This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
File: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft (raw, json)
Hash identifier: mwo3cgwk9TuZsTamwI0lODwRJIGc9FcDTmd6rpw34h0=
Subject key identifier: B9:0C:70:0F:19:F1:5E:DB:0D:37:4D:1D:7A:E0:64:B5:72:8B:E4:7A
Authority key identifier: 4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27
Certificate issuer: /CN=A91C7991/serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427
Certificate serial: 08F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
Manifest number: 08EE
Signing time: Sat 24 Jan 2026 19:47:10 +0000
Manifest this update: Sat 24 Jan 2026 19:47:09 +0000
Manifest next update: Sat 31 Jan 2026 19:47:09 +0000
Files and hashes: 1: TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl (hash: haGYh7Rvp/wqd0wAEYXyIkaPIiWQYe86OR+l+l1qiqc=)
2: 456CD12E5F0111ECAE4F0286C4F9AE02.roa (hash: opv4DBbLy0U1nxAJSQ/FW4lgkGanCqSRXcsssLo5kGc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl
rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2295 (0x8f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7991, serialNumber=4C2699D213DD5D599B0EC0E463B9484FDB22F427
Validity
Not Before: Jan 24 19:47:09 2026 GMT
Not After : Jan 31 19:47:09 2026 GMT
Subject: CN=697521bd-6dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ef:ca:c8:80:23:b1:1f:17:f2:d3:fb:bc:ea:
c0:17:46:a9:52:25:a2:cc:fb:ca:89:5a:af:9b:33:
f2:c6:a3:65:6a:59:5f:d8:64:8a:cf:2c:5c:29:f8:
8f:fe:06:3a:e1:06:7f:4f:c3:a4:8b:b6:ba:59:db:
4b:e1:c6:e3:c3:66:eb:6d:54:1b:62:d7:98:de:35:
3b:4b:b0:6a:9a:05:bb:d9:65:7e:4a:26:d9:b3:bc:
55:ca:af:e3:5c:91:9c:fb:85:75:f5:d3:5f:7f:76:
73:81:dd:c7:5e:eb:5a:6a:9b:46:89:4d:39:44:68:
51:e3:98:fc:66:19:61:99:d3:86:f6:6a:07:ee:00:
ad:49:e6:c7:09:9d:51:61:64:b1:e0:c5:af:ef:4b:
93:47:5e:5d:59:31:d4:07:94:24:ea:30:95:12:0d:
b1:b0:fe:14:c2:ff:00:5b:9e:01:b4:50:44:28:59:
55:0c:46:2e:97:e0:cd:30:f1:cd:55:a1:1d:30:a2:
5c:7b:a3:ee:cb:b8:7c:90:96:9d:78:d1:70:52:08:
12:62:65:cb:03:bb:b9:55:7f:1f:be:90:93:6a:1e:
51:fc:16:7c:89:27:0e:85:d1:f8:1d:39:3d:28:a4:
4e:16:4c:a6:b9:2e:33:6a:8b:17:10:f0:03:21:2e:
64:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0C:70:0F:19:F1:5E:DB:0D:37:4D:1D:7A:E0:64:B5:72:8B:E4:7A
X509v3 Authority Key Identifier:
keyid:4C:26:99:D2:13:DD:5D:59:9B:0E:C0:E4:63:B9:48:4F:DB:22:F4:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7991/7C7B1F66C35A11EAA8ECB67FC4F9AE02/TCaZ0hPdXVmbDsDkY7lIT9si9Cc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:98:3a:0f:d1:f6:a8:bd:a7:3a:10:78:15:e3:bb:f8:5a:b9:
ed:3e:bf:76:eb:af:4c:7c:dc:18:14:b7:7f:5f:4a:02:cc:fd:
e3:71:2b:9c:2f:fb:b8:de:7e:95:26:9b:e8:38:67:1d:f5:55:
66:a5:d6:4b:cb:33:8e:33:55:81:a4:e9:c9:1a:17:08:21:9e:
3c:b4:ac:96:0a:4a:35:75:4c:93:fb:d1:2a:6d:bd:ec:7b:ea:
5d:2e:cf:cc:2d:8f:4b:20:f1:63:43:a5:ad:ae:e3:ed:97:88:
52:0e:34:ed:bf:43:50:a5:95:88:8a:6c:08:69:f2:0b:6c:10:
bd:8c:c4:23:77:5b:85:35:9a:2a:a9:e9:c2:5a:65:a3:cb:69:
16:fe:e7:0b:42:8d:3c:76:b0:0a:29:cd:0a:cb:f2:bd:6d:c0:
b0:b2:bf:f6:29:86:0b:6d:ee:f9:0e:ea:e0:f5:29:36:ee:8f:
cb:6c:b4:24:8a:00:8a:17:a9:37:9f:12:3c:2c:f9:ec:d3:bc:
52:f9:c5:9b:2c:41:58:bb:e1:27:f0:12:77:57:fa:ab:5b:1a:
6f:04:f5:e9:8e:72:26:ea:c3:15:5c:44:88:e2:d8:a6:3c:fc:
f0:9d:83:8f:ca:4e:7a:fb:2b:05:9f:c3:a6:bf:42:db:74:cf:
53:f1:f0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:47:30 2026 by rpki-client