This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft
File: TUTi91KilQtrVSjAaZsUkOdXd0Q.mft (raw, json)
Hash identifier: aAyYoskzKvR3mBnfmN/u0pDoUnTSrNnu07BWw6KKMKk=
Subject key identifier: F0:A0:46:33:AD:E1:BA:27:E0:87:7B:34:58:92:91:79:BC:32:B7:F4
Authority key identifier: 4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44
Certificate issuer: /CN=A91D15A4/serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744
Certificate serial: 0FBE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft
Manifest number: 0FB4
Signing time: Sat 24 Jan 2026 17:12:43 +0000
Manifest this update: Sat 24 Jan 2026 17:12:43 +0000
Manifest next update: Sat 31 Jan 2026 17:12:43 +0000
Files and hashes: 1: TUTi91KilQtrVSjAaZsUkOdXd0Q.crl (hash: KTIL4ka4EGYnxCQGkhp3yYXzAj6XUr9A08o+YxyDzuQ=)
2: 3D371C5C708F11E9B105E92CC4F9AE02.roa (hash: YkmY4q4YSypbm13HUH++xACjilqSAUGjIIEq3zMyNH8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.crl
rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:12:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4030 (0xfbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D15A4, serialNumber=4D44E2F752A2950B6B5528C0699B1490E7577744
Validity
Not Before: Jan 24 17:12:43 2026 GMT
Not After : Jan 31 17:12:43 2026 GMT
Subject: CN=6974fd8b-af15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:f7:b4:c3:17:88:94:d9:a3:3f:d0:9d:44:
fb:f0:39:4d:4e:8e:03:c9:6d:b0:d4:eb:b3:7e:08:
09:5c:5e:a6:9c:f9:45:af:5b:a7:c9:f0:4a:55:f1:
95:71:99:f6:31:b2:86:7e:0f:53:a6:a8:3b:84:42:
bb:47:b1:50:0d:8a:a3:e7:bb:09:f5:14:c5:3a:70:
b8:19:1c:ce:92:01:d6:9a:7c:b8:bb:e3:03:84:ae:
13:04:3b:63:77:02:84:81:1d:24:e0:68:9d:14:db:
dd:c4:00:c6:5d:9e:9c:0b:5b:6c:ff:18:9b:e7:47:
b8:3a:a5:8a:1b:38:2a:64:6c:14:f2:85:3c:16:57:
62:68:93:7c:2e:22:4b:61:a8:43:64:f2:fb:b9:bf:
c2:56:cb:00:bd:97:94:7d:33:1c:6d:b7:3b:6a:b0:
4f:36:86:59:f3:01:8c:d7:77:17:97:dc:e6:bf:36:
9d:ef:ed:a9:e7:74:6a:53:37:81:ee:e7:68:59:16:
68:cf:f6:ab:ad:8f:f7:08:ff:01:22:69:85:95:23:
53:8c:8c:e0:74:22:cc:ca:fe:aa:cf:32:d7:f7:75:
a0:76:0b:83:e1:1e:fc:4b:7a:98:b1:ce:18:c3:30:
72:9e:af:74:7e:c8:50:d5:52:2d:e5:a7:e3:a0:e5:
2a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A0:46:33:AD:E1:BA:27:E0:87:7B:34:58:92:91:79:BC:32:B7:F4
X509v3 Authority Key Identifier:
keyid:4D:44:E2:F7:52:A2:95:0B:6B:55:28:C0:69:9B:14:90:E7:57:77:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TUTi91KilQtrVSjAaZsUkOdXd0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D15A4/B34E6D50708A11E9AF0F8D21C4F9AE02/TUTi91KilQtrVSjAaZsUkOdXd0Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:82:91:3e:8b:93:15:7d:87:67:76:a3:2a:3b:06:20:15:d7:
cf:ce:d4:8d:c4:73:ee:87:d5:97:05:8b:d5:01:46:3d:9a:8e:
11:0d:4c:34:18:a7:6d:b7:a3:11:a2:0d:70:94:14:34:46:cd:
4a:d8:6f:9a:f7:63:00:a2:f9:55:46:bc:77:b7:49:7a:53:69:
64:19:75:f6:d9:b4:ef:88:09:0a:17:12:73:1a:e2:30:db:0b:
ae:3e:c4:b6:b8:f3:4a:cc:58:e3:10:35:07:ad:4d:3c:b3:9a:
89:33:78:02:bc:59:40:1a:13:a5:db:83:5c:0b:fa:b1:ef:36:
14:da:ba:a7:a1:79:a7:80:38:91:d7:da:26:a3:8a:1c:70:51:
d9:d8:37:46:76:84:42:08:e4:e0:cd:83:b9:04:20:c8:04:bb:
58:21:77:4d:a7:1e:cd:2f:e2:63:99:e0:85:af:a3:0c:72:02:
0a:ff:f6:7a:0b:7f:1e:43:f3:16:5b:ae:df:e5:7c:cc:71:ac:
6c:f1:d9:74:16:13:38:5c:22:e5:9f:0f:45:a2:2a:5c:22:95:
62:76:fe:a7:a5:6c:75:e7:0c:66:2e:d2:f8:9b:7b:de:83:fd:
2b:02:63:90:cf:47:54:ad:66:f2:5c:32:bd:1c:97:d1:37:66:
fc:9d:b1:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE1QTQxMTAvBgNVBAUTKDRENDRFMkY3NTJBMjk1MEI2QjU1MjhDMDY5OUIxNDkw
RTc1Nzc3NDQwHhcNMjYwMTI0MTcxMjQzWhcNMjYwMTMxMTcxMjQzWjAYMRYwFAYD
VQQDDA02OTc0ZmQ4Yi1hZjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyVH3tMMXiJTZoz/QnUT78DlNTo4DyW2w1OuzfggJXF6mnPlFr1unyfBKVfGV
cZn2MbKGfg9Tpqg7hEK7R7FQDYqj57sJ9RTFOnC4GRzOkgHWmny4u+MDhK4TBDtj
dwKEgR0k4GidFNvdxADGXZ6cC1ts/xib50e4OqWKGzgqZGwU8oU8FldiaJN8LiJL
YahDZPL7ub/CVssAvZeUfTMcbbc7arBPNoZZ8wGM13cXl9zmvzad7+2p53RqUzeB
7udoWRZoz/arrY/3CP8BImmFlSNTjIzgdCLMyv6qzzLX93WgdguD4R78S3qYsc4Y
wzBynq90fshQ1VIt5afjoOUq5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCgRjOt
4bon4Id7NFiSkXm8Mrf0MB8GA1UdIwQYMBaAFE1E4vdSopULa1UowGmbFJDnV3dE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTVBNC9CMzRFNkQ1MDcw
OEExMUU5QUYwRjhEMjFDNEY5QUUwMi9UVVRpOTFLaWxRdHJWU2pBYVpzVWtPZFhk
MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RVVGk5MUtpbFF0clZTakFhWnNVa09kWGQwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTVBNC9CMzRFNkQ1MDcwOEExMUU5QUYwRjhEMjFDNEY5QUUwMi9UVVRpOTFLaWxR
dHJWU2pBYVpzVWtPZFhkMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQARgpE+i5MVfYdndqMqOwYgFdfPztSNxHPuh9WXBYvVAUY9mo4RDUw0
GKdtt6MRog1wlBQ0Rs1K2G+a92MAovlVRrx3t0l6U2lkGXX22bTviAkKFxJzGuIw
2wuuPsS2uPNKzFjjEDUHrU08s5qJM3gCvFlAGhOl24NcC/qx7zYU2rqnoXmngDiR
19omo4occFHZ2DdGdoRCCOTgzYO5BCDIBLtYIXdNpx7NL+JjmeCFr6MMcgIK//Z6
C38eQ/MWW67f5XzMcaxs8dl0FhM4XCLlnw9FoipcIpVidv6npWx15wxmLtL4m3ve
g/0rAmOQz0dUrWbyXDK9HJfRN2b8nbEb
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:13:43 2026 by rpki-client