This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft
File: ThD-F0ftpqu7vywhMNtFVE5tMp8.mft (raw, json)
Hash identifier: qVBCMH7FqD8q422VSpiaB9dszBvPy3tl99zkyjnUQwM=
Subject key identifier: 7E:0A:88:6C:8A:C9:43:6D:85:A2:E3:8A:6E:1A:60:F3:EA:2F:8D:9D
Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F
Certificate issuer: /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F
Certificate serial: 1FD1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft
Manifest number: 1FA9
Signing time: Sat 24 Jan 2026 15:48:57 +0000
Manifest this update: Sat 24 Jan 2026 15:48:57 +0000
Manifest next update: Sat 31 Jan 2026 15:48:57 +0000
Files and hashes: 1: ThD-F0ftpqu7vywhMNtFVE5tMp8.crl (hash: FPjycGo+51oXu/s2CG2EovUS4U9uSWWI4ufqJgosAxI=)
2: 41733D483DAC11EE8D884D6AC4F9AE02.roa (hash: XynjUTKTYazCZAgnFarsz0z7XLq0CMLJDFwXu2DvFy0=)
3: BE82D1863DAC11EEB6C9226BC4F9AE02.roa (hash: dDmsnYnpk7eYJRQjeaKR7lmvE3DrcRr0DYnI4h6EWFU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl
rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8145 (0x1fd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D586, serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F
Validity
Not Before: Jan 24 15:48:57 2026 GMT
Not After : Jan 31 15:48:57 2026 GMT
Subject: CN=6974e9e9-e8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:6e:38:1e:35:89:fb:65:be:d3:be:8f:de:
ee:94:46:6f:f9:7a:93:d1:6a:1d:c4:32:bd:5d:91:
07:5b:09:93:d2:ff:01:e8:df:26:f1:20:69:fc:f1:
a1:f4:a4:75:8b:17:d2:17:b0:d1:5a:f2:50:6d:05:
d7:4c:f9:21:89:3c:39:fd:07:ff:d6:1f:16:be:07:
02:2e:63:d4:b0:ca:80:53:83:d1:2e:1b:a5:ea:82:
5f:e8:c7:e2:ba:6a:b4:0e:a9:70:7b:92:c6:dd:99:
d8:f4:b4:00:3e:10:5f:a1:77:64:82:a3:7f:ba:0e:
d9:4e:80:58:17:77:59:49:fd:86:45:a2:75:1a:44:
c5:b4:71:d7:f0:a6:dd:2b:c3:43:19:90:c5:dc:9c:
b6:22:db:8b:bf:78:bd:34:d0:c5:26:6d:d8:94:91:
f0:13:70:8e:6a:0f:9b:63:30:87:5b:9f:f7:45:82:
7e:68:09:75:81:5f:df:63:59:6f:12:b3:0e:92:e7:
99:fc:a2:96:82:6b:f6:cf:78:08:95:86:99:f1:19:
20:cc:de:cb:6b:44:53:8b:4e:14:e6:d8:a0:fb:75:
ff:87:e1:a9:51:47:7b:63:59:da:24:77:ed:31:c8:
d6:0b:7e:5d:88:fb:68:f4:e1:ea:54:a8:a7:8b:1e:
78:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0A:88:6C:8A:C9:43:6D:85:A2:E3:8A:6E:1A:60:F3:EA:2F:8D:9D
X509v3 Authority Key Identifier:
keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:38:e7:36:17:39:8f:0d:d8:14:c0:d2:e6:a2:9e:b0:80:2d:
9e:07:1e:cf:db:ec:ba:c1:2b:af:4b:59:c8:61:19:2c:8e:27:
23:5f:81:55:40:7a:14:d9:9d:60:7a:3c:38:86:40:b6:d9:4a:
25:1b:58:de:aa:15:90:83:44:1a:d9:6c:77:c2:8c:af:94:e6:
d8:f7:be:7e:34:ef:4e:a4:ae:50:52:4f:10:ed:06:24:cf:fe:
1f:6f:18:92:37:d9:78:fe:88:3d:ba:a4:c7:24:fa:61:74:06:
73:55:34:9c:85:12:39:a9:32:be:bd:e4:87:57:9c:24:68:cb:
06:d0:3d:e8:fc:a0:93:57:bd:14:d0:1f:69:eb:58:13:66:98:
fe:e3:e3:8f:9f:9e:ea:ca:07:db:8b:ff:0e:fb:0e:94:4e:64:
51:05:46:e5:6f:71:8b:98:79:18:bb:36:11:fb:ef:31:01:97:
e1:a2:d9:ef:14:0f:4b:9d:0f:66:de:fa:f2:ae:64:14:ff:5a:
ca:39:9c:5b:76:19:bf:15:58:c5:66:db:8d:5e:dc:b2:45:7b:
9e:6a:71:9c:be:e0:93:31:ba:6b:da:05:03:9e:3b:b2:bd:7c:
06:64:16:1a:1d:65:10:14:c8:84:d6:88:a8:fb:18:7d:24:91:
f2:3a:2c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:54:49 2026 by rpki-client