This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
File: KoE65dYVKWBF2z4sQsuPzaxq0gw.mft (raw, json)
Hash identifier: t3eA3OE8vjLmSSgUt02n75i1IiqHzAHgjR0yePMn5zM=
Subject key identifier: 08:3A:3D:C4:4A:41:7D:45:81:FB:D8:CB:B2:46:C3:1D:73:7F:79:7E
Authority key identifier: 2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C
Certificate issuer: /CN=A9193BF8/serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C
Certificate serial: 0207
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
Manifest number: 0203
Signing time: Sat 17 Jan 2026 01:35:44 +0000
Manifest this update: Sat 17 Jan 2026 01:35:44 +0000
Manifest next update: Sat 24 Jan 2026 01:35:44 +0000
Files and hashes: 1: KoE65dYVKWBF2z4sQsuPzaxq0gw.crl (hash: 8yJjfEVyyjgkvgvq9mlZpLD1rylefT44UakSJT5yFcE=)
2: B8F3C5B4E01811ED8385DA62C4F9AE02.roa (hash: KmbLnAg6ov5pbSc4GHHtI4bgompHpB3w8fab5eJbYog=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl
rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 01:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193BF8, serialNumber=2A813AE5D615296045DB3E2C42CB8FCDAC6AD20C
Validity
Not Before: Jan 17 01:35:44 2026 GMT
Not After : Jan 24 01:35:44 2026 GMT
Subject: CN=696ae770-6528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:c2:5f:87:5c:e8:1d:f2:77:14:6b:2a:6c:
56:da:9a:3c:6a:77:58:ed:68:a5:fa:df:a0:c8:5b:
e1:99:d3:a3:cd:e4:53:bb:30:da:3f:85:e1:91:da:
57:3f:e7:0f:ca:8d:c4:5d:69:b7:74:af:74:1d:23:
d3:2d:64:3a:e4:4d:b4:21:a8:bf:b0:df:4b:1d:b4:
fb:ff:0e:de:b3:1f:fc:e1:31:df:3f:c3:14:aa:55:
b1:65:e5:88:83:f6:f0:0a:65:14:f0:62:30:20:dd:
09:69:b6:8f:7b:9f:97:9a:b0:1e:01:25:33:de:c4:
12:65:1c:25:e5:ba:21:81:51:c5:1b:a1:2b:a4:d2:
8d:99:5b:46:82:1f:b9:24:05:38:16:8e:6b:87:77:
5f:c7:62:db:bb:35:d4:6c:0c:d9:3e:77:5d:5a:0b:
82:c6:ce:0c:97:99:f8:38:69:d8:bc:04:ca:b2:06:
aa:da:f0:ea:af:6f:02:0d:b9:a8:bf:f9:19:26:19:
06:b7:39:a1:2f:a7:16:8e:22:43:bf:52:bd:3d:53:
b1:fd:79:d8:81:08:db:1a:e3:9e:60:2e:23:6b:f2:
b8:ea:5f:09:ae:52:5a:bc:a5:c3:04:26:95:90:ac:
98:48:2d:65:59:f7:2c:0e:de:09:a8:e4:5a:7f:7f:
d6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3A:3D:C4:4A:41:7D:45:81:FB:D8:CB:B2:46:C3:1D:73:7F:79:7E
X509v3 Authority Key Identifier:
keyid:2A:81:3A:E5:D6:15:29:60:45:DB:3E:2C:42:CB:8F:CD:AC:6A:D2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KoE65dYVKWBF2z4sQsuPzaxq0gw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/A22BD158E01511EDB1666961C4F9AE02/KoE65dYVKWBF2z4sQsuPzaxq0gw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:54:eb:36:30:d0:67:de:46:8d:6c:86:4b:4a:85:d4:65:7c:
2d:69:4d:c3:5b:81:e6:33:b3:3d:ae:84:bf:9a:75:89:d2:79:
d4:52:40:78:ed:78:7c:7e:a7:59:a1:ca:b1:b0:4b:dc:0b:e5:
9f:d8:aa:e7:16:0b:4c:c7:e7:56:4d:ce:1d:42:b9:7c:c5:74:
c5:a6:2a:0d:94:1b:bc:2e:5e:42:3d:c1:ed:b5:2f:27:0e:03:
f6:75:49:2f:6d:27:37:4e:f4:21:70:25:a2:04:3c:a9:61:95:
9e:69:58:65:1f:9c:cb:23:50:ed:e3:26:eb:91:d9:13:83:f2:
b3:54:5b:a7:f2:ef:ae:1d:df:e1:1b:bd:44:5a:41:0a:70:d4:
19:88:94:ae:14:dc:e8:16:10:fd:5e:1e:b4:26:26:52:cc:be:
4f:f3:2b:8d:58:a0:dc:81:5f:f4:39:67:57:71:dc:b3:ce:94:
e9:56:5d:5e:45:8b:57:60:4b:35:4c:f8:6a:c2:35:78:ac:d3:
51:2c:67:b1:b1:64:ec:0e:76:84:bb:11:a1:64:d4:4c:bd:52:
df:73:de:a1:a7:2e:9d:bb:db:52:08:14:02:2c:d6:18:d1:5c:
8b:bd:ed:95:b9:33:42:3e:cf:95:25:2c:e5:29:03:63:dd:42:
99:50:08:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:17:25 2026 by rpki-client