This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft
File: TzFe71rLLtp6NynnnhNZkMAecHQ.mft (raw, json)
Hash identifier: kqxHqlSY1PqK5ZmihoV0dKPNsI5E7/KCDR2d+256fWo=
Subject key identifier: 38:89:C1:03:5A:2B:B2:65:AA:E6:1F:1D:61:99:62:0D:79:7B:55:31
Authority key identifier: 4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74
Certificate issuer: /CN=A91957C9/serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074
Certificate serial: 0E77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft
Manifest number: 0E6B
Signing time: Sat 06 Dec 2025 17:11:15 +0000
Manifest this update: Sat 06 Dec 2025 17:11:14 +0000
Manifest next update: Sat 13 Dec 2025 17:11:14 +0000
Files and hashes: 1: TzFe71rLLtp6NynnnhNZkMAecHQ.crl (hash: I5OavBvxL4W40caeGexB0GYgHqJG9+G0NvXIv0XbUiY=)
2: B55EC19EAC2B11E996F6E511C4F9AE02.roa (hash: Kmbnqjt+FsbQjmxP1orKor9zYnpCPWPxfhoKQqbWYu0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl
rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 17:11:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3703 (0xe77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91957C9, serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074
Validity
Not Before: Dec 6 17:11:14 2025 GMT
Not After : Dec 13 17:11:14 2025 GMT
Subject: CN=693463b3-5031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:14:9e:b8:c2:ca:41:43:a7:87:c9:5b:1c:
20:dd:47:af:4c:7f:e9:ab:56:ab:07:b2:f9:bc:02:
51:54:b2:70:60:b1:17:6b:88:e1:56:30:01:54:d8:
92:74:05:01:7a:6a:a6:b2:4f:dc:cc:09:89:fe:ce:
bc:a7:7c:40:33:2a:59:98:4b:d5:de:d2:90:9d:35:
89:e0:e4:e2:f3:a2:8d:11:af:69:e1:e2:3e:6c:93:
fa:97:5f:97:10:15:51:71:eb:d3:71:b3:59:21:28:
f4:f0:34:0a:a2:9e:57:80:d0:c3:8a:95:94:cd:a0:
01:42:8b:8a:9e:45:7c:7c:97:4f:78:29:6e:43:82:
d6:c8:b2:84:ae:23:9b:e5:69:31:b1:6b:25:3a:48:
66:5b:2f:9d:b2:aa:52:b3:38:35:a6:b0:3c:7d:ce:
6e:a9:1f:37:7d:0d:a7:cf:77:a9:a2:24:1c:9b:17:
ba:eb:a8:0e:af:27:b4:8a:b5:b4:e0:cc:ce:04:0a:
5f:7a:2c:5b:c4:ff:c8:54:ff:d6:7a:31:13:24:e0:
e6:8f:96:21:de:1f:f6:96:65:8a:33:cc:1e:c2:28:
b5:f4:8c:1c:30:89:93:0e:16:49:de:08:a8:fc:0c:
22:4e:c1:96:b8:9c:04:54:37:91:90:dc:14:7c:5f:
fc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:89:C1:03:5A:2B:B2:65:AA:E6:1F:1D:61:99:62:0D:79:7B:55:31
X509v3 Authority Key Identifier:
keyid:4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:51:2e:ec:87:95:05:be:35:e7:e1:1a:d5:79:c5:8e:f8:75:
c9:f4:e0:d0:4f:5d:01:0b:82:1f:30:f9:c8:63:c8:15:39:b4:
ae:c0:1a:a2:b6:d7:8f:14:c1:60:85:e4:46:78:a9:eb:57:31:
9b:86:9e:9e:b3:b4:c5:cd:e4:91:5d:09:d6:ec:1a:3a:cd:7f:
26:12:6e:dc:31:b0:3e:c2:f0:c1:aa:90:86:c7:fb:d6:f0:6e:
b1:d6:2c:d9:50:3d:da:b3:5a:42:26:f3:82:65:67:75:fa:8a:
98:3c:8a:d2:ad:d0:20:b5:8b:08:55:49:1c:0f:1b:63:90:ce:
0e:6c:c2:66:30:12:d1:02:80:c6:20:48:69:bd:d0:cc:6c:64:
0e:bd:72:ef:81:1e:61:31:2a:de:a3:59:e5:be:93:bd:dc:0e:
50:e2:33:f5:ec:4a:54:13:fe:bb:45:88:81:81:92:26:e3:76:
e2:e5:f1:d0:fe:a4:4b:cd:f7:92:50:5f:2d:3b:4c:96:2b:1b:
32:0c:ad:75:1f:2f:fb:d2:04:07:8c:ed:04:39:4d:78:f2:f8:
2f:e4:f9:ec:8b:5f:be:ec:43:10:4a:52:a1:a1:86:f8:69:a5:
88:37:35:4d:65:c5:37:62:78:d1:4d:91:0c:dc:c5:6e:71:9d:
1b:42:b7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:13:31 2025 by rpki-client