This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
File: tgEhTJYoyfQh02c0s4HN7JKJR0g.mft (raw, json)
Hash identifier: NtzSGdS7IRlFo2fyVnJIbxI3nrNv4OJXKmNIaIv01Hw=
Subject key identifier: 0E:D0:A6:53:1E:71:1A:91:20:D8:C1:1B:86:A0:51:A3:8F:82:0A:E5
Authority key identifier: B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48
Certificate issuer: /CN=A917544F/serialNumber=B601214C9628C9F421D36734B381CDEC92894748
Certificate serial: 02CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
Manifest number: 02C1
Signing time: Sun 25 Jan 2026 00:35:26 +0000
Manifest this update: Sun 25 Jan 2026 00:35:25 +0000
Manifest next update: Sun 01 Feb 2026 00:35:25 +0000
Files and hashes: 1: tgEhTJYoyfQh02c0s4HN7JKJR0g.crl (hash: hIqn1OGCMKdITaTttl2si+ltAjWQUuJN3b7OQvjWL9Y=)
2: AF17D342228A11EDBBB7C135C4F9AE02.roa (hash: OtRh1Fk7TwGNS5hIMmXvDQHTwbUcw1dj3fxKTgn60lw=)
3: 2E0FE566659A11ED8981D533C4F9AE02.roa (hash: 9mymLiXCRjtr+TlJsGmOLAO7c7q7H4q9/GmJLFOK+K4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl
rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:35:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 715 (0x2cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917544F, serialNumber=B601214C9628C9F421D36734B381CDEC92894748
Validity
Not Before: Jan 25 00:35:25 2026 GMT
Not After : Feb 1 00:35:25 2026 GMT
Subject: CN=6975654e-119a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:df:af:97:d7:6d:ef:09:0f:0d:16:fb:9a:1a:
f5:1c:c0:85:08:f0:66:00:e8:7d:66:8f:fe:ab:86:
ed:8d:85:28:8b:26:ce:44:05:5c:fb:c4:f3:ff:02:
44:43:9f:06:a2:c3:bc:3b:32:10:6b:47:59:4e:ba:
35:6c:16:19:39:98:25:ac:b5:60:72:bf:0c:a2:40:
54:1d:80:d4:a0:b4:64:2a:5d:b2:41:c2:48:59:61:
45:ff:84:b9:b8:42:b2:b0:88:72:d7:5d:19:d6:9e:
d4:30:1d:b5:16:71:cd:af:b5:a0:a8:e2:c5:91:8d:
22:e1:7b:a3:00:aa:c2:14:11:48:7d:03:8b:96:72:
4f:88:bb:fc:52:9d:2e:50:82:6b:2c:33:78:ef:09:
02:d7:ad:51:7a:0e:69:e0:9b:81:a1:96:06:34:dd:
ca:fc:be:bc:0e:10:5b:6a:2e:b2:4c:b2:37:5a:ff:
e1:74:20:37:5d:00:1a:61:cc:03:82:1a:a4:99:ca:
82:20:31:1b:05:92:cf:7b:e3:31:6e:0d:cb:a1:e9:
f7:63:f3:6d:3c:4f:da:52:4d:b1:de:24:ec:b4:1b:
99:27:a2:5c:5d:e6:c7:9d:ef:8b:31:a2:d3:04:02:
69:b6:1e:27:d4:21:cb:59:86:c0:0a:3a:61:d6:da:
d7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D0:A6:53:1E:71:1A:91:20:D8:C1:1B:86:A0:51:A3:8F:82:0A:E5
X509v3 Authority Key Identifier:
keyid:B6:01:21:4C:96:28:C9:F4:21:D3:67:34:B3:81:CD:EC:92:89:47:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tgEhTJYoyfQh02c0s4HN7JKJR0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917544F/9012CA44228811ED89155E35C4F9AE02/tgEhTJYoyfQh02c0s4HN7JKJR0g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:a8:6a:c1:1b:ff:51:2f:a5:2a:5c:61:12:af:22:98:64:8a:
3c:64:7c:9d:72:18:25:d5:29:2d:96:ce:76:8b:7a:17:d1:f4:
11:da:ea:c1:4a:e9:b5:d3:26:af:77:b3:d1:cf:f2:41:24:d4:
92:49:9f:1d:82:28:35:dc:59:dc:0b:97:32:9f:24:78:3d:5a:
e3:61:b1:56:8e:78:ce:95:9c:06:68:d4:3c:f6:5b:24:97:5e:
25:c9:a7:f5:f2:9e:e8:38:6b:1a:67:2d:79:91:bb:d3:4d:21:
bd:cc:aa:0a:47:15:23:c6:ff:4f:83:4b:0b:76:4e:96:07:33:
bd:d3:60:3e:3b:50:21:cd:99:4a:6f:9a:6b:75:b1:53:cc:4a:
7d:9d:52:94:45:db:85:fd:12:98:d1:43:75:e4:d2:c6:6e:95:
78:ea:e4:80:b1:2e:04:f2:36:2d:3a:65:27:21:74:e3:e8:b7:
ee:22:74:ba:37:b9:bc:b9:65:ea:d1:f5:57:82:fc:3b:8e:24:
03:9e:e5:5a:00:7c:10:9a:c8:36:53:e3:3a:ba:2e:cc:15:5c:
df:00:ab:3c:8b:bb:77:19:e4:51:82:99:94:b5:31:29:77:70:
36:b6:4b:82:05:d8:14:5e:f7:ce:b3:a3:cf:b0:12:73:dc:d0:
10:06:70:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:50:46 2026 by rpki-client