This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
File: kcSXberT3od45cDc_yYDlxrC1Ns.mft (raw, json)
Hash identifier: tuXM0qgwHQRHOqRBQPsTbrNrNhtVjufmSM14HxRQ7ak=
Subject key identifier: 5A:1B:95:A9:35:82:A9:36:BC:62:4B:2B:4C:43:00:47:6E:E8:9D:2B
Authority key identifier: 91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB
Certificate issuer: /CN=A9123F84/serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB
Certificate serial: 0267
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
Manifest number: 0258
Signing time: Mon 09 Feb 2026 01:28:33 +0000
Manifest this update: Mon 09 Feb 2026 01:28:32 +0000
Manifest next update: Mon 16 Feb 2026 01:28:32 +0000
Files and hashes: 1: kcSXberT3od45cDc_yYDlxrC1Ns.crl (hash: XhjDO2OyKofzA2s3PsUZHpSScAUNyo1AwoL0TCRyv1M=)
2: 24FDC2446F3211EDA3DCF033C4F9AE02.roa (hash: bF9VY2BgbzFHTYog2mqnErYgbMHKat53WtoeKiEWwU0=)
3: 25DD10F26F3211EDA3DCF033C4F9AE02.roa (hash: Qm/uP0v0KOpxXquMmcS+mddexxWvKWu3VeqMUjZFEHw=)
4: 24783DA46F3211EDA3DCF033C4F9AE02.roa (hash: Wfvfr2TcXK8GaYBk6TcgT40LA+vft8v/fIkCfEZiAtI=)
5: D29F544CFCD711EEB654B271C4F9AE02.roa (hash: oLmM9IiHDteQZvnIijCD+XLj74Lvz+EsxXE5OHIoWDg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl
rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Feb 2026 01:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 615 (0x267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123F84, serialNumber=91C4976DEAD3DE8778E5C0DCFF2603971AC2D4DB
Validity
Not Before: Feb 9 01:28:32 2026 GMT
Not After : Feb 16 01:28:32 2026 GMT
Subject: CN=69893841-3308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:f2:46:32:15:0b:92:1d:c4:88:a3:bf:36:
98:8a:ca:c2:b6:92:36:30:39:1c:79:2c:f3:3f:25:
ea:bf:36:b7:4a:cc:81:0f:b5:7b:5e:25:b6:9e:4b:
f1:1f:ab:91:1e:6b:63:8c:fd:96:76:f3:0d:e3:c3:
2e:5c:2c:e7:95:3c:7d:5e:31:89:03:a2:31:40:19:
57:15:a8:5e:c9:92:1d:b9:5a:f8:4f:71:f5:31:14:
c4:91:88:9d:e8:69:15:5b:ca:80:bc:20:cd:0a:d7:
5a:40:0c:59:66:04:eb:cd:f4:85:ea:79:3b:22:ff:
c6:a7:83:cb:65:68:ab:34:d4:dd:05:e8:e7:5e:b2:
f3:7e:f7:5d:06:11:3c:dd:cd:ea:66:6a:24:cf:8b:
c5:c6:94:ba:12:f8:15:e5:b0:e2:15:e4:e5:a2:17:
2e:95:47:1e:57:23:80:64:1c:01:36:58:f3:2e:b4:
7e:ed:f3:7c:af:95:1a:63:fb:19:10:63:6e:81:95:
2c:86:7d:19:af:05:75:e8:8b:d9:26:f7:59:8c:c5:
42:ea:4b:d8:1c:89:94:3b:2c:af:70:6a:db:56:2f:
31:00:16:26:c3:c0:ec:de:3d:f5:5e:89:74:75:6b:
ca:e4:46:31:a1:4b:3b:ee:f4:57:da:83:2a:c2:45:
bc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1B:95:A9:35:82:A9:36:BC:62:4B:2B:4C:43:00:47:6E:E8:9D:2B
X509v3 Authority Key Identifier:
keyid:91:C4:97:6D:EA:D3:DE:87:78:E5:C0:DC:FF:26:03:97:1A:C2:D4:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcSXberT3od45cDc_yYDlxrC1Ns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F84/F43A3F046F2F11EDA84A6933C4F9AE02/kcSXberT3od45cDc_yYDlxrC1Ns.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:44:06:71:da:5b:10:12:20:a6:2d:37:e3:c9:15:8b:dd:65:
84:0d:38:11:a9:96:7c:69:e8:f0:e2:27:e6:33:45:0a:c6:56:
a3:a7:1a:af:b0:3a:4a:d1:8f:0f:84:a2:eb:44:2d:a8:f2:f3:
df:66:09:af:17:bd:6a:96:68:dd:fd:ad:e0:50:b7:77:ef:9e:
c8:f0:d2:7d:e5:33:68:e4:02:9d:e0:c8:84:7f:b3:67:c2:ad:
78:74:f8:ee:c9:ef:b8:64:b8:81:7f:e7:99:55:1d:93:11:61:
64:6d:ba:96:0e:68:5c:44:e6:02:7a:0a:28:a6:5a:dd:b5:fc:
a6:fd:87:f2:1a:50:6e:2b:d6:f4:1e:e7:cd:28:d7:88:32:b9:
06:f8:c4:f6:d7:f5:d5:8e:b9:ee:83:c0:c2:50:0e:15:6f:aa:
36:9b:03:f8:6c:9e:51:21:de:cf:48:e2:ad:13:1d:38:b0:ca:
57:e3:57:66:dc:9b:9c:84:3a:c2:d9:9a:be:5e:33:ad:ce:e5:
b3:56:86:77:dc:f3:63:28:d8:73:3d:06:83:39:9b:4d:8d:12:
85:8d:57:20:a4:99:01:8b:ef:64:27:00:9d:31:4f:52:b4:6a:
42:70:d2:61:b2:5e:9a:20:5a:52:3b:6e:39:83:56:ba:17:21:
69:07:df:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:34:03 2026 by rpki-client