This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
File: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft (raw, json)
Hash identifier: 1hTesVL1qzzNXdeJTvlQdseN+kYQm7guAaaXrW4F60w=
Subject key identifier: E3:24:A6:14:87:D1:2F:89:72:E1:11:72:C5:6F:0A:9B:03:7B:A9:33
Authority key identifier: 4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2
Certificate issuer: /CN=A91733A8/serialNumber=4E276FE94813A5D708AF866D61D621340FC051B2
Certificate serial: 0201
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
Manifest number: 0201
Signing time: Sat 24 Jan 2026 19:27:24 +0000
Manifest this update: Sat 24 Jan 2026 19:27:23 +0000
Manifest next update: Sat 31 Jan 2026 19:27:23 +0000
Files and hashes: 1: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl (hash: STUYY32OOx08EfYFs0Y/Z6zi4n4CCoE/SKGoRz9lze0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl
rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:27:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513 (0x201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91733A8, serialNumber=4E276FE94813A5D708AF866D61D621340FC051B2
Validity
Not Before: Jan 24 19:27:23 2026 GMT
Not After : Jan 31 19:27:23 2026 GMT
Subject: CN=69751d1c-dedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3b:c3:e6:40:e9:b5:f2:ea:87:10:db:69:54:
7d:dc:68:d5:22:11:3d:86:2c:3d:9d:cb:c4:d3:eb:
07:03:82:86:81:21:46:b4:e4:d7:4f:da:a5:f5:cb:
c3:9e:7c:77:9d:80:76:86:f0:d8:8c:b7:51:27:8c:
6d:b8:e6:6c:67:20:4c:e8:39:0b:1e:8b:ec:20:67:
16:e8:de:c7:94:12:34:f4:1c:18:03:47:7e:1a:a0:
31:8a:d0:18:25:06:25:e7:6b:67:3c:bd:57:5b:7f:
1a:e7:55:5d:98:69:72:74:e0:20:4c:49:88:84:36:
ea:9a:8f:eb:f4:7b:12:46:ef:28:e9:a2:c0:bc:13:
21:1b:c0:dc:ff:7a:7a:14:e7:eb:c9:73:49:e3:6e:
f8:18:8a:1c:61:22:81:0a:7d:85:73:8f:1b:f5:30:
40:b9:f4:98:73:96:4a:c6:00:a9:ec:1a:5d:22:24:
fc:d2:6a:6f:75:c6:64:8f:ec:77:17:0d:bd:62:84:
5c:ab:eb:ae:85:9b:6b:8f:c7:66:f4:f8:cf:93:3f:
fe:d2:be:df:90:ca:ac:64:ec:e0:df:c7:2e:36:d7:
8f:cd:f8:bd:ce:f6:a5:e1:34:fc:e1:e8:3d:04:d4:
81:65:e6:21:ce:89:93:5c:1f:d7:94:19:3e:92:78:
91:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:24:A6:14:87:D1:2F:89:72:E1:11:72:C5:6F:0A:9B:03:7B:A9:33
X509v3 Authority Key Identifier:
keyid:4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b1:40:f1:f8:77:b7:3e:56:9b:d1:da:e3:50:9b:9e:42:96:
3d:30:97:06:af:e3:3e:42:4f:5e:35:70:67:e6:94:5d:a7:d2:
50:af:c7:22:b2:9c:c2:3e:d7:34:44:a3:f0:20:93:e7:ea:78:
29:a0:f2:d6:68:bb:8b:b8:1c:9c:e2:31:87:18:4b:2a:b2:5e:
49:36:e2:78:ee:5e:b1:d0:12:29:e8:4f:32:75:aa:79:5a:74:
32:f6:93:ec:dc:b6:03:be:c7:c4:76:86:b0:34:0a:d5:ed:f9:
ba:09:91:ac:3e:a1:aa:22:e1:ec:31:f2:4d:4b:58:ba:e4:e8:
b4:bb:09:ca:3b:7a:40:08:0b:f4:22:fb:03:a5:2f:da:de:e2:
63:82:09:8d:09:7c:16:15:ad:01:32:f6:20:16:59:79:d6:d9:
80:5f:a7:05:64:07:a9:0b:ad:07:a6:02:d1:5f:28:5f:8f:48:
b8:03:1d:82:84:5f:0c:16:02:55:ec:45:de:3f:f1:88:40:f2:
a3:fb:57:0e:5f:94:e7:da:6d:a7:14:b0:bc:d7:b5:e0:5d:c9:
83:21:7f:fd:58:e5:d4:17:91:0d:e9:54:f0:ef:35:ef:a3:56:
37:fc:9c:65:2d:b1:03:b4:56:08:26:6b:c4:5a:bb:83:84:3d:
e0:45:37:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:47:39 2026 by rpki-client