This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft
File: TsOX96VQvpBMGG-SCBd0AHHSRTU.mft (raw, json)
Hash identifier: HItySt9ZXpAME11S2Huk5xfjGPf71Luk6hSxc86vnK8=
Subject key identifier: EE:7C:E6:A8:50:D5:0E:0F:9B:22:50:88:AC:13:37:02:61:56:1E:93
Authority key identifier: 4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35
Certificate issuer: /CN=A91E1C0B/serialNumber=4EC397F7A550BE904C186F920817740071D24535
Certificate serial: 05EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft
Manifest number: 05E4
Signing time: Sat 24 Jan 2026 22:15:42 +0000
Manifest this update: Sat 24 Jan 2026 22:15:42 +0000
Manifest next update: Sat 31 Jan 2026 22:15:42 +0000
Files and hashes: 1: TsOX96VQvpBMGG-SCBd0AHHSRTU.crl (hash: nTir/a4L+Jlqt9E7BUc1oNlb60NTIOY77SFM5gDvHW0=)
2: 1DE1E418EDE211EB8CEA3415C4F9AE02.roa (hash: +V/Zx8b6BYHTeFZwhHH+tuI5S8sFWblyU4r7DTnMltA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl
rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1514 (0x5ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1C0B, serialNumber=4EC397F7A550BE904C186F920817740071D24535
Validity
Not Before: Jan 24 22:15:42 2026 GMT
Not After : Jan 31 22:15:42 2026 GMT
Subject: CN=6975448e-1559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f0:8c:27:6e:d8:30:57:bc:70:f6:ec:72:66:
a6:15:69:92:0d:b0:07:7d:94:34:08:bf:52:9f:08:
8b:39:f9:3e:87:c2:07:dd:19:5b:22:59:37:19:e9:
0c:53:2f:ed:04:2a:e2:b4:2d:44:b7:c8:be:4f:cd:
9d:93:ca:f4:03:d1:52:33:46:53:27:90:5e:73:cb:
7e:b9:f3:ee:e7:ba:0b:b9:c6:dc:ac:34:bc:f0:17:
73:c9:67:c5:0a:20:a5:0d:03:c0:59:00:23:e1:a9:
22:98:42:cc:ce:7d:47:90:2c:05:c3:03:c6:5a:1b:
11:43:24:e4:91:49:80:c1:05:f8:ad:9f:68:e6:c7:
32:91:43:0c:63:89:3d:c8:75:4a:93:70:39:d7:0a:
cf:e4:75:a6:0d:e5:e5:61:8a:95:fd:04:90:31:ba:
ff:d7:64:22:c4:d7:b0:2d:43:08:a7:47:6d:4a:0f:
5e:ca:de:c3:49:4c:15:e3:4a:82:51:21:65:25:40:
b3:81:b0:64:dd:13:bf:51:1c:38:3e:c7:e9:34:88:
bc:c4:3b:75:6b:50:ca:dc:34:c2:39:78:f0:a4:c4:
6e:85:eb:78:6c:d7:70:ce:be:a1:9c:c5:62:16:11:
c4:c3:ec:18:17:f7:01:b9:30:5e:8a:eb:ce:46:67:
3f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7C:E6:A8:50:D5:0E:0F:9B:22:50:88:AC:13:37:02:61:56:1E:93
X509v3 Authority Key Identifier:
keyid:4E:C3:97:F7:A5:50:BE:90:4C:18:6F:92:08:17:74:00:71:D2:45:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TsOX96VQvpBMGG-SCBd0AHHSRTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C0B/B73A179CE55A11EBB9BF8942C4F9AE02/TsOX96VQvpBMGG-SCBd0AHHSRTU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:11:e5:42:db:ef:4d:d5:8e:59:5c:c1:75:fc:27:2e:57:3f:
52:74:12:84:98:67:62:fd:c2:87:9a:d3:cc:9a:30:d0:36:14:
27:12:9b:76:3d:08:48:31:b6:de:ad:19:c8:f1:ae:6b:71:10:
a7:43:47:db:33:de:4e:e7:b6:88:5b:37:fd:c2:00:38:e6:e4:
77:b3:a6:7e:cb:9f:84:b2:ab:62:ea:95:41:61:8b:7f:ed:e6:
ac:30:a1:95:5b:fa:0e:a2:a5:9c:c5:83:05:52:78:a0:03:45:
fb:1c:11:17:bd:aa:20:17:67:8d:62:d5:ea:e0:73:79:df:6f:
c8:56:d3:87:be:8e:9c:ed:8a:0c:b8:65:73:e0:45:26:32:ad:
21:9d:79:a4:24:76:2d:20:87:c0:f7:bc:ff:27:17:a1:9a:36:
13:c0:9e:d4:fa:ed:82:96:4a:03:bf:45:f5:fb:98:71:8d:bc:
73:4e:fc:22:fa:78:af:30:5d:c3:b5:27:0e:82:5a:b7:6c:07:
9c:70:e3:ee:dd:72:87:a9:3d:39:b1:c6:0b:8b:c9:5a:a6:98:
d8:7f:fa:2d:d7:96:71:a4:92:16:7b:43:73:81:9d:62:43:f3:
d4:80:03:73:29:7d:2d:3b:bd:64:33:56:b6:70:3c:8f:f8:96:
43:b3:73:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:09:52 2026 by rpki-client