This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
File: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft (raw, json)
Hash identifier: rwX9/DTyOn6FxXdo0xIvuuZGurE+G7Hvxq2ZxZnn3cA=
Subject key identifier: 30:CD:F3:C8:9D:4B:84:63:2C:85:C8:CA:B0:53:B9:26:15:92:91:86
Authority key identifier: 4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
Certificate issuer: /CN=A91D92FB/serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Certificate serial: 3545
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
Manifest number: 3520
Signing time: Sat 24 Jan 2026 14:28:15 +0000
Manifest this update: Sat 24 Jan 2026 14:28:14 +0000
Manifest next update: Sat 31 Jan 2026 14:28:14 +0000
Files and hashes: 1: TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl (hash: Hnte/W2yevRNq1UkDiJzqD33MS428swzEpsB3UCu6vY=)
2: 3712E24075D911E8A722EC33C4F9AE02.roa (hash: FdTUsXBXGlULvnBF3k+ULhUtZ8ZP1Y0Le1mnqhZZpPY=)
3: F86E9DE46B9811ED9330AC4CC4F9AE02.roa (hash: NQ44ywkdXvwjY8pBPw8S7NRNivsvd48rEIIAsaIuTIc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl
rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13637 (0x3545)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D92FB, serialNumber=4C36F812E76D827ECE6E59BD1560585C51ECD992
Validity
Not Before: Jan 24 14:28:14 2026 GMT
Not After : Jan 31 14:28:14 2026 GMT
Subject: CN=6974d6fe-2c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:fc:d0:62:d3:30:02:96:6e:0c:1f:eb:7c:
63:04:43:cc:8b:fb:34:2e:16:f4:9b:48:c1:10:53:
75:f6:fe:e0:69:8e:19:c2:0a:1e:79:c1:e8:6f:fb:
6b:f3:28:66:79:77:d7:16:69:62:38:cc:2d:52:7c:
31:2d:06:66:af:19:7a:2b:7b:4f:27:d0:0a:41:88:
0c:c7:ab:7d:05:ea:20:b4:66:8a:df:22:56:2c:5b:
da:a9:61:55:5b:38:4d:73:86:8e:8a:72:75:63:2a:
f3:2b:82:2e:85:0f:b2:97:bd:93:a1:f2:ca:96:69:
28:57:21:db:16:ad:8e:af:fe:52:f0:f9:66:64:4d:
6f:2f:c0:65:60:e9:c8:51:9e:78:e7:ea:70:07:1f:
a9:a9:e5:b3:1b:39:36:de:dc:68:2b:37:72:f4:74:
a4:42:2b:86:c2:6d:b1:e2:02:08:0f:0b:12:52:53:
73:08:13:97:3a:9f:57:76:62:69:79:31:e7:8c:aa:
50:1a:25:7a:8e:bf:3f:a3:f1:35:9b:4f:25:9d:a9:
fb:01:3b:bf:ca:55:77:1a:d3:d3:a8:67:bf:4e:11:
e4:10:eb:04:1e:3c:33:84:ef:5a:df:8b:b9:46:0a:
24:66:d2:46:dc:74:77:6c:41:b3:e1:30:f5:32:37:
7b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CD:F3:C8:9D:4B:84:63:2C:85:C8:CA:B0:53:B9:26:15:92:91:86
X509v3 Authority Key Identifier:
keyid:4C:36:F8:12:E7:6D:82:7E:CE:6E:59:BD:15:60:58:5C:51:EC:D9:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D92FB/327FC6B21D8811E298F3A3E008B02CD2/TDb4Eudtgn7Oblm9FWBYXFHs2ZI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:0b:35:d2:0f:63:50:af:c3:a2:17:9b:4c:e8:08:50:4b:66:
7b:50:a6:7d:54:8e:e1:21:a4:d5:5b:58:81:08:1c:e2:71:3f:
9a:9d:a1:72:04:e2:68:2c:d8:44:16:eb:87:0b:8e:5b:96:c2:
52:62:ac:74:1b:a8:65:41:71:59:b4:a8:38:69:22:b5:19:65:
06:75:2f:40:a9:4b:ce:38:fa:9b:c1:0f:6d:a5:b3:00:89:6e:
f3:bb:35:60:09:a3:3c:1e:01:64:8a:49:14:a7:29:f3:00:04:
f0:a0:fc:f5:04:17:9c:d8:a4:4a:e1:4b:c0:8f:4b:68:05:97:
dd:a7:cd:50:ed:e1:bf:f6:72:6e:a9:5f:fa:1d:d3:89:75:86:
8b:b9:07:30:67:48:2d:af:10:83:67:ed:82:68:e7:5f:b9:25:
c3:03:3f:10:49:c0:74:bf:55:50:cd:ec:b4:8a:92:dd:e4:96:
f1:96:41:79:6e:0c:e6:43:6b:fa:33:0e:de:8c:c8:a2:49:1b:
1c:a1:c9:2c:31:13:6a:06:1a:3a:40:9d:c3:63:83:00:e4:0d:
08:ac:e4:5c:2e:6c:3e:2a:fd:10:13:85:9d:37:ea:90:d8:84:
4b:5e:0c:75:e2:d5:1d:88:ba:c9:8b:0a:b2:82:68:cd:ad:fb:
0b:98:5d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:29:34 2026 by rpki-client