This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft
File: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft (raw, json)
Hash identifier: X3DdfpS8FKUaiy7sHueVcUDT33hHdrsAfq19maSaQ90=
Subject key identifier: C6:CE:3C:8C:C6:32:59:68:7B:D3:47:83:13:6A:EA:83:FD:28:79:31
Authority key identifier: B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94
Certificate issuer: /CN=A916988B/serialNumber=B58368616439C750D2C696643952ED4F15036594
Certificate serial: 06BB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft
Manifest number: 06BB
Signing time: Sat 24 Jan 2026 21:22:33 +0000
Manifest this update: Sat 24 Jan 2026 21:22:32 +0000
Manifest next update: Sat 31 Jan 2026 21:22:32 +0000
Files and hashes: 1: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl (hash: /3g+0vv+UHh1fdxSTvrdgHjLsDODVzeZeJ2z88LBmuo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl
rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:22:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1723 (0x6bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916988B, serialNumber=B58368616439C750D2C696643952ED4F15036594
Validity
Not Before: Jan 24 21:22:32 2026 GMT
Not After : Jan 31 21:22:32 2026 GMT
Subject: CN=69753818-926f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:0f:17:fc:bf:33:09:ce:7d:34:00:c4:8d:
b0:0e:d7:78:c2:dd:00:5b:cf:f2:ac:89:72:6c:c4:
80:f4:62:e7:55:21:8a:19:a1:1c:fc:1d:31:19:ed:
49:a0:6a:61:9a:34:2a:9c:8e:b5:36:28:46:ff:51:
b1:a9:cd:ee:1e:4f:ee:3a:c7:90:49:cf:b2:74:de:
a5:25:30:a1:fd:03:6b:03:a7:cd:01:14:06:c1:56:
16:29:40:f0:8e:86:90:43:4f:55:47:e1:c6:67:c0:
48:76:0b:a5:ca:c5:7b:ec:02:62:27:5b:b5:40:67:
5f:37:61:78:bb:5f:a1:24:86:c6:58:ff:67:a2:70:
0d:59:db:83:cc:7a:11:f8:ae:cb:d0:4b:4b:9b:31:
9c:ae:99:bb:64:06:47:96:63:b4:f0:5c:53:ad:64:
ea:78:18:85:3f:73:6f:fa:a2:1e:ac:7d:c1:54:9d:
cc:e3:fc:b5:48:ce:8c:10:0f:6f:47:de:da:e6:60:
cf:82:c9:70:f6:b1:aa:db:59:83:77:d4:8c:be:f5:
00:32:33:2c:29:ec:46:11:60:cd:28:2d:50:db:19:
e7:4b:53:f9:4d:d8:ae:45:4e:49:05:0a:0c:75:32:
4e:1b:0c:00:b0:44:04:bb:b7:68:5c:31:08:ae:7b:
ee:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CE:3C:8C:C6:32:59:68:7B:D3:47:83:13:6A:EA:83:FD:28:79:31
X509v3 Authority Key Identifier:
keyid:B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:84:dc:e3:90:2c:ad:21:ec:74:e4:2c:67:dd:81:56:6a:f5:
45:17:eb:35:55:d6:99:fa:83:05:99:3f:72:64:6b:8e:34:06:
f6:6a:3f:fb:71:36:c6:4d:14:a7:b0:6a:3f:6a:34:0d:a1:05:
fc:b0:32:06:10:f2:a2:a2:c6:95:34:3c:c3:2c:27:84:cb:96:
1c:0c:88:e3:e3:72:5b:df:a9:97:ad:b9:da:e0:4f:b5:d7:4a:
c2:00:22:b7:a8:35:62:1b:88:bc:81:6d:00:bc:dc:16:20:3d:
80:dc:8d:7d:15:ee:e7:46:10:98:a8:f3:02:26:20:4e:c2:a5:
1e:54:79:b8:a7:0d:46:0b:bb:53:ba:17:cc:ae:28:37:20:64:
0d:aa:19:bf:b2:bb:aa:74:81:bc:92:61:da:3e:af:1d:c9:fe:
51:34:1e:22:99:8c:96:31:a7:4d:1f:8b:54:fe:1d:83:6b:9e:
e8:96:4a:8b:9e:a2:ad:58:a9:12:4f:af:7c:9b:78:8f:69:c8:
d2:5e:90:1b:2f:7a:25:58:cf:f1:1e:74:80:ef:f4:e9:2e:28:
36:6e:58:c6:ea:80:e4:37:5d:81:ee:5f:fd:c3:b3:dc:b3:24:
83:0d:e5:7d:ff:e0:7f:47:7f:dc:e5:5e:4d:a4:15:98:96:b3:
81:2c:f1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:24:50 2026 by rpki-client