This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
File: tNQViTJWcWZLLGBPEt4EdX4uzNs.mft (raw, json)
Hash identifier: VobdN8N3dqKNU4Pea/93KMczTbWtyzapXjdaVlZK/zo=
Subject key identifier: 5D:2D:51:FB:9A:6F:05:9A:CC:42:66:5F:43:45:83:4F:B1:66:4A:77
Authority key identifier: B4:D4:15:89:32:56:71:66:4B:2C:60:4F:12:DE:04:75:7E:2E:CC:DB
Certificate issuer: /CN=A916432A/serialNumber=B4D41589325671664B2C604F12DE04757E2ECCDB
Certificate serial: 07E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
Manifest number: 07E0
Signing time: Sat 24 Jan 2026 20:35:09 +0000
Manifest this update: Sat 24 Jan 2026 20:35:08 +0000
Manifest next update: Sat 31 Jan 2026 20:35:08 +0000
Files and hashes: 1: tNQViTJWcWZLLGBPEt4EdX4uzNs.crl (hash: v1P0yJaBMn20p4DMJgXS9hTYssEbChWBT75kh5fHkiM=)
2: 67CD2004292211EB8A9B3D73C4F9AE02.roa (hash: X83AwO08SW3vRCw0yNKpvwsvj5tunYmyhfUy5EdEKA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.crl
rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:35:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2025 (0x7e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916432A, serialNumber=B4D41589325671664B2C604F12DE04757E2ECCDB
Validity
Not Before: Jan 24 20:35:08 2026 GMT
Not After : Jan 31 20:35:08 2026 GMT
Subject: CN=69752cfc-e529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:39:7b:ad:b3:30:ed:78:1b:15:05:35:25:f8:
cf:70:c0:ee:5e:c9:3a:84:d2:ba:c9:8d:3b:8d:d3:
23:02:cd:3a:c6:7c:a5:b8:be:a7:c4:5a:a6:ba:72:
7a:ec:a7:23:e0:c4:b8:98:bc:f5:cc:14:05:02:16:
ff:33:11:27:1b:2e:65:3d:6e:46:15:7a:02:10:54:
2e:02:2f:1d:e5:60:4f:b3:ee:2f:33:f2:22:d6:20:
d4:67:c6:61:2f:56:13:e7:19:98:12:42:e1:86:e7:
89:b2:f0:60:8a:69:54:f3:ae:09:77:58:96:3f:91:
03:5d:f1:b9:48:c2:f2:ae:fe:aa:e5:dc:3e:0c:3c:
d8:12:9b:fe:5f:48:11:38:9f:5c:9c:49:0b:ff:f8:
cd:e2:ac:75:91:c2:b6:63:1f:7a:c8:45:10:cd:86:
a6:29:e6:13:d4:75:1c:85:f2:dc:af:00:fa:a2:3d:
60:f6:a8:fd:3e:cc:4e:23:fe:ba:52:d3:d0:20:71:
62:8c:47:7b:4d:49:a9:6a:da:26:44:02:86:b1:13:
b5:35:60:5f:11:ca:ec:e9:6c:68:77:6a:7b:4b:71:
99:3a:c6:0d:00:65:4a:24:d4:22:40:ce:9b:d4:86:
fa:00:55:c5:76:a4:1f:7f:81:45:02:72:23:76:39:
06:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2D:51:FB:9A:6F:05:9A:CC:42:66:5F:43:45:83:4F:B1:66:4A:77
X509v3 Authority Key Identifier:
keyid:B4:D4:15:89:32:56:71:66:4B:2C:60:4F:12:DE:04:75:7E:2E:CC:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c3:af:66:6f:76:59:61:03:77:30:a2:cd:42:f9:e8:19:ea:
2c:c7:a9:73:a7:f6:ef:67:e4:0a:55:ac:2d:42:81:95:c3:35:
74:02:8f:dd:b5:ba:88:99:6b:95:4a:61:36:ca:48:bd:2b:6b:
94:57:7d:01:dd:d3:71:23:60:97:58:5c:e2:c9:85:28:c6:2b:
0c:ee:6b:41:ab:e5:ca:cc:d4:96:0e:4c:1b:3a:a5:d3:be:1e:
7e:f1:c5:fb:21:b8:d3:0b:5d:55:81:9d:82:15:33:1c:67:d1:
5b:35:f4:74:38:06:37:92:73:7c:9f:68:97:bc:09:72:28:b0:
1a:ad:7f:7f:1e:a5:23:6a:25:34:08:d1:e5:db:dd:3f:0e:86:
15:30:a1:f3:57:2f:b0:3e:a3:f9:1f:98:37:48:ce:ed:c6:81:
bf:f2:94:9f:fe:23:14:82:41:f1:ca:80:2e:66:03:cf:41:bb:
1f:bb:c1:e8:31:9d:3d:68:a8:ee:9c:96:6d:a9:8a:c0:42:5a:
88:09:b6:8a:c7:72:4e:87:23:50:bf:cd:f3:49:c8:33:ee:4a:
ee:f0:70:55:9d:15:48:39:52:73:bf:b7:69:e7:11:4b:ef:86:
cd:24:42:91:8e:7f:81:b8:9b:11:fa:cb:c8:97:e4:e8:b2:35:
f7:37:4a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:46:36 2026 by rpki-client