This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
File: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft (raw, json)
Hash identifier: nDXz5fRwtGxl25RdnoGIcmqZjphavQ/5uqvAq3s3mgw=
Subject key identifier: F4:7B:10:53:91:61:37:A5:0B:1E:17:42:FC:2A:F1:B3:40:E3:4E:CA
Authority key identifier: 4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34
Certificate issuer: /CN=A91BDBD0/serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34
Certificate serial: 02C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
Manifest number: 02BC
Signing time: Sun 25 Jan 2026 00:37:04 +0000
Manifest this update: Sun 25 Jan 2026 00:37:03 +0000
Manifest next update: Sun 01 Feb 2026 00:37:03 +0000
Files and hashes: 1: TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl (hash: bHcM49ZYoNnTjE/PpfpW8OjtBsaXzrzW0vaIZ39W93A=)
2: 73BCF8A4641B11ED9E27D420C4F9AE02.roa (hash: N2Razv0UpqWwte3fSDYUfYnRdysKXHjWJIk1sn7vc0c=)
3: 36765016252911EDBEF5C985C4F9AE02.roa (hash: rKgSkodd0QWwnADIiLvo3yavSccs7jpZLRjO9DNzizg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl
rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 712 (0x2c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDBD0, serialNumber=4E6676B2BFC3DEA6CEA15355037A2334999B3C34
Validity
Not Before: Jan 25 00:37:03 2026 GMT
Not After : Feb 1 00:37:03 2026 GMT
Subject: CN=697565af-89b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f1:34:2f:ef:84:c2:cd:85:6f:b0:03:53:dc:
66:24:62:a3:45:2d:59:37:10:0a:a9:6a:c4:ec:83:
48:15:e1:6d:eb:78:3b:e2:1d:2c:81:c2:7b:34:82:
40:e0:4f:32:fa:72:28:fe:62:51:b7:ad:37:36:80:
d2:f2:7e:15:bd:4a:62:f9:f2:80:d4:13:02:c9:a9:
09:81:71:a0:dc:d1:e0:91:7e:72:b7:94:79:27:24:
4f:79:48:c2:7c:f3:96:00:1f:7b:ff:db:72:8a:3e:
50:5e:48:30:5b:eb:7f:48:6f:fa:83:aa:02:f0:eb:
c0:78:6a:68:39:61:1e:69:f6:55:ed:51:c4:ba:95:
ee:dc:6d:c0:5b:be:9b:bc:46:e0:4e:00:fb:94:bf:
dc:b1:8f:a7:12:28:e4:1a:cc:eb:7d:19:eb:e0:7f:
bd:25:6b:0e:3f:89:7c:d1:d6:9f:27:05:60:cf:39:
1e:9b:36:9b:cf:f4:94:b1:c4:36:82:6b:25:90:86:
06:b2:bf:e9:72:88:38:cf:2c:a7:c0:6a:24:c8:e4:
64:a6:35:a7:6c:80:02:8e:7f:91:75:d7:e3:a5:49:
12:c2:1b:86:04:90:c7:e0:a8:7f:e6:6c:e8:ed:75:
2b:78:e9:d1:17:8b:73:16:57:d6:52:d2:b5:b5:bd:
8d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7B:10:53:91:61:37:A5:0B:1E:17:42:FC:2A:F1:B3:40:E3:4E:CA
X509v3 Authority Key Identifier:
keyid:4E:66:76:B2:BF:C3:DE:A6:CE:A1:53:55:03:7A:23:34:99:9B:3C:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDBD0/6F501756250A11EDB5399979C4F9AE02/TmZ2sr_D3qbOoVNVA3ojNJmbPDQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:e0:86:58:90:f3:0d:a9:64:3b:23:40:98:34:5c:9d:64:bd:
6a:76:a1:4d:90:e3:06:66:09:08:33:12:f9:d9:54:41:b2:3e:
6e:8c:0c:d8:9b:02:6b:c9:82:62:a2:76:85:d4:6f:d2:07:64:
b9:07:fb:7c:8f:79:91:2c:1d:98:d6:f4:4f:fe:0c:f0:98:9c:
d5:22:ee:d7:88:10:7c:15:75:ad:4e:49:a5:81:58:f5:31:d1:
c1:e9:04:52:5b:c6:1d:de:d7:f6:22:56:f8:ea:48:2f:81:73:
38:d7:0a:d4:cd:bb:d7:b1:41:7f:d2:01:18:37:b0:3a:84:96:
33:a2:5e:37:33:95:2e:8d:cc:9d:17:7f:af:13:94:06:78:15:
f7:e2:b2:36:bb:98:97:8d:35:ea:b1:83:f6:ee:6b:16:bb:42:
be:14:9b:9a:20:53:5f:5d:e5:f4:b5:ad:0c:3f:52:ad:44:65:
c2:05:d6:75:8b:1a:c6:26:61:6e:31:5c:45:1c:08:63:bf:40:
ea:eb:c0:36:e4:da:13:83:3e:e2:97:fa:a3:c9:3a:01:83:0c:
bb:3f:ca:f6:28:19:24:42:fc:62:82:82:5c:58:98:7d:5c:62:
18:22:b2:62:0d:e9:c5:b2:3d:a3:8f:7a:93:72:8e:f9:40:0a:
8e:3b:1d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:29:35 2026 by rpki-client