This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft
File: mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft (raw, json)
Hash identifier: HOMLDrhNOqdcDtbfkqqOgJ2w3XfhhFkwVXO32l5ywHU=
Subject key identifier: 17:E4:33:54:8A:30:B2:E1:4C:CB:8A:CA:E1:0F:4F:A7:9E:78:95:89
Authority key identifier: 99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50
Certificate issuer: /CN=A9130F4B/serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50
Certificate serial: 10C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft
Manifest number: 1087
Signing time: Sat 24 Jan 2026 17:07:02 +0000
Manifest this update: Sat 24 Jan 2026 17:07:01 +0000
Manifest next update: Sat 31 Jan 2026 17:07:01 +0000
Files and hashes: 1: mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl (hash: /0krF/6jMIUjnzh2Z91CPSO31LNXpu7tRxXrGwwuYeA=)
2: 2E680D2AC99911F0BDA2F55CC4F9AE02.roa (hash: EiMOxmgDdeQS71DiadCvwBaFB8K5LkJbRgnGcwVdsHc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl
rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4296 (0x10c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130F4B, serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50
Validity
Not Before: Jan 24 17:07:01 2026 GMT
Not After : Jan 31 17:07:01 2026 GMT
Subject: CN=6974fc36-7fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:41:b5:89:b4:bb:ed:77:21:95:4e:e0:f5:
10:f1:89:3b:4e:80:be:7a:55:a4:d7:cf:58:90:94:
74:38:bd:29:c7:f0:49:c6:74:91:f0:86:55:0f:42:
fc:b2:81:35:7d:d4:46:ec:76:53:1e:3e:14:f8:13:
5c:75:7a:bc:6e:98:b6:d1:11:8a:2c:f3:9d:35:1e:
d7:05:b9:4b:f7:a3:c7:60:df:fc:a5:ab:96:2e:99:
89:60:d9:51:05:29:fb:03:26:39:7d:93:73:ba:90:
f2:18:bb:05:ea:db:0b:f4:76:c2:2b:e8:67:e1:fa:
1c:3d:10:f7:41:2b:eb:02:01:9e:a9:f6:71:f5:30:
5e:25:6a:1d:c9:f3:85:54:fd:1e:ba:46:f9:c8:f3:
16:df:63:1e:71:a1:c3:b0:0e:25:75:43:3a:f9:0e:
69:78:f3:6b:a4:c6:d2:37:48:cf:8d:7b:8f:10:3c:
a8:f8:57:67:cb:62:0f:76:a5:11:39:27:9a:3a:ac:
b7:ce:f9:7a:6b:0b:46:16:f7:63:50:36:31:f5:b0:
28:79:a4:72:91:db:ed:1b:d9:7b:a1:69:54:95:c9:
ec:b5:99:fe:61:80:44:32:e8:3d:b1:e6:f8:ce:30:
f7:a4:72:6b:00:38:c2:3d:00:0e:15:58:8b:ba:d5:
46:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E4:33:54:8A:30:B2:E1:4C:CB:8A:CA:E1:0F:4F:A7:9E:78:95:89
X509v3 Authority Key Identifier:
keyid:99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:cc:42:51:28:e1:79:b1:25:47:dd:82:14:64:30:80:09:54:
e2:c0:26:4d:63:c9:b7:c1:ad:a2:f1:85:f0:fb:06:66:22:c6:
aa:67:77:3f:2a:cd:52:ec:d1:ae:3a:58:cd:1b:2a:01:d7:8a:
57:03:3f:3b:5b:24:66:ee:81:ad:67:e5:58:ab:d2:a5:ca:2a:
bb:e0:1b:1d:ae:5c:a3:7c:45:4a:6b:1e:e2:f4:42:db:50:7e:
13:54:78:ca:ab:c0:29:cb:5a:43:88:02:84:74:56:ab:bf:bb:
69:22:63:e0:06:66:45:0c:a3:59:c7:c3:37:d0:0d:c7:ec:8a:
86:a5:4e:85:31:20:af:18:af:c9:56:bc:d9:e3:34:92:79:c7:
ae:27:69:c8:ea:5d:4c:14:cf:2e:0d:a8:e6:21:a7:79:aa:d2:
6e:6d:f1:9d:9b:00:7d:b1:5e:04:aa:99:44:fb:1b:c1:ec:30:
40:b7:34:2d:c1:38:4d:0d:5d:ff:91:68:d2:ef:82:2f:64:e0:
ad:2e:01:58:07:49:0c:ef:fc:e5:84:5d:77:ed:00:60:33:c6:
f1:a5:dc:78:58:33:82:56:79:92:4d:80:d2:21:77:09:3c:8e:
7c:35:1a:66:3b:00:81:9d:4c:85:34:d7:22:0f:f4:8c:01:61:
60:2d:ff:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:40 2026 by rpki-client