This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
File: m-KS59FtTo6BYWnDtQLr5O9FwWM.mft (raw, json)
Hash identifier: 6K70PTyAfby8j1tBG/aFyZw5pGHRs9YR1N0ZyU731tA=
Subject key identifier: C1:42:56:F0:F4:93:64:C1:3B:39:B4:19:F7:80:61:1D:DD:DD:72:8B
Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63
Certificate issuer: /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163
Certificate serial: 0625
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
Manifest number: 061C
Signing time: Sat 24 Jan 2026 22:05:46 +0000
Manifest this update: Sat 24 Jan 2026 22:05:46 +0000
Manifest next update: Sat 31 Jan 2026 22:05:46 +0000
Files and hashes: 1: m-KS59FtTo6BYWnDtQLr5O9FwWM.crl (hash: z70hdwIXUFnRD6afxcFRkarLvBpZqQ87ClZBFSFiU1c=)
2: 101ED47C04A811F0B2A84883C4F9AE02.roa (hash: z+c9NTtbF9p/XObcI5GpVa5IpkCw1psUhuzIxI8+BQo=)
3: 034BA52C03AE11F0BDE1863DC4F9AE02.roa (hash: paq7kuxsaTc9AvIuFqICTToZpA0Jq132ZaYgNXR44RU=)
4: 6D353E4E97F711EFB3A27D59C4F9AE02.roa (hash: kw1Gr6Odxudr/FJkrtaM+rmCUMWq3czGnQtcOZ5fgIA=)
5: E3D745E4049C11F0A6EDC22CC4F9AE02.roa (hash: px/As8pki2KLZRbmQBjTDtiyZ+5fgWEf49lQhcXaLv8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl
rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1573 (0x625)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91897B3, serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163
Validity
Not Before: Jan 24 22:05:46 2026 GMT
Not After : Jan 31 22:05:46 2026 GMT
Subject: CN=6975423a-e377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bb:d1:af:3c:35:1d:d5:d3:f3:f3:83:35:cc:
0f:d8:c2:ae:42:3a:99:78:1a:94:6d:2e:1c:30:2a:
ab:c5:ec:d1:9e:5b:07:cc:80:30:65:d9:1d:d9:05:
70:b4:55:c1:c8:ce:f3:75:b6:6f:13:00:18:e1:16:
db:52:55:49:88:2b:2b:65:64:56:69:8c:55:a1:77:
0e:02:b1:87:20:42:80:35:d2:a3:76:c4:6d:39:ac:
f9:52:e1:2b:c9:db:a2:7a:c0:50:9d:f3:f3:2d:09:
66:86:b9:5b:07:b0:46:76:ca:9e:0a:11:2b:29:ad:
77:ca:87:56:42:c2:5c:07:e9:4d:8e:39:01:66:bd:
d4:ae:0a:18:71:c5:f8:53:44:0c:c0:d0:b2:54:3b:
e9:12:24:15:54:f3:bf:2d:04:3d:a8:cf:f7:85:39:
78:83:64:97:0d:73:ee:65:e1:a4:84:cb:f8:01:fb:
93:49:c8:2a:fc:67:12:db:05:ab:9b:df:a9:ab:ae:
bf:a7:78:17:c9:f6:09:67:3f:a3:ce:92:61:9c:0a:
de:ca:74:0a:b7:7f:98:18:c8:a9:1d:77:99:bf:3c:
eb:b5:3d:e9:ca:ea:69:7b:4e:11:c3:1c:7f:8a:9d:
18:93:df:12:cc:cc:71:ae:af:86:3d:9e:60:b3:48:
72:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:42:56:F0:F4:93:64:C1:3B:39:B4:19:F7:80:61:1D:DD:DD:72:8B
X509v3 Authority Key Identifier:
keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:6f:7d:2b:4a:bf:c1:fb:df:68:cd:c2:41:cf:ec:45:39:1b:
6d:96:2b:1d:61:10:2e:eb:77:af:ec:84:4d:a5:af:e2:2d:b8:
93:86:b9:69:3d:27:52:1c:6f:85:a5:d8:96:44:be:56:6f:88:
ea:da:af:ef:69:e6:93:14:14:94:26:a7:9e:c1:1d:bd:e9:a9:
f1:73:db:18:32:25:50:0f:8f:52:aa:a2:f2:63:37:3c:dd:6c:
9a:72:8b:e6:53:5d:b3:9d:54:86:4e:49:95:57:14:ef:64:37:
dd:5f:3b:51:46:91:d3:41:de:a1:dd:c5:24:13:53:a0:c6:a1:
28:b6:66:99:05:b2:c1:7b:bf:24:02:9d:7b:ad:71:a6:af:4f:
a8:43:dc:55:5b:ca:9e:ae:68:0f:a6:5b:55:07:0d:fa:c9:0f:
65:66:f4:b2:ef:84:aa:9d:1b:c4:4e:1c:bc:7b:12:43:56:f7:
77:e4:60:95:1c:6b:19:6e:d0:e4:33:0e:3b:c6:e9:45:be:c9:
0b:50:c3:fd:cf:44:78:00:b8:ab:56:20:fb:b2:d5:8b:5f:ea:
64:38:e4:20:27:2a:eb:96:ab:ff:6c:68:6a:f0:4c:2b:a1:81:
c7:0a:f5:4a:84:7e:02:84:f2:3f:9c:7a:3a:25:ed:f2:3b:b4:
a5:bc:f4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:40:59 2026 by rpki-client