This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
File: _10TK8Zqqiu89lw-X-iaDDcdizo.mft (raw, json)
Hash identifier: xjEOEazk5nkkJ4TMBVpcP+exoJSnu6X4JqGMQoZuY5M=
Subject key identifier: 54:93:03:6C:58:75:BD:A8:89:35:1E:33:70:2D:89:FE:C3:79:6D:F6
Authority key identifier: FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A
Certificate issuer: /CN=A91C1FA7/serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A
Certificate serial: 0264
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
Manifest number: 025E
Signing time: Sun 25 Jan 2026 00:53:43 +0000
Manifest this update: Sun 25 Jan 2026 00:53:43 +0000
Manifest next update: Sun 01 Feb 2026 00:53:43 +0000
Files and hashes: 1: _10TK8Zqqiu89lw-X-iaDDcdizo.crl (hash: bAdeEf+3WGH/UvPsQnh9kGuNZtkGWqCX+qdzABJtAxg=)
2: 064042F259F511EDB22E3F2BC4F9AE02.roa (hash: S8UZRzpubYCJ+X0jACj9ZehbJ6hRsnjRgE1noRmlqCA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl
rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 612 (0x264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1FA7, serialNumber=FF5D132BC66AAA2BBCF65C3E5FE89A0C371D8B3A
Validity
Not Before: Jan 25 00:53:43 2026 GMT
Not After : Feb 1 00:53:43 2026 GMT
Subject: CN=69756997-1ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9b:9d:f7:f4:b4:cd:70:5d:94:51:5c:1a:eb:
ca:f7:86:37:db:ce:62:97:d4:0f:da:a8:78:c0:4c:
ae:b1:e5:da:fa:1a:ee:fd:98:ee:ff:c9:5a:cb:f1:
0e:92:f1:4c:8f:f9:d2:fe:43:44:a8:b8:99:66:bd:
70:ee:ba:e1:eb:4c:3e:47:47:9e:00:ac:aa:12:a2:
9c:36:15:5d:c6:b3:23:3a:07:92:26:83:2a:18:3d:
eb:d9:93:5c:d5:87:cd:ea:03:e4:e3:3d:ce:57:0b:
5f:96:96:4d:88:d6:69:97:73:39:83:d5:f8:cf:fb:
1d:d1:53:8c:b6:41:35:1c:3b:75:55:b2:a9:4f:70:
ea:47:e5:6d:9f:ee:74:40:ad:10:3d:04:01:ba:b4:
04:f2:f4:60:21:8c:ef:14:ef:1e:bf:56:1d:3e:1f:
62:01:93:8b:a4:7b:f0:f7:91:7a:4f:f4:e2:02:bd:
2b:5c:6d:93:86:b8:ef:51:13:ed:42:da:77:c0:8a:
e0:9e:1e:f1:7a:60:b6:e3:f8:3f:2d:ef:9b:68:01:
4e:2c:2f:c5:e1:64:b6:41:0e:6e:17:4d:a9:10:33:
d9:14:f3:d9:77:1f:72:3c:f7:aa:e1:45:18:57:b7:
38:59:b1:c1:8e:c6:ad:dd:8f:99:3d:df:b6:c5:ef:
35:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:93:03:6C:58:75:BD:A8:89:35:1E:33:70:2D:89:FE:C3:79:6D:F6
X509v3 Authority Key Identifier:
keyid:FF:5D:13:2B:C6:6A:AA:2B:BC:F6:5C:3E:5F:E8:9A:0C:37:1D:8B:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_10TK8Zqqiu89lw-X-iaDDcdizo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FA7/2D991CD0599F11EDB967AE39C4F9AE02/_10TK8Zqqiu89lw-X-iaDDcdizo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:6c:08:01:ca:fd:9f:d5:ea:11:34:85:fb:d9:85:21:65:9d:
15:b3:64:c8:5b:e4:bb:56:02:60:c2:ef:dc:61:5a:7b:89:5a:
ee:a8:0d:03:f3:06:86:88:14:96:8c:8e:f8:e1:72:fc:a4:5f:
82:59:a2:b1:57:53:15:d8:6b:6e:97:9d:45:ac:18:22:3b:ca:
f3:8c:7b:e9:49:c3:06:7d:94:46:ff:ab:ab:e5:ca:72:62:1f:
67:e2:fa:08:ff:fb:10:82:70:19:25:e8:50:0c:ec:8b:65:ca:
8f:b8:e1:d3:81:1c:03:ff:75:e5:3c:42:57:0f:aa:73:e2:8a:
5c:f1:c3:50:af:c0:f2:56:09:ce:a6:eb:54:64:d4:b9:cd:21:
61:e3:9b:d4:36:e7:be:cb:23:61:e3:68:ed:e0:88:d8:05:34:
5d:19:4d:8f:d6:6f:14:90:da:6b:8a:26:cf:e9:79:7d:99:9e:
91:0d:1f:2c:f0:b4:ab:12:49:ef:10:03:13:95:c5:a0:2b:78:
b1:c1:ce:0a:7c:fc:6e:a1:6a:87:1b:4b:22:d9:7d:ae:ea:70:
eb:75:4a:eb:04:55:e5:b7:1d:50:17:7d:ca:09:83:b0:a1:0f:
7c:89:b8:37:0b:c6:39:b0:4d:b9:3d:9c:a7:98:90:f2:9f:92:
f1:61:6a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:51:28 2026 by rpki-client