This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
File: TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft (raw, json)
Hash identifier: PxeX+YasAjv4YXq1fYOGTfAGWY+RLfm4pKs/SWuol9M=
Subject key identifier: 98:51:1F:77:97:F4:DA:D6:40:C0:E4:96:A9:CA:DC:F4:4C:9B:7F:38
Authority key identifier: 4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7
Certificate issuer: /CN=A91716DE/serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7
Certificate serial: 0485
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
Manifest number: 047B
Signing time: Sat 24 Jan 2026 23:17:42 +0000
Manifest this update: Sat 24 Jan 2026 23:17:41 +0000
Manifest next update: Sat 31 Jan 2026 23:17:41 +0000
Files and hashes: 1: TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl (hash: cKOIdVMqhElHHfhgmLH+5Kn6UbyJJdSiEbZXDpGpKYs=)
2: 75FC6CC2753711EC9091CB62C4F9AE02.roa (hash: 09H6WJNzMO6bY1CShsLhlCFgsX+1B/xNo5NQ+Cdhlps=)
3: E2348176D54D11EF8A899250C4F9AE02.roa (hash: 306xxmMO0L8F4kDhDkLe1fwHAL2pRNtzpCEiuu3Fy6g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl
rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:17:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1157 (0x485)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91716DE, serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7
Validity
Not Before: Jan 24 23:17:41 2026 GMT
Not After : Jan 31 23:17:41 2026 GMT
Subject: CN=69755316-f3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:38:19:0b:65:f5:ab:d1:33:6d:c6:00:6e:
37:b3:bb:52:60:b6:3e:3a:c7:2d:c2:27:6f:75:87:
bf:d0:80:2d:68:e3:77:98:17:67:e6:4a:e3:c2:e0:
97:db:4d:45:a4:95:c9:cf:63:3d:57:08:49:ff:d8:
02:b4:a4:3d:38:86:09:41:b9:44:2f:ad:f5:fb:b5:
cf:20:5a:e0:92:01:cd:9f:ed:d0:2d:59:1b:41:39:
83:2f:47:59:c2:a1:e3:86:5a:bd:45:b0:a8:74:f7:
df:bf:45:6e:fe:99:1e:ec:2e:d5:7e:11:57:4c:2b:
b3:06:05:c3:57:c6:0f:06:d6:d0:db:c5:9d:90:f8:
73:03:fd:53:d9:e4:76:51:ee:3f:a6:bb:bc:cd:b2:
1b:76:33:05:85:d3:6a:40:d3:29:99:35:4a:f1:55:
07:4b:79:e6:ce:10:dd:b2:07:e6:c1:71:52:42:ec:
6b:12:5d:12:b5:8e:e6:99:14:a8:d6:06:d0:2e:b8:
15:7d:88:ee:ec:c2:55:bc:03:94:83:cf:17:ec:70:
48:e4:37:2a:07:a5:a0:a2:79:9b:db:20:5c:47:ba:
28:b8:bf:ae:2b:8e:03:c2:02:71:d9:93:cf:21:8d:
6b:c2:25:9c:10:86:b5:66:6f:05:42:55:78:74:cf:
bc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:51:1F:77:97:F4:DA:D6:40:C0:E4:96:A9:CA:DC:F4:4C:9B:7F:38
X509v3 Authority Key Identifier:
keyid:4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:5c:65:cb:ac:ba:31:ac:d7:cf:f7:31:33:52:c6:ec:e0:e7:
7c:74:77:45:01:11:13:46:d4:50:2e:a1:86:aa:d3:05:dc:f8:
68:b6:80:f0:be:98:12:f0:16:da:1d:a2:fd:be:44:aa:f1:b7:
41:33:86:bd:ac:2f:d5:0d:d7:78:91:40:bb:3f:8f:74:dc:a3:
15:88:76:8f:2e:15:f1:99:a2:5c:4b:cd:6c:ba:b8:65:32:40:
af:69:1d:c0:31:85:02:f7:d4:0f:0b:b1:02:df:32:29:18:6a:
42:2d:c5:11:88:e7:31:54:39:3a:9c:83:84:71:ea:fe:ce:53:
65:32:a5:da:a1:62:ad:93:f4:13:01:ae:69:30:90:13:bf:cc:
a0:0f:ed:c5:7d:f3:83:04:b9:5c:77:f1:53:71:fb:2e:b9:0d:
27:27:2e:7c:ac:8b:76:7b:08:99:ea:ce:30:3e:a2:63:8d:55:
68:9a:25:02:91:be:65:af:7e:38:66:67:92:56:47:30:1e:0d:
d3:9a:4f:f2:52:93:bf:6e:74:dc:e9:19:fc:39:d5:66:f9:64:
e1:41:23:4b:2b:ca:66:38:3d:aa:70:6f:1c:10:f2:a4:39:30:
11:fc:70:11:c1:b9:b8:55:fd:08:73:70:b4:19:91:da:d0:ab:
af:7d:7e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:29:05 2026 by rpki-client