This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
File: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft (raw, json)
Hash identifier: M9iYWT7w57N5MNCKsS5+HFLC6uM3FL6FsSIWUpDR6Qg=
Subject key identifier: 9C:15:20:33:41:C5:42:D2:54:0E:2F:63:65:40:8A:2C:F2:EE:57:84
Authority key identifier: 4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E
Certificate issuer: /CN=A9173C8A/serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E
Certificate serial: 1987
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
Manifest number: 1979
Signing time: Sat 24 Jan 2026 16:11:22 +0000
Manifest this update: Sat 24 Jan 2026 16:11:21 +0000
Manifest next update: Sat 31 Jan 2026 16:11:21 +0000
Files and hashes: 1: Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl (hash: xuVZN5YMN1vWeph8JCNLOsLxaM0x8VlqYj7DMuR58e8=)
2: 9FD5C8F48EFE11E88C6EBD37C4F9AE02.roa (hash: 70xXWkwNQOqL2UEtMJ5SkT0IFNV0TQ+TXG3w2RYSHvQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl
rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6535 (0x1987)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173C8A, serialNumber=4E2B20D953732B75EED12F129921A0B1B5EB158E
Validity
Not Before: Jan 24 16:11:21 2026 GMT
Not After : Jan 31 16:11:21 2026 GMT
Subject: CN=6974ef2a-53a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7b:01:37:5c:b5:52:e9:70:a5:c3:55:a3:58:
56:52:37:16:19:1a:af:d6:c1:54:f3:db:4a:10:52:
e1:ea:a3:8f:69:88:72:9c:03:4a:3a:5d:18:30:fa:
2f:db:0b:06:b5:7b:b4:03:12:d7:69:d3:a3:f0:9e:
3e:ba:c9:30:5c:44:b1:fb:1e:5d:68:22:f8:ab:74:
e6:66:e9:37:c4:2b:de:5e:b7:21:a0:fb:c8:57:03:
e8:61:ca:78:19:6b:c3:9b:f1:14:2d:2b:7d:87:f9:
bc:14:4f:2f:28:af:22:dc:0f:94:88:5d:49:ac:2f:
2f:22:dd:60:08:d9:0d:ad:41:54:00:7c:0e:4e:ad:
db:92:1b:2b:84:c5:63:d8:e9:59:fa:12:53:35:b1:
a8:bf:07:8e:ba:51:45:fe:bc:d0:00:04:18:ed:4a:
90:53:26:30:d8:9b:88:0a:fd:60:52:a9:ec:da:39:
72:b2:d3:7f:2f:cf:a5:12:f0:7c:0d:9d:a5:a5:d0:
2d:d3:6a:9f:82:4a:39:a2:dc:c4:59:eb:39:7a:96:
f1:68:1f:e2:76:04:bc:48:20:42:00:94:85:63:e0:
a7:0d:15:7b:dc:4a:42:2d:1f:a9:17:59:6f:c9:b1:
2d:92:42:49:6a:ab:18:ea:6f:8a:d6:29:03:ad:6e:
45:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:15:20:33:41:C5:42:D2:54:0E:2F:63:65:40:8A:2C:F2:EE:57:84
X509v3 Authority Key Identifier:
keyid:4E:2B:20:D9:53:73:2B:75:EE:D1:2F:12:99:21:A0:B1:B5:EB:15:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C8A/E7FFC5F486F711E78634EC7EC4F9AE02/Tisg2VNzK3Xu0S8SmSGgsbXrFY4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:12:9e:b4:72:e6:80:4f:6c:85:ad:8e:f1:de:3f:a3:d8:6e:
b7:ab:0e:36:ff:ae:cc:c1:25:ca:d1:3b:e5:d3:a5:4b:fe:9d:
16:48:89:b2:4a:1e:cd:98:f2:aa:00:3e:9a:1f:d6:23:2a:3b:
53:3f:fb:d7:a4:68:52:d3:4d:7c:47:3d:c1:75:37:6e:6b:be:
61:be:dd:76:0a:5a:91:47:a1:af:28:fb:a7:46:67:22:82:e8:
14:32:89:d7:d2:2c:e2:ca:70:a1:e8:d6:dc:e6:e3:9b:25:d2:
db:86:1b:c1:65:1f:89:84:78:c4:5f:d9:5e:d8:85:63:32:d5:
d9:1a:cf:e4:71:79:46:87:e0:e4:2a:d3:2d:63:df:3a:e3:82:
e6:b5:df:dd:7d:53:aa:ba:6e:a5:6b:33:18:23:2f:89:c5:e4:
02:60:29:43:18:8d:3d:85:62:53:8b:ee:7e:7d:bc:4f:09:4d:
65:41:e1:1c:50:a8:34:88:b7:d1:0f:b7:b1:af:9b:77:c1:59:
4c:0b:49:e4:bd:bd:4a:d2:8e:c9:b6:fc:f5:04:f3:f2:c8:a1:
cf:ee:41:0e:36:32:f1:18:8a:f9:d9:97:19:0b:fd:2f:51:0e:
33:d9:8c:2a:5f:3a:04:8f:0b:4a:b2:ed:28:ba:a7:5e:12:a7:
d3:36:3b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:47:35 2026 by rpki-client