This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
File: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft (raw, json)
Hash identifier: 5YUIYdk8McDPqfU+CoaYaWef+a3oFgMrxS3NSCN/T08=
Subject key identifier: 14:DE:44:D5:D6:B1:7A:C7:76:00:9E:E4:CF:56:32:89:32:3B:A2:35
Authority key identifier: 90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7
Certificate issuer: /CN=A91F7935/serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
Certificate serial: 0412
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
Manifest number: 040D
Signing time: Sat 10 Jan 2026 23:37:16 +0000
Manifest this update: Sat 10 Jan 2026 23:37:16 +0000
Manifest next update: Sat 17 Jan 2026 23:37:16 +0000
Files and hashes: 1: kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl (hash: ros+HF4LUWgjsTFw6EA8AaerarmqmQO/a//X2n9LPUc=)
2: 76B3E9929B9811EC8CE35458C4F9AE02.roa (hash: kF/Sx9VKM2GJeYiTRnjckSKDrmqJfHAOVxg0ZWsOQqM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl
rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 23:37:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1042 (0x412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7935, serialNumber=90C6B68D16AE4392EDF0E90FE137380E3C4437E7
Validity
Not Before: Jan 10 23:37:16 2026 GMT
Not After : Jan 17 23:37:16 2026 GMT
Subject: CN=6962e2ac-c0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:e7:e2:ac:39:32:3c:db:03:d6:97:b6:51:
a2:16:e3:ee:0a:46:79:ec:bb:af:e5:51:3c:2f:62:
55:8d:3a:c9:e8:ea:f1:0f:f0:65:9f:b2:74:08:b7:
fa:da:bf:62:97:b4:3a:0c:78:1d:2e:99:64:d0:19:
68:14:2e:7a:e8:d2:84:13:14:f1:d6:1b:a2:9e:4f:
95:46:a3:60:27:f1:09:5f:93:60:6d:07:96:01:aa:
8e:c8:99:e9:77:4d:83:14:3a:51:b5:c3:6c:d2:b9:
e9:24:f0:cc:88:bd:28:3e:ca:38:7f:3e:5a:60:4d:
41:b7:40:65:8a:34:dd:40:a2:90:2a:19:c4:70:07:
c3:03:29:83:ca:f7:33:ed:87:ad:d1:35:81:06:0e:
59:1d:2f:63:c0:03:ed:b4:16:a1:ba:53:6d:15:10:
8d:13:3f:54:d2:cd:e3:ab:60:49:d5:4c:7f:f0:03:
43:9b:34:f3:c4:8c:f6:11:e1:a0:1e:51:7d:31:b3:
85:52:60:77:f9:00:8d:cf:b7:9d:b8:73:f0:18:39:
be:de:02:c7:97:ff:e3:f7:2b:6a:22:d8:62:f2:37:
7c:6e:fc:39:2f:1d:25:ac:50:ef:9e:7c:9e:5a:ec:
e9:d6:f9:ad:5b:d7:50:b9:87:d1:93:81:33:26:16:
a3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DE:44:D5:D6:B1:7A:C7:76:00:9E:E4:CF:56:32:89:32:3B:A2:35
X509v3 Authority Key Identifier:
keyid:90:C6:B6:8D:16:AE:43:92:ED:F0:E9:0F:E1:37:38:0E:3C:44:37:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7935/905A3A489B9511ECAE3F0C4FC4F9AE02/kMa2jRauQ5Lt8OkP4Tc4DjxEN-c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2f:a4:4e:c9:e3:74:c9:1d:9c:7b:26:a1:ec:d8:7e:5c:28:
97:b0:9e:68:0a:9e:0b:03:28:1f:cc:79:6d:75:6e:f9:51:6a:
59:85:2b:28:ca:17:a1:1e:e8:ec:e5:9d:69:80:d0:9f:bd:21:
dc:ee:d8:0f:6e:6e:08:39:ca:12:f5:3a:a7:70:25:4d:31:3e:
26:66:7f:3b:13:51:32:46:53:a3:87:6f:12:9b:4a:9e:7e:8a:
5d:e9:ee:cb:8f:9a:34:f7:45:9c:85:29:4c:da:47:b5:cd:fb:
f3:ef:a0:f2:7f:49:11:16:38:45:2b:6f:c3:9d:d5:bb:67:ac:
79:0d:84:60:70:c6:71:76:00:0c:00:47:b3:36:af:10:03:4f:
20:84:10:a1:a4:bb:dc:61:9f:e1:3d:81:d7:a5:0c:18:95:d7:
a5:54:35:62:54:67:25:cc:ee:91:62:e1:54:c3:2d:61:90:13:
52:e6:51:76:f8:1e:58:6e:4c:b1:74:5f:4a:e1:ea:c7:bb:bd:
cc:6c:fe:56:0c:c9:1f:74:be:87:3c:b5:06:f6:9f:c1:c2:a9:
15:df:3e:c6:bc:84:79:71:76:f2:19:e9:6b:72:7e:b6:7e:cf:
3c:41:ee:11:a2:17:47:5c:82:cf:c8:6a:c4:ad:84:05:88:48:
c6:a4:49:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:27:17 2026 by rpki-client