This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
File: TfrxJZm8ip9x2mCrOSDgofQBWOU.mft (raw, json)
Hash identifier: dPHrZhafc08G2jpIUKvpepWcPwvIQFgIBiu7jI7qmkE=
Subject key identifier: FB:F9:E0:1B:BC:97:11:61:8C:F2:83:58:99:AA:DD:C4:AE:E2:41:AC
Authority key identifier: 4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5
Certificate issuer: /CN=A9186249/serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5
Certificate serial: 0170
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
Manifest number: 016C
Signing time: Sun 25 Jan 2026 03:15:01 +0000
Manifest this update: Sun 25 Jan 2026 03:15:00 +0000
Manifest next update: Sun 01 Feb 2026 03:15:00 +0000
Files and hashes: 1: TfrxJZm8ip9x2mCrOSDgofQBWOU.crl (hash: wVkpIbcrx3hNRZqtcOxGUgaIy/LwBFfmGjj+6Q+zEtQ=)
2: E7780BD6D17411EE87F7325DC4F9AE02.roa (hash: 2EzfaEZcvEqdfL3o4m+mh66hiNoNCrlQkH2IaWK10g8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl
rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368 (0x170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186249, serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5
Validity
Not Before: Jan 25 03:15:00 2026 GMT
Not After : Feb 1 03:15:00 2026 GMT
Subject: CN=69758ab4-5340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:94:d4:8f:ad:70:5a:8f:c0:e5:56:b0:3a:
24:c3:a9:71:15:6f:91:3e:f8:6a:47:10:c1:96:aa:
51:68:cf:21:a2:0c:40:b5:4f:d7:01:57:69:71:e0:
c1:f6:71:5c:86:77:6a:4a:5b:3c:e1:f7:7f:17:b6:
df:b1:88:6a:be:71:7d:cc:de:c1:9f:4f:98:d3:e9:
9f:86:32:f6:69:99:b5:70:57:7f:62:8e:ff:6d:fa:
85:7f:3c:ce:72:2a:07:27:8c:c2:1e:b6:47:70:fb:
30:55:49:7f:b5:ff:05:dc:6e:d3:05:54:9c:ee:65:
4f:69:04:9d:13:07:7b:87:2f:e1:b5:9e:90:bb:90:
ee:9b:11:ca:4b:01:77:20:ac:15:0d:a4:78:4d:72:
aa:ef:68:e2:5c:85:49:19:ef:1d:3d:88:cc:d0:6e:
01:d8:27:77:20:50:68:09:f4:88:d0:51:00:d2:19:
cf:92:e2:dc:b8:e4:0f:f0:cc:b1:81:53:7b:1b:d6:
3f:7d:97:4f:bb:3d:0f:f2:9c:90:ac:87:1a:e6:7d:
1d:ca:25:31:57:95:ef:c9:a8:18:1f:b9:c1:1c:7b:
bf:af:75:93:2c:07:52:c0:e2:6d:3d:b0:ae:64:e2:
c4:35:ef:b2:a7:49:1d:7e:4a:17:4f:85:7c:53:41:
da:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F9:E0:1B:BC:97:11:61:8C:F2:83:58:99:AA:DD:C4:AE:E2:41:AC
X509v3 Authority Key Identifier:
keyid:4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:1f:1f:95:7b:ce:ca:a6:6b:c2:25:58:b2:8b:17:47:d0:0f:
c4:49:6c:90:93:1d:ba:94:c9:8b:ec:a5:9c:19:44:32:b5:fe:
15:53:4d:84:92:07:34:f5:f8:1a:97:4f:8d:b8:5f:d3:b0:42:
59:93:d1:d3:84:54:0e:93:5b:18:15:62:b8:c3:82:07:43:90:
1f:7f:71:c2:f2:b8:3e:3f:ed:89:6a:f6:bf:62:97:24:07:94:
1c:ef:52:70:58:dc:a0:27:18:5b:ba:12:b4:c6:13:fb:75:fb:
a4:e1:6c:f8:a4:53:b7:7d:25:c6:8c:3c:1c:6f:17:83:54:34:
de:d6:34:a3:75:65:0d:5e:12:67:28:db:e8:ec:8c:7f:7e:8a:
36:6c:46:7b:c5:3b:95:8b:17:94:9b:a4:84:7c:89:81:da:be:
43:6e:26:aa:4c:4d:50:d5:66:45:5b:45:02:40:aa:75:15:1e:
e1:7a:94:6f:0e:80:72:f3:00:bd:27:15:c7:93:77:68:a8:d0:
e3:b6:15:15:cd:10:6b:e1:6d:d3:17:3b:b6:d2:49:cd:f3:72:
f1:8f:be:55:e8:ed:6f:d0:8f:21:e5:0a:7a:e9:86:fc:e8:c5:
e9:b0:88:10:d2:ba:bb:07:26:da:89:66:c8:eb:36:d1:8f:2c:
98:ce:54:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:28:33 2026 by rpki-client