUtMPeXkk=
Subject key identifier: C8:4D:22:32:12:F4:0B:14:80:ED:B0:33:09:6D:69:D3:EF:E3:95:3E
Authority key identifier: 93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B
Certificate issuer: /CN=A91C79E1/serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B
Certificate serial: 088E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
Manifest number: 0888
Signing time: Thu 08 Jan 2026 20:00:30 +0000
Manifest this update: Thu 08 Jan 2026 20:00:30 +0000
Manifest next update: Thu 15 Jan 2026 20:00:30 +0000
Files and hashes: 1: kzrI56xL07WCmJ_Mty_JJ9cWQks.crl (hash: uLxmmc8cVsBxS7/E1xx/axtH9oBYFhDzEjxkPN30j3w=)
2: 26D0F9B82A6611ECB12FB439C4F9AE02.roa (hash: o8uKSFAZOoKiAV/aw+gEXp611EqrXFJMlAGF3VnwD9c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl
rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Jan 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2190 (0x88e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C79E1, serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B
Validity
Not Before: Jan 8 20:00:30 2026 GMT
Not After : Jan 15 20:00:30 2026 GMT
Subject: CN=69600cde-e173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:15:0d:28:c4:b7:e3:3f:f8:af:76:d2:ac:b5:
12:78:0b:c5:d8:28:69:cc:a6:3d:02:c6:bf:00:be:
ba:e2:26:e6:72:2a:61:e9:6d:67:8b:0d:10:7d:c8:
cc:53:86:58:a5:75:ac:36:fa:ca:51:00:9e:f7:75:
dc:f8:09:57:af:11:f7:bd:cc:44:1b:85:39:3f:be:
82:3f:47:fb:0e:9e:56:81:ef:8d:f0:0c:b0:c9:78:
d2:c4:31:a8:54:cd:d5:30:cd:5a:90:6b:62:08:d1:
d8:e5:de:fc:67:e5:37:61:d7:21:aa:df:b9:23:6a:
e6:e3:fb:75:dc:24:ca:a3:00:45:8c:54:16:00:51:
73:ae:42:71:3a:13:b2:b7:ed:71:e7:d0:cf:51:f1:
cf:e9:b2:f3:f6:d7:6e:bf:7c:e6:8c:3d:d7:2c:f0:
6d:a9:68:70:70:dd:f7:e8:56:26:0d:39:48:5c:81:
de:a6:3d:78:ac:a5:d5:0f:b4:15:23:56:ab:d7:24:
f3:79:ce:d1:18:7b:1a:3f:ca:a3:0e:95:83:ac:57:
6a:1f:c5:ff:ca:ef:5f:6d:99:0f:dd:6b:86:f0:27:
ae:1f:cc:35:03:33:2f:10:4a:48:54:c4:72:82:84:
4f:37:1b:80:b8:4e:d7:8c:c0:65:88:01:30:81:f0:
95:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4D:22:32:12:F4:0B:14:80:ED:B0:33:09:6D:69:D3:EF:E3:95:3E
X509v3 Authority Key Identifier:
keyid:93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1f:89:c9:19:47:a2:5d:df:6b:1d:d7:5e:bf:79:2a:1b:ab:
04:b5:fc:e0:16:ed:b3:43:41:99:0a:be:a5:5c:01:53:67:5a:
9d:b3:36:35:26:9e:59:9f:b9:ee:44:e0:41:69:8c:3e:d8:98:
37:e0:c8:e9:d1:d4:f0:cf:c0:4b:71:08:0c:3c:c8:3e:36:42:
ed:2c:c3:ad:0c:23:2b:96:02:af:94:4e:5c:7b:ff:db:be:f0:
a6:cf:3c:ac:c4:1a:1f:46:db:2f:b7:9f:c8:c3:02:3f:20:bd:
04:4e:30:e6:d8:9e:71:0f:5f:00:46:0f:7d:df:fd:9d:f8:7a:
ab:e0:93:00:c3:39:79:93:da:69:2e:fa:47:f2:46:7d:d8:7e:
fb:36:38:44:72:d1:21:a5:bb:4b:80:b3:dc:0b:40:2a:8d:f2:
6f:af:60:1c:77:0e:3a:16:5c:ad:c6:c6:db:f6:b2:d7:3b:27:
3b:9b:bd:53:99:3d:3f:0c:5c:f0:b3:05:68:15:f3:b0:0a:e6:
0e:a9:a6:06:ae:19:7b:94:03:42:ba:73:d5:f3:a9:78:18:3c:
23:f7:75:52:fb:19:53:f1:3d:d1:eb:7c:ac:b3:d2:e8:dc:47:
cb:60:ec:bb:0f:f3:53:25:9b:fc:07:f9:d8:22:b9:30:99:b2:
a9:13:93:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 15:57:55 2026 by rpki-client