This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft
File: kBqfnorkBi5SGbdlLY6f7n7FrjM.mft (raw, json)
Hash identifier: FDJKwPH2fcf/LR9e4NK2K+IaLGNVP1bpdKk2nFAZa5g=
Subject key identifier: D0:E3:AA:7E:EF:B4:FF:BE:4D:4C:AA:2E:74:DE:88:25:58:AF:0B:B0
Authority key identifier: 90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33
Certificate issuer: /CN=A91F2CE7/serialNumber=901A9F9E8AE4062E5219B7652D8E9FEE7EC5AE33
Certificate serial: 011C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft
Manifest number: 0118
Signing time: Tue 03 Feb 2026 04:34:59 +0000
Manifest this update: Tue 03 Feb 2026 04:34:58 +0000
Manifest next update: Tue 10 Feb 2026 04:34:58 +0000
Files and hashes: 1: kBqfnorkBi5SGbdlLY6f7n7FrjM.crl (hash: f+Gkm8EVZgBgD6drBxGbGL6kGx/kEF5/iO71DP52rX0=)
2: 4C738434ABD011F08EDDF110C4F9AE02.roa (hash: Lm3n9/beTQTSuADhNOkS7uaY8GPI4m4BtlZmRSSiRCI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.crl
rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Feb 2026 04:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2CE7, serialNumber=901A9F9E8AE4062E5219B7652D8E9FEE7EC5AE33
Validity
Not Before: Feb 3 04:34:58 2026 GMT
Not After : Feb 10 04:34:58 2026 GMT
Subject: CN=69817af3-0b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4c:39:01:da:29:fb:8a:4e:4e:7f:b1:76:02:
0d:0e:ac:99:a2:06:e0:63:bb:1e:53:b5:37:31:57:
09:47:4d:0d:7f:fe:fa:13:0a:b0:d6:62:51:fa:a8:
85:87:93:70:b8:1a:9c:fc:a6:68:22:9e:18:b4:1b:
71:1b:ee:e5:a5:46:b2:62:cf:d2:ed:54:30:cf:46:
89:df:1d:8b:53:97:1c:2b:02:1d:20:d3:dd:32:8b:
1b:6d:7c:7b:66:fd:2e:f2:09:7c:18:ca:ec:56:8e:
63:90:ef:4d:db:6f:e2:ef:7e:fe:77:84:b9:96:eb:
bd:f8:1b:f7:43:f7:c7:0d:60:80:57:e1:fd:ba:7f:
f7:b1:1b:f7:e2:e8:f7:a4:4f:f4:3b:82:e5:5a:7a:
85:54:25:04:8f:ca:30:f4:4c:19:c6:95:36:a0:ee:
62:15:a5:e3:cb:d8:3d:58:4c:03:5e:b0:e2:90:e8:
0d:dd:73:36:9f:6d:04:12:e7:af:7b:48:d1:04:e2:
26:a2:19:3c:f7:de:98:00:0b:b0:af:54:b8:ca:d8:
75:76:93:1f:cd:39:8a:8e:d1:81:f8:99:ba:f2:00:
5f:db:c8:5e:a3:f7:2f:1f:f5:e1:b1:a0:4f:a3:3d:
df:d5:7e:df:4c:70:65:4a:5a:c0:37:a6:f3:27:11:
7d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E3:AA:7E:EF:B4:FF:BE:4D:4C:AA:2E:74:DE:88:25:58:AF:0B:B0
X509v3 Authority Key Identifier:
keyid:90:1A:9F:9E:8A:E4:06:2E:52:19:B7:65:2D:8E:9F:EE:7E:C5:AE:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kBqfnorkBi5SGbdlLY6f7n7FrjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CE7/72F75B985ADD11EF812C923FC4F9AE02/kBqfnorkBi5SGbdlLY6f7n7FrjM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:76:d8:0d:dc:7a:06:f8:8d:97:4c:9d:48:36:47:25:d8:5e:
4a:cb:88:1b:15:b1:0f:70:21:65:57:0c:79:34:c2:fd:6a:59:
3b:40:94:eb:fd:b8:8b:3f:19:d0:1c:9e:70:6d:d5:44:60:29:
e2:3e:36:6d:5e:54:c8:8d:23:ee:c0:6f:83:06:23:42:eb:31:
50:a0:ea:44:7d:ff:d9:17:36:0e:d1:d4:67:6b:78:4d:ca:48:
b2:83:90:98:88:b3:80:73:a0:a7:24:89:c5:36:35:d7:6a:6c:
15:8f:ab:34:78:ca:a9:6f:af:2b:61:e0:7e:76:63:73:55:df:
37:77:ee:ec:d4:5d:bb:85:57:29:9b:b5:1b:7b:7a:fb:f5:9d:
56:5a:50:dc:58:ad:95:13:1b:21:fc:15:41:82:37:55:aa:1b:
8f:12:fd:8e:71:e2:8d:53:de:64:68:82:a9:be:50:49:91:ff:
19:fa:0a:90:76:bd:e2:ac:9c:29:7a:3d:36:22:38:28:be:a5:
25:26:c7:5d:c8:d8:61:87:23:13:56:85:ab:17:48:73:01:31:
2d:7e:6d:f2:13:26:2f:1e:07:34:90:b9:3a:cb:41:22:5c:31:
11:e7:b7:9c:81:07:ee:82:9b:4c:4f:d7:89:ed:4e:7e:27:a5:
cb:9b:41:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 15:11:20 2026 by rpki-client