This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
File: tii4qSXEXjrDpxvkEUZimYv0s-A.mft (raw, json)
Hash identifier: ZILDD59RJshBs6A++zHJUutczuz8AHv3oJbPJgL3gfU=
Subject key identifier: A9:95:87:A9:1B:1A:1B:89:1F:DC:0E:AD:E2:37:C0:60:24:60:A5:E0
Authority key identifier: B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0
Certificate issuer: /CN=A91CA8EA/serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0
Certificate serial: 0515
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
Manifest number: 0507
Signing time: Sat 24 Jan 2026 22:53:11 +0000
Manifest this update: Sat 24 Jan 2026 22:53:10 +0000
Manifest next update: Sat 31 Jan 2026 22:53:10 +0000
Files and hashes: 1: tii4qSXEXjrDpxvkEUZimYv0s-A.crl (hash: jSEkzki2l9f5Vctw5hSuD8ktshDrQOjefsJFMhNFkW0=)
2: 207388F2D45E11EE8D29793EC4F9AE02.roa (hash: sNtdGhFP5+8wGIN0odNsPXpZSkmhBenTgX2lN0L4D9w=)
3: 14A07422D45E11EEB37CB639C4F9AE02.roa (hash: JhgDE5ETFIhEXBruI39DaKib1cXEXGZCzHT5TsRcHiM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl
rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1301 (0x515)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA8EA, serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0
Validity
Not Before: Jan 24 22:53:10 2026 GMT
Not After : Jan 31 22:53:10 2026 GMT
Subject: CN=69754d57-5928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:fb:a1:6e:71:b9:3a:ac:91:2a:a9:8a:41:
26:31:40:86:81:cf:75:77:26:42:3e:74:aa:0f:a2:
41:7c:68:80:b2:9f:43:eb:ed:4b:94:09:63:9e:cc:
c1:05:28:48:9e:e9:9d:bf:69:3e:f8:b8:a2:96:34:
de:00:88:76:f0:8b:0d:92:2a:f9:f6:14:a7:d4:8a:
b5:b1:d8:92:03:02:02:75:74:82:86:be:56:49:02:
3a:8f:81:29:ed:9a:76:8c:64:9b:0f:3e:7e:83:d3:
6e:dd:50:f6:c3:93:72:cc:d3:db:f1:e5:41:61:d6:
67:e8:25:36:60:28:a6:46:7c:33:c0:5f:cd:35:37:
2d:f3:80:16:78:26:8e:be:14:fe:3a:85:86:3d:c4:
68:76:f1:ce:11:f6:ed:df:f7:e0:45:9c:5a:85:b9:
05:31:e2:70:a6:f0:9b:cf:c6:b4:44:99:81:45:02:
de:4d:a2:61:e3:df:af:a3:9a:83:e9:b7:72:6a:8c:
5f:ff:60:3a:ab:7a:84:cb:8e:78:02:66:ac:4f:f3:
da:38:b6:47:b5:06:38:6a:4f:e5:58:1d:87:75:ea:
fe:f4:10:fc:95:32:41:dc:4a:e8:ab:48:e7:ab:99:
00:a3:09:7e:a7:18:a0:dd:7b:90:d8:ab:5f:e2:af:
d2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:95:87:A9:1B:1A:1B:89:1F:DC:0E:AD:E2:37:C0:60:24:60:A5:E0
X509v3 Authority Key Identifier:
keyid:B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:18:17:4c:e3:72:d2:a7:13:e2:a4:c8:ee:9c:d1:0e:44:1c:
87:4b:eb:8a:dd:97:d5:fe:fd:2c:05:e7:7e:2d:7f:a3:94:c6:
42:b2:36:9d:d5:a2:db:08:7b:f0:31:77:69:78:f0:0d:b2:2e:
b6:d8:9c:93:24:27:db:91:fa:45:58:90:d4:80:c3:da:04:9e:
0e:b8:8d:f7:86:59:36:47:ad:63:fa:98:4d:d2:b8:27:77:fc:
92:94:b2:bf:34:b8:ab:d0:48:67:32:ef:b1:57:9e:0d:9c:f4:
0c:a8:6e:ae:8f:1e:d1:d5:f0:da:84:b4:62:0c:7f:34:c8:eb:
f0:bd:8b:0c:30:14:31:1d:cd:1e:c8:0c:b5:c3:77:ed:73:61:
46:87:50:24:ba:e6:f4:50:16:44:05:11:64:bd:ec:f2:9b:a0:
4b:a7:21:9d:a8:93:50:d2:e2:4a:da:ac:67:89:67:ee:7e:25:
06:e5:f4:cb:d1:95:2d:29:b8:a3:30:83:b5:ed:02:71:dc:16:
02:8b:3f:36:03:93:88:e0:02:f1:81:a9:c7:22:dd:31:14:7b:
c2:63:a0:31:a7:4f:f5:76:9f:73:24:f4:40:44:b3:4e:86:73:
f6:8f:6e:ba:78:b4:2d:3a:01:b8:f9:ca:56:f4:81:77:f9:ab:
90:12:9b:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0E4RUExMTAvBgNVBAUTKEI2MjhCOEE5MjVDNDVFM0FDM0E3MUJFNDExNDY2Mjk5
OEJGNEIzRTAwHhcNMjYwMTI0MjI1MzEwWhcNMjYwMTMxMjI1MzEwWjAYMRYwFAYD
VQQDDA02OTc1NGQ1Ny01OTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApBD7oW5xuTqskSqpikEmMUCGgc91dyZCPnSqD6JBfGiAsp9D6+1LlAljnszB
BShInumdv2k++LiiljTeAIh28IsNkir59hSn1Iq1sdiSAwICdXSChr5WSQI6j4Ep
7Zp2jGSbDz5+g9Nu3VD2w5NyzNPb8eVBYdZn6CU2YCimRnwzwF/NNTct84AWeCaO
vhT+OoWGPcRodvHOEfbt3/fgRZxahbkFMeJwpvCbz8a0RJmBRQLeTaJh49+vo5qD
6bdyaoxf/2A6q3qEy454AmasT/PaOLZHtQY4ak/lWB2Hder+9BD8lTJB3Eroq0jn
q5kAowl+pxig3XuQ2Ktf4q/SUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmVh6kb
GhuJH9wOreI3wGAkYKXgMB8GA1UdIwQYMBaAFLYouKklxF46w6cb5BFGYpmL9LPg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQThFQS9EOENBMTNDMjQw
NDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhqckRweHZrRVVaaW1ZdjBz
LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RpaTRxU1hFWGpyRHB4dmtFVVppbVl2MHMtQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QThFQS9EOENBMTNDMjQwNDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhq
ckRweHZrRVVaaW1ZdjBzLUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBVGBdM43LSpxPipMjunNEORByHS+uK3ZfV/v0sBed+LX+jlMZCsjad
1aLbCHvwMXdpePANsi622JyTJCfbkfpFWJDUgMPaBJ4OuI33hlk2R61j+phN0rgn
d/ySlLK/NLir0EhnMu+xV54NnPQMqG6ujx7R1fDahLRiDH80yOvwvYsMMBQxHc0e
yAy1w3ftc2FGh1Akuub0UBZEBRFkvezym6BLpyGdqJNQ0uJK2qxniWfufiUG5fTL
0ZUtKbijMIO17QJx3BYCiz82A5OI4ALxganHIt0xFHvCY6Axp0/1dp9zJPRARLNO
hnP2j266eLQtOgG4+cpW9IF3+auQEpuR
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:54:27 2026 by rpki-client