This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
File: Tky0uRUee64RK-xTWcMclVgO4DE.mft (raw, json)
Hash identifier: eUJGH1cgeYOOwi0zdqbjC0Ge+pU0D84rLRF9QQfIZ/s=
Subject key identifier: B1:B9:7D:05:92:3A:8A:72:DE:FE:8A:70:87:59:98:CD:0E:1C:21:99
Authority key identifier: 4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31
Certificate issuer: /CN=A91609E6/serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031
Certificate serial: 04E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
Manifest number: 04DA
Signing time: Sat 24 Jan 2026 23:01:21 +0000
Manifest this update: Sat 24 Jan 2026 23:01:21 +0000
Manifest next update: Sat 31 Jan 2026 23:01:21 +0000
Files and hashes: 1: Tky0uRUee64RK-xTWcMclVgO4DE.crl (hash: zsE5cqr2JwqEGOj1IxlWic+REmczulduaTKhnADwZ4A=)
2: 7B0E744E994111F09D282143C4F9AE02.roa (hash: Cd7XZiHe1qVaHcpx6zxYlqRsLTSHLcGFR7Jjk7pxmLA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.crl
rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1248 (0x4e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609E6, serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031
Validity
Not Before: Jan 24 23:01:21 2026 GMT
Not After : Jan 31 23:01:21 2026 GMT
Subject: CN=69754f41-cebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:28:4f:fa:5a:a7:bc:4e:a1:e4:55:9b:02:89:
bc:ce:c4:21:ba:36:55:c5:ef:24:de:97:61:ac:87:
eb:4c:0a:d7:19:74:ca:f4:4e:98:33:f8:00:c9:48:
23:f0:d8:75:28:ac:a8:a6:b1:7b:7c:fe:1c:cc:44:
3b:ef:9d:e5:f4:30:59:54:c0:d5:ca:35:7f:f1:4e:
f2:64:2e:7e:e3:62:bf:16:31:72:49:b0:65:30:3e:
95:98:a0:51:e2:e9:40:bc:63:14:ed:d5:c4:ba:1d:
83:38:d2:a8:1f:26:50:c5:52:a9:13:ce:cb:45:ad:
48:79:d5:0f:37:5c:41:24:30:73:6b:d7:3e:b9:1a:
96:ca:b3:94:fb:81:89:b0:32:67:e8:1c:9c:ca:9e:
8b:77:35:a1:e9:1f:e1:8f:92:7a:3a:80:31:d1:e8:
35:f3:95:10:2f:82:a2:e9:77:ac:ac:4f:b2:83:59:
32:e1:8c:e8:3e:c0:9c:5a:a8:0b:07:a0:6f:64:38:
dc:88:fa:d1:fe:b0:73:e1:43:e1:98:0a:46:2c:ce:
b8:c9:1d:0c:e4:63:1c:df:17:3c:06:a0:c4:75:53:
67:77:cc:1a:c2:56:0d:52:6b:b7:f4:dc:4a:d0:c9:
b6:ee:d3:33:c3:4e:66:72:ee:4d:df:bb:55:dd:2c:
7d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B9:7D:05:92:3A:8A:72:DE:FE:8A:70:87:59:98:CD:0E:1C:21:99
X509v3 Authority Key Identifier:
keyid:4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:35:db:f8:8e:88:ee:ee:43:fd:78:26:fa:56:a0:3a:50:e8:
c7:54:50:2b:a4:ef:22:7b:e1:66:35:43:51:24:31:67:e6:07:
94:f1:bc:35:49:12:32:c3:e8:0b:9f:a2:ad:6d:96:64:ea:2f:
24:9e:4c:4e:e9:03:8b:9c:86:b6:07:d6:cf:ad:ab:b8:21:56:
99:3c:19:ce:a8:14:25:92:aa:65:92:9e:d5:11:57:38:dd:7c:
5b:66:9a:b3:5a:6e:7c:59:08:56:d2:d7:c0:80:24:ee:fb:71:
3b:cc:f0:f8:ed:d8:ab:8c:16:4c:e0:a1:d6:43:91:ae:6b:4b:
78:94:6a:b0:9b:88:6e:f0:0f:68:40:02:cf:99:e9:94:bf:2f:
1c:de:10:50:c6:f0:e1:d3:ed:32:6b:97:dd:69:df:d4:14:3b:
be:87:04:8c:12:32:70:f2:14:da:b6:2b:4d:47:04:f4:49:49:
a9:d6:05:ce:91:e6:0d:c3:18:c5:12:81:f6:65:49:f4:03:d7:
dd:48:a0:c6:a6:7f:13:2b:7c:a0:f6:cd:82:25:5e:a2:70:f4:
72:f5:1c:8d:af:44:49:51:91:c9:97:83:f9:34:be:7e:9d:1f:
9b:f8:8f:bf:99:8a:d1:84:27:bf:f7:3f:1f:6e:6d:00:27:fa:
9c:35:36:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:54:46 2026 by rpki-client