This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
File: TSeJUeK9itKFuUCo6p5X43lxHms.mft (raw, json)
Hash identifier: 2iLfBpETYSuyE0B4VCvnPhJTX2kmDw1Y4PC9uUgperU=
Subject key identifier: 1A:0E:8D:21:C0:10:FF:97:D3:A0:83:09:81:1E:6C:5F:F9:0E:3F:8D
Authority key identifier: 4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B
Certificate issuer: /CN=A91342C5/serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
Certificate serial: 0406
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
Manifest number: 0401
Signing time: Sat 24 Jan 2026 23:41:03 +0000
Manifest this update: Sat 24 Jan 2026 23:41:02 +0000
Manifest next update: Sat 31 Jan 2026 23:41:02 +0000
Files and hashes: 1: TSeJUeK9itKFuUCo6p5X43lxHms.crl (hash: ybAkjxEHRWCu6nXz/hVaRAwaKmSrNIWAUiZxU47h1xA=)
2: E8E194B8A5CC11EC85A86A1FC4F9AE02.roa (hash: ypQGr8fcGrxnVWfQ2RrFsZZ4R7tmsDgEITmj6bx0ScA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl
rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:41:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1030 (0x406)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91342C5, serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
Validity
Not Before: Jan 24 23:41:02 2026 GMT
Not After : Jan 31 23:41:02 2026 GMT
Subject: CN=6975588f-bad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1b:4b:ac:4e:66:01:40:2e:5a:dd:4a:93:c9:
b2:33:ed:05:78:4a:62:be:83:c5:dd:55:6e:a8:08:
be:5f:4b:bc:a6:32:6e:97:41:95:ff:28:de:44:04:
90:8f:bc:43:f3:35:d3:0c:98:d1:e1:ad:a9:7b:20:
36:fa:24:8b:1f:7d:0d:6d:1b:11:5d:10:45:cd:a7:
d1:b4:40:0c:8e:25:f3:90:8b:90:e1:66:e5:d5:52:
77:ad:c1:71:7b:d8:4b:5c:91:85:58:28:6e:ae:a8:
87:fa:57:a9:7e:29:cf:cd:84:97:05:c7:02:2e:5a:
6b:be:16:59:27:1d:3d:b5:24:f4:40:9e:36:04:f9:
02:14:16:1d:b6:eb:35:c3:0d:c8:b1:d4:22:10:c2:
fd:94:a5:25:ce:7b:ae:06:a2:05:8f:3b:88:e4:90:
a4:b1:81:e4:a1:9d:02:96:2f:04:66:0a:a5:f3:0a:
43:1f:a7:35:13:ed:58:a3:cb:21:c6:3e:63:15:47:
02:cf:cb:ea:fb:08:df:e0:5a:f0:6d:38:b6:e5:52:
35:47:b7:8a:ec:23:34:d1:0c:1b:78:d9:5c:76:32:
37:00:44:26:53:02:90:01:e2:5b:d7:19:b6:31:49:
bd:fb:5f:33:db:34:09:0f:ac:db:0f:b9:a4:e1:75:
1b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0E:8D:21:C0:10:FF:97:D3:A0:83:09:81:1E:6C:5F:F9:0E:3F:8D
X509v3 Authority Key Identifier:
keyid:4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:70:ed:05:10:6c:d3:15:a9:59:c1:16:9c:17:36:a3:3b:3a:
c6:a7:09:fb:f2:ca:d2:a9:db:29:db:fc:56:d3:89:16:5f:df:
53:aa:87:78:3b:a1:79:9a:64:4f:9e:a5:19:11:bb:fe:4f:ae:
5f:05:df:87:c3:da:54:5b:67:f1:49:fe:ff:a2:29:6f:4c:0b:
87:91:c0:10:ae:d4:e1:53:17:75:5f:f3:66:02:53:82:8e:f3:
fe:1e:0a:f3:94:bb:de:9e:ec:dc:85:9c:89:4c:f5:ab:82:31:
2a:7d:21:5e:08:97:58:d9:f6:ff:55:87:5a:60:25:df:4e:09:
4e:5c:36:4e:e0:08:d1:c8:e4:5c:a1:4e:a7:77:e7:a5:ae:77:
ce:d1:1b:b0:25:a3:c3:ee:83:60:71:c7:81:84:8b:b1:3f:eb:
13:c9:2e:b9:06:a3:4b:27:44:b0:1d:fc:86:03:0a:2b:4c:31:
7a:35:81:c4:78:42:2d:a5:b0:d0:ab:1a:89:89:1c:4a:87:70:
7f:f1:1f:35:a1:63:5b:bb:e8:e8:45:a3:c9:95:24:75:14:db:
2a:00:a9:74:c4:f8:6c:cb:f3:84:b9:f2:1c:b0:d9:94:0f:1c:
4c:3f:0a:4c:e9:33:51:fb:32:f8:99:5d:cf:7f:2a:7d:3d:74:
5e:0c:dd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:50:02 2026 by rpki-client