This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft
File: Tcfii1RvKgtTjozfgy2aofN8yOQ.mft (raw, json)
Hash identifier: bNpZ6qDMzrbxvNvqjQq9v7bbisCuijfC/aBumYd3QlQ=
Subject key identifier: 40:D0:56:3A:24:9F:88:7A:C0:2C:F7:25:F7:6A:62:00:37:9C:2D:DB
Authority key identifier: 4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4
Certificate issuer: /CN=A91423C1/serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft
Manifest number: F5
Signing time: Sun 25 Jan 2026 02:45:05 +0000
Manifest this update: Sun 25 Jan 2026 02:45:05 +0000
Manifest next update: Sun 01 Feb 2026 02:45:05 +0000
Files and hashes: 1: Tcfii1RvKgtTjozfgy2aofN8yOQ.crl (hash: JOYbzVJRKHtB/GDZEqhP1rLJ8ILJShDAGJWlTcBCdcI=)
2: 1C6D5ED2C51F11F08993E41BC4F9AE02.roa (hash: 7EhkbPjIH/G+uiXZAXkMPwbpWwLHgjbQohkBMQd0CUk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl
rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91423C1, serialNumber=4DC7E28B546F2A0B538E8CDF832D9AA1F37CC8E4
Validity
Not Before: Jan 25 02:45:05 2026 GMT
Not After : Feb 1 02:45:05 2026 GMT
Subject: CN=697583b1-6e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8d:82:47:50:a7:5a:e6:83:3e:09:c3:89:ad:
7c:a1:15:ba:3d:6a:4e:67:bf:ec:29:2c:33:95:e1:
64:f2:e2:47:cc:ba:cb:dd:40:ff:0b:c9:53:70:bf:
e8:3e:36:bf:e0:06:e9:d8:e1:ff:ba:61:54:5e:e0:
aa:67:49:15:62:27:d6:07:44:34:64:f6:08:9d:e9:
74:2c:cf:e2:a8:df:18:61:15:e6:3d:aa:e8:00:41:
6d:36:e1:b4:b5:01:e0:fa:2a:67:93:35:d1:f9:d1:
81:5b:35:e0:03:04:73:f0:3e:8f:7b:4a:ef:1b:b0:
82:f2:08:b5:d0:79:29:6e:9e:9b:06:97:fe:1f:7e:
bb:63:d2:df:a5:d1:0c:18:b9:3e:f5:87:45:fa:df:
85:42:be:f2:a5:a1:c6:5a:d1:da:9f:45:a9:f9:4a:
39:1b:da:68:ef:97:61:82:61:43:a9:c3:e7:23:6a:
46:c1:85:2f:e6:d8:95:ee:ed:9c:43:67:53:cd:d3:
e6:19:e9:d6:bf:24:b5:4d:95:ed:4e:44:6f:db:d7:
c0:30:33:eb:9d:d9:72:f2:be:6f:34:07:c6:f4:74:
82:c3:4c:86:f4:a4:ae:7b:e3:b5:7d:bd:55:eb:83:
2d:79:db:c7:be:f2:d0:53:08:0c:38:4f:78:44:6a:
83:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D0:56:3A:24:9F:88:7A:C0:2C:F7:25:F7:6A:62:00:37:9C:2D:DB
X509v3 Authority Key Identifier:
keyid:4D:C7:E2:8B:54:6F:2A:0B:53:8E:8C:DF:83:2D:9A:A1:F3:7C:C8:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tcfii1RvKgtTjozfgy2aofN8yOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/D0320EF8BF4F11EFBCF68944C4F9AE02/Tcfii1RvKgtTjozfgy2aofN8yOQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c1:ca:2e:33:5f:db:44:1b:bc:fd:71:7f:f0:68:85:33:30:
54:e7:1b:3c:c0:ea:f2:0a:7d:d8:73:3c:f2:14:98:a9:b4:a0:
6b:bb:8e:90:d1:be:75:d1:49:4c:f0:a6:3b:cb:93:8b:aa:21:
ba:b6:b8:ed:18:e5:f1:69:2e:fe:a9:e1:0d:8a:9e:2a:2c:2d:
38:5a:db:10:0a:d5:f1:0c:0c:10:c8:61:b6:c0:1b:e9:44:53:
36:57:06:cc:d3:48:94:a6:01:64:7e:4f:1d:3f:9f:62:4a:be:
be:fe:0c:ee:d7:18:46:50:e6:5a:4d:34:58:1c:b8:b7:96:57:
77:45:55:51:f2:d0:05:82:e7:06:19:54:6d:47:63:46:22:45:
6f:04:43:31:88:40:39:47:ae:54:76:96:46:ba:e2:bd:4a:1e:
a9:a2:8b:da:ef:1e:f9:50:7b:d1:f6:a5:24:c9:aa:33:af:cc:
07:d6:c0:0f:6e:b5:4c:5a:6e:fd:d4:c2:a7:0c:3a:0b:e1:ee:
20:4a:a7:ce:41:88:93:de:b2:e0:72:37:4b:23:74:a6:fb:65:
4b:49:ba:01:64:ab:85:68:3a:90:e3:8b:8f:f7:2e:76:e1:5f:
59:4e:36:ca:2a:b1:dc:ae:32:1d:1b:5a:a0:90:26:d4:8b:c1:
4a:6c:f5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:57:51 2026 by rpki-client