This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft
File: tUMZgoesmRJSAHhil7k2l_jySK4.mft (raw, json)
Hash identifier: jMzpiEFXhKQFEkKkbg5bOAljV0HNRab5bjzEK54Dv8c=
Subject key identifier: 50:A0:43:2F:37:8F:F0:19:88:9D:5D:B6:30:4B:63:21:7E:6D:3B:37
Authority key identifier: B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE
Certificate issuer: /CN=A9142DBC/serialNumber=B543198287AC99125200786297B93697F8F248AE
Certificate serial: 0CB5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft
Manifest number: 0CA8
Signing time: Sat 24 Jan 2026 18:02:26 +0000
Manifest this update: Sat 24 Jan 2026 18:02:26 +0000
Manifest next update: Sat 31 Jan 2026 18:02:26 +0000
Files and hashes: 1: tUMZgoesmRJSAHhil7k2l_jySK4.crl (hash: /b5yXN6T1muJmdWfQM3BVXK5qGyuu8oaMHMsSA5Ronc=)
2: DBE709060AA511EA86C8E31DC4F9AE02.roa (hash: YQqO3/GsQMAf9ewsQANIfWPP9RflccXF2o5PRECWCc4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl
rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3253 (0xcb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142DBC, serialNumber=B543198287AC99125200786297B93697F8F248AE
Validity
Not Before: Jan 24 18:02:26 2026 GMT
Not After : Jan 31 18:02:26 2026 GMT
Subject: CN=69750932-20e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:92:8e:6e:f2:3b:09:fc:b8:2d:be:4d:6c:0f:
b3:e5:6a:f2:c6:5c:3a:40:23:54:ea:55:16:e3:96:
6a:8c:ed:05:e9:13:df:a2:14:13:7b:76:54:bf:b8:
45:f8:f8:f6:e3:e3:30:fa:df:25:7b:bf:15:ea:7e:
a1:00:41:0b:7f:27:3f:85:ca:51:29:3c:3b:99:bc:
9f:6b:4a:18:e5:21:9b:a3:96:90:b1:09:c0:ae:27:
b2:11:60:90:79:42:ec:de:e9:f0:a9:24:35:e8:6e:
ae:04:bc:e3:ae:b5:d2:9f:7f:ea:2c:05:08:25:78:
a9:4f:66:5a:ca:be:86:9d:92:c8:60:68:dc:91:de:
b1:5b:dc:8e:8c:4d:00:54:13:64:06:da:15:c6:78:
4c:a8:d1:77:9a:c5:fa:79:fb:df:09:b9:91:79:b5:
e9:f1:4e:f7:d7:cb:d0:07:c0:20:43:53:c1:2e:88:
07:fd:3c:eb:88:32:67:8a:80:be:b7:20:9a:eb:a5:
51:87:52:42:3a:ab:87:0c:02:3e:ca:94:0a:b0:cd:
46:3d:a0:d5:3c:50:66:dc:7c:68:5f:1c:98:a9:ab:
92:4a:99:0b:7d:e9:f2:d0:26:63:8f:8c:10:0f:a2:
fe:f3:74:08:60:c1:1f:67:5a:e3:cf:c9:31:9c:ed:
79:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A0:43:2F:37:8F:F0:19:88:9D:5D:B6:30:4B:63:21:7E:6D:3B:37
X509v3 Authority Key Identifier:
keyid:B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e8:22:a7:e6:f7:49:ec:2a:6b:a1:36:4d:2c:c5:cb:0c:7b:
5e:f2:61:27:8d:6d:69:9e:bc:28:5e:e0:1a:6b:a3:f5:8b:84:
46:19:68:94:43:35:d7:66:7a:cd:f5:ef:07:16:de:ea:fc:a1:
25:c3:f3:0f:65:81:46:25:9d:ed:74:61:8d:fe:bf:ec:a6:2c:
ad:11:6a:df:a3:98:9c:cd:db:f5:81:e4:7f:fa:b7:ff:c5:32:
97:d0:e3:33:06:48:76:c0:0d:44:64:09:3d:2f:d7:3f:68:2f:
b8:35:4f:0e:ce:9e:9d:f5:35:4f:d9:6c:05:83:68:41:db:77:
f4:c3:c3:78:9b:e2:4a:d4:54:bc:ab:d0:0c:ea:90:1a:49:81:
d5:b6:1f:17:24:72:0b:9f:08:13:dc:d8:13:b5:10:9e:46:51:
ea:7e:84:e1:ad:e0:cb:4e:ca:c3:d0:a4:c8:97:e3:2e:2c:42:
7c:32:45:92:ad:41:42:9b:44:7e:ce:cc:40:2c:5c:fb:39:48:
0b:7b:4b:11:d4:45:c5:67:a1:34:90:5b:76:b2:87:db:06:5c:
66:e4:ee:10:b4:2d:44:b5:28:a6:19:bd:3a:37:ca:f7:ec:12:
ee:c7:f3:b9:41:f8:b3:0d:f4:73:7e:ff:bc:f5:85:70:2f:6a:
30:18:59:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDJEQkMxMTAvBgNVBAUTKEI1NDMxOTgyODdBQzk5MTI1MjAwNzg2Mjk3QjkzNjk3
RjhGMjQ4QUUwHhcNMjYwMTI0MTgwMjI2WhcNMjYwMTMxMTgwMjI2WjAYMRYwFAYD
VQQDDA02OTc1MDkzMi0yMGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArpKObvI7Cfy4Lb5NbA+z5Wryxlw6QCNU6lUW45ZqjO0F6RPfohQTe3ZUv7hF
+Pj24+Mw+t8le78V6n6hAEELfyc/hcpRKTw7mbyfa0oY5SGbo5aQsQnArieyEWCQ
eULs3unwqSQ16G6uBLzjrrXSn3/qLAUIJXipT2Zayr6GnZLIYGjckd6xW9yOjE0A
VBNkBtoVxnhMqNF3msX6efvfCbmRebXp8U7318vQB8AgQ1PBLogH/TzriDJnioC+
tyCa66VRh1JCOquHDAI+ypQKsM1GPaDVPFBm3HxoXxyYqauSSpkLfeny0CZjj4wQ
D6L+83QIYMEfZ1rjz8kxnO15MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCgQy83
j/AZiJ1dtjBLYyF+bTs3MB8GA1UdIwQYMBaAFLVDGYKHrJkSUgB4Ype5Npf48kiu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRCQy82OUZBMjU2ODBB
QTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21SSlNBSGhpbDdrMmxfanlT
SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RVTVpnb2VzbVJKU0FIaGlsN2sybF9qeVNLNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MkRCQy82OUZBMjU2ODBBQTQxMUVBOEM1QTgzMUJDNEY5QUUwMi90VU1aZ29lc21S
SlNBSGhpbDdrMmxfanlTSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCK6CKn5vdJ7CproTZNLMXLDHte8mEnjW1pnrwoXuAaa6P1i4RGGWiU
QzXXZnrN9e8HFt7q/KElw/MPZYFGJZ3tdGGN/r/spiytEWrfo5iczdv1geR/+rf/
xTKX0OMzBkh2wA1EZAk9L9c/aC+4NU8Ozp6d9TVP2WwFg2hB23f0w8N4m+JK1FS8
q9AM6pAaSYHVth8XJHILnwgT3NgTtRCeRlHqfoThreDLTsrD0KTIl+MuLEJ8MkWS
rUFCm0R+zsxALFz7OUgLe0sR1EXFZ6E0kFt2sofbBlxm5O4QtC1EtSimGb06N8r3
7BLux/O5QfizDfRzfv+89YVwL2owGFkb
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:38:49 2026 by rpki-client