This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
File: TLC5W0vcIzFPKD73OalqfGWMCmw.mft (raw, json)
Hash identifier: LuFohKNuTifa1SYa4vOorjNhHRI2PTyC7QUf/VB7Upg=
Subject key identifier: 75:E9:FC:60:09:23:BA:F9:34:5A:C1:5A:24:62:5A:39:35:28:C0:16
Authority key identifier: 4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C
Certificate issuer: /CN=A911E660/serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C
Certificate serial: C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
Manifest number: C1
Signing time: Sun 25 Jan 2026 05:06:58 +0000
Manifest this update: Sun 25 Jan 2026 05:06:57 +0000
Manifest next update: Sun 01 Feb 2026 05:06:57 +0000
Files and hashes: 1: TLC5W0vcIzFPKD73OalqfGWMCmw.crl (hash: zKa+PKIJ3nkB+yNux2BsGC4UYkA9RtVcm/nIthpnMPg=)
2: 4F39607ED24311EF919B6D12C4F9AE02.roa (hash: JjJCce1zF9qiD7rlQJmvV1gpbHE3mN8ttiQOSid+Fl4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl
rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:06:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194 (0xc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E660, serialNumber=4CB0B95B4BDC23314F283EF739A96A7C658C0A6C
Validity
Not Before: Jan 25 05:06:57 2026 GMT
Not After : Feb 1 05:06:57 2026 GMT
Subject: CN=6975a4f1-d72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9a:32:32:34:bc:19:39:77:3e:49:3b:2f:58:
fa:d8:32:e2:45:61:eb:74:83:c8:76:08:c3:d6:a1:
91:98:65:d4:0d:9c:1a:f0:71:5e:66:ae:5e:9e:a7:
d6:54:c4:2c:f8:3d:f2:b0:1d:a9:ef:95:34:5a:62:
df:35:c3:5f:e8:46:7d:0a:d9:96:90:1d:95:ca:92:
0a:08:1a:50:e3:9a:d7:d1:5d:88:ee:ea:46:14:d9:
8e:2f:d8:2f:e4:96:04:2e:d1:37:7d:cb:66:f4:af:
b0:ef:73:1d:dc:c8:7e:9e:e9:92:09:7c:28:88:f7:
f1:f8:75:7f:be:29:a4:1a:dc:d0:0b:0e:21:8c:6b:
22:09:d1:f1:76:70:47:8d:87:99:2f:69:cf:b1:5e:
d2:4f:b6:90:6f:a4:cf:99:03:ae:5a:ec:b9:2a:d4:
65:c3:4e:6a:23:9a:0c:c6:39:d4:7e:de:87:cb:33:
88:6e:7d:a9:89:89:36:bd:94:a6:72:fa:30:67:6b:
9b:f9:e3:3e:32:22:25:8b:1c:4b:ac:5c:e0:fa:f7:
0a:e2:2b:07:c4:53:e7:43:ec:99:84:9a:60:ce:d1:
af:fc:5d:9d:1f:a4:ef:5d:65:71:c4:ab:05:e1:1b:
29:c1:30:8d:63:a7:12:5c:e3:af:35:e4:00:b0:5f:
eb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E9:FC:60:09:23:BA:F9:34:5A:C1:5A:24:62:5A:39:35:28:C0:16
X509v3 Authority Key Identifier:
keyid:4C:B0:B9:5B:4B:DC:23:31:4F:28:3E:F7:39:A9:6A:7C:65:8C:0A:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TLC5W0vcIzFPKD73OalqfGWMCmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/01C52A30D24311EF88C5BC11C4F9AE02/TLC5W0vcIzFPKD73OalqfGWMCmw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ca:64:94:a4:32:28:64:c9:66:48:df:ef:07:29:b0:98:a4:
93:27:74:56:10:2c:55:e6:48:4a:6f:2d:ab:12:b7:fa:f2:0e:
56:18:d6:20:28:fe:3e:d1:f2:6f:b8:e6:86:c5:a3:52:17:03:
33:62:34:4e:3d:c0:f9:ba:c0:5d:73:d3:fa:96:a8:cf:ad:b5:
bc:3a:78:aa:10:0b:01:4a:e1:d8:24:62:cf:b6:f2:01:78:f5:
de:c0:c8:3f:85:7a:81:58:b3:9c:c9:07:75:c3:6c:07:61:cf:
28:6b:5a:77:b7:7d:42:c1:26:d4:d6:70:f0:70:93:72:d5:39:
64:56:21:6c:50:f9:6a:dd:02:76:06:d9:66:da:d9:fd:49:b4:
05:b4:18:db:56:cf:25:09:97:68:f8:50:29:9e:07:ca:b7:bb:
61:12:6e:21:60:b4:59:1b:7d:77:a2:a5:50:cc:52:5b:aa:b8:
82:34:76:53:83:bb:ed:cc:8c:bf:e1:24:f2:a2:f3:d9:3d:4c:
77:d2:47:5f:b6:b3:2c:6f:ea:13:50:39:54:99:b0:b9:82:de:
52:e2:08:1e:f0:5e:89:96:a5:1b:b8:47:14:25:61:6c:b1:5a:
2a:ff:f9:f5:1e:aa:d8:54:31:17:d1:9d:72:16:1d:ae:e1:af:
58:d4:f8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:13:15 2026 by rpki-client