This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft
File: 0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft (raw, json)
Hash identifier: StBecNcqrN8y75daH7ML5j5QgZcR+CPcyU/db5apMPs=
Subject key identifier: E5:61:73:31:E4:46:4E:00:BC:D8:BA:E7:42:1D:2C:5B:46:54:73:6C
Authority key identifier: D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9
Certificate issuer: /CN=A919608D/serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9
Certificate serial: 1140
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft
Manifest number: 1125
Signing time: Sat 24 Jan 2026 16:58:07 +0000
Manifest this update: Sat 24 Jan 2026 16:58:06 +0000
Manifest next update: Sat 31 Jan 2026 16:58:06 +0000
Files and hashes: 1: 0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl (hash: M/eDepIxEMaM+nmfhNspkmzlRhfYT2joehadsM648dI=)
2: 0D0B79E478F511EC83E56014C4F9AE02.roa (hash: tpKBG2KlXfT/Zt122B62y1RWSYubHmXeyHELnt2EtS4=)
3: 0E17B1AE78F511EC83E56014C4F9AE02.roa (hash: lCmO2moRnEyFjHn2T0RrSpJHfoRMsDo8flibJ/q1im8=)
4: 1ED5B13E30C111ECBB5A4116C4F9AE02.roa (hash: IHi+IFG70AY+pGCPcqa0F+qxqcr2LZY1LLXZfYW/jkU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl
rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:58:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4416 (0x1140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919608D, serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9
Validity
Not Before: Jan 24 16:58:06 2026 GMT
Not After : Jan 31 16:58:06 2026 GMT
Subject: CN=6974fa1e-8f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:95:d5:54:f5:d3:f4:3a:cc:4b:2c:5a:b2:
e2:10:a1:98:81:3c:ad:ff:7b:98:d1:a9:ec:71:f1:
f3:5c:29:3d:84:1b:fb:17:5f:e9:88:ac:e1:ed:1f:
eb:00:4b:f7:a4:cc:2e:d7:4a:68:e1:9a:2b:4e:db:
af:dd:17:4a:81:bb:6c:d9:7d:aa:41:7c:fc:6b:94:
3e:1a:e3:13:07:17:b9:a3:3f:1f:8d:9e:34:4f:ad:
b0:59:c2:ea:1b:7a:3f:51:6f:0e:1c:7e:08:86:55:
4d:48:f6:93:03:e8:28:68:ac:d3:49:c7:22:41:90:
66:95:cc:59:f3:8c:e4:9f:83:00:a2:f4:15:ce:00:
fa:aa:61:eb:dc:45:e0:d6:36:ff:19:d6:f9:b1:56:
67:36:b2:0d:f4:5e:01:08:00:39:48:b9:fd:88:f0:
d8:79:b8:00:13:f0:00:41:02:00:fa:92:d6:15:20:
35:69:e5:f4:22:35:d9:eb:a2:47:57:8b:8d:55:ff:
b8:d3:cf:ff:f4:7f:01:78:b9:1d:e7:17:e0:ab:10:
d6:d5:0a:8c:21:d6:0a:0f:0c:f5:6d:41:4b:77:46:
ba:64:d2:2b:1a:cd:fd:01:03:57:8f:a8:1b:6b:15:
71:0c:45:df:3c:4c:16:1d:d6:31:a2:0a:07:37:22:
64:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:61:73:31:E4:46:4E:00:BC:D8:BA:E7:42:1D:2C:5B:46:54:73:6C
X509v3 Authority Key Identifier:
keyid:D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:51:a3:31:27:d3:ab:ad:92:24:46:b2:52:fd:f3:28:3f:ae:
75:98:f8:4d:11:dc:57:dc:00:3e:cc:c5:b5:0a:b0:10:88:57:
45:e7:79:f1:34:b0:c2:da:92:78:69:de:06:41:ab:93:0b:1e:
3d:2f:22:1f:4d:50:43:63:49:74:25:be:d1:1f:85:a7:c1:67:
48:01:60:ee:96:d6:d6:ac:5d:90:03:25:41:2d:2c:2f:72:58:
97:3c:42:ec:27:65:d4:b9:0d:a7:45:e4:2b:fe:b0:55:4b:9c:
c9:ba:8b:f9:15:2f:9b:95:ee:1a:d4:5b:db:05:f7:c3:c8:ca:
5b:b6:37:48:cf:06:3a:a9:46:54:6f:5c:c8:b3:9a:6d:05:e7:
15:46:81:12:b9:b5:1f:98:58:17:ac:0e:d7:84:ad:62:dd:4b:
d4:f2:25:83:6f:38:96:3d:1e:8e:a8:f2:63:4c:92:fb:16:3f:
06:3c:98:0b:cb:9b:95:53:04:a3:9b:3f:f6:31:9c:ad:20:db:
87:d0:38:8c:4c:e8:ba:71:9f:4b:9e:c2:59:38:19:f4:fa:15:
0c:22:ce:88:62:31:23:53:01:f3:b8:54:38:b0:d5:ac:f5:4c:
b4:7c:33:5a:ad:11:01:47:02:90:1b:89:66:ba:63:1b:db:a6:
03:9e:33:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:38 2026 by rpki-client