This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
File: T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json)
Hash identifier: ebdNDur7VCg3gtg1UuakhkCqvAFl6zBpHsU/gyWLfaI=
Subject key identifier: 91:82:2C:34:17:6A:C0:D9:6F:DA:CF:09:91:30:3B:77:E1:2D:D7:ED
Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC
Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC
Certificate serial: 0234
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
Manifest number: 022B
Signing time: Sun 25 Jan 2026 01:23:51 +0000
Manifest this update: Sun 25 Jan 2026 01:23:51 +0000
Manifest next update: Sun 01 Feb 2026 01:23:51 +0000
Files and hashes: 1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: 0uxznpBUYtA90sGPfiOSs6oUgWoMWfwtY0VxA85ck2o=)
2: B987C6AAB7A311F095EF5E67C4F9AE02.roa (hash: o9bfnwoCTuetn0SRRGYX4ZpmTSdQG0cya1pWAww3M3c=)
3: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: KSItAPOjkLG7UWPYALBIyJeHmExySZ4KDwSB7GWXFrI=)
4: B780E2A097F711EF89B09770C4F9AE02.roa (hash: DB23UT2fsXrp5BzUdZvw+7TC7FTSDlXyxizqnQeaxYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl
rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:23:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC
Validity
Not Before: Jan 25 01:23:51 2026 GMT
Not After : Feb 1 01:23:51 2026 GMT
Subject: CN=697570a7-4be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:38:d6:04:46:5b:d4:84:2a:02:5d:80:da:f4:
cf:39:dd:26:8b:ce:04:f9:ce:49:ab:dd:cb:03:60:
b7:f8:1b:80:c7:4a:3b:7f:46:f6:d4:22:a7:6c:84:
eb:ba:fa:34:81:67:e0:61:9b:31:50:6d:fb:5c:e3:
00:10:91:77:38:d8:18:21:18:28:d8:85:db:a8:01:
1f:8b:9d:87:c7:38:4e:b6:66:20:b4:04:20:d5:b9:
cb:cb:a4:8c:a0:24:2f:67:92:21:0d:22:82:86:2b:
cd:c0:4c:38:d3:24:af:0d:05:39:0c:84:f1:12:3a:
f0:bc:80:27:61:cb:61:d9:7a:9b:9e:c0:52:42:e7:
5e:41:14:06:58:fd:8a:98:1b:ab:f2:f2:e0:ac:cb:
3a:60:94:30:f4:f1:cf:c7:3c:c4:f8:d0:9c:6b:1d:
3b:05:51:26:71:5b:41:c9:91:dd:01:01:cd:7b:bc:
36:9b:4c:47:18:9d:a6:1d:e6:0c:70:60:a3:68:06:
6f:0e:7e:4c:47:aa:73:b8:35:5e:6a:62:f2:cb:9a:
60:c9:a2:35:a5:9e:2d:aa:f0:eb:cc:c0:f9:a3:ad:
68:ce:23:23:f0:aa:33:25:e5:b5:2c:7c:c9:74:41:
33:ef:7c:89:fd:cd:d6:b3:36:48:9e:e3:f1:9f:e7:
2d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:82:2C:34:17:6A:C0:D9:6F:DA:CF:09:91:30:3B:77:E1:2D:D7:ED
X509v3 Authority Key Identifier:
keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:2c:93:f5:91:94:11:6a:13:00:97:38:55:1c:41:07:eb:7f:
ff:ca:21:71:23:f0:e5:37:6c:d6:93:d4:98:58:a7:da:49:5e:
62:5b:7f:ca:d2:ad:79:2c:04:bc:63:fc:79:9f:50:43:85:a2:
41:4a:8d:1c:16:dd:1e:ba:d6:96:a7:ab:2c:53:3d:86:a7:92:
d2:69:47:9a:12:fb:17:06:18:ae:c9:47:33:e2:71:6f:4c:ef:
23:d7:c3:4e:c1:ce:67:e9:74:4d:55:d3:19:07:5a:d9:33:1c:
68:1e:e8:4e:77:bc:d2:f3:69:0c:de:cc:11:e1:01:a1:53:c7:
58:f3:51:4b:99:a6:df:8c:33:ad:98:c9:db:f0:2c:e8:47:7a:
6e:b6:e2:ed:15:b9:5a:cd:71:4e:11:09:78:0f:d5:ab:c0:94:
6c:8a:98:8e:79:24:0f:b5:89:0d:3d:b7:ff:b9:89:b8:0e:d2:
c0:e2:7b:6e:3f:6a:64:6e:86:d4:e1:7f:d2:3d:74:55:a4:0d:
3b:d3:ad:2d:16:43:11:96:6d:07:00:be:2c:d3:99:66:c2:33:
3d:8d:4c:da:80:1d:a2:87:29:de:a3:98:c6:d5:37:dd:07:86:
b7:9c:70:50:23:96:9e:d7:9b:50:b4:b4:96:4c:29:ec:39:c7:
10:6e:27:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:08:07 2026 by rpki-client