This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft
File: TrnMSjh3s_-dQLwbs-YMkK36zVM.mft (raw, json)
Hash identifier: B2mwECOyFsLMrwfAUOJqQ6gHili8aj1Ar7SDzW4Jixk=
Subject key identifier: 12:ED:09:C7:BC:BE:F7:45:36:27:13:BD:6A:89:4C:EF:77:BE:70:6D
Authority key identifier: 4E:B9:CC:4A:38:77:B3:FF:9D:40:BC:1B:B3:E6:0C:90:AD:FA:CD:53
Certificate issuer: /CN=A91F104D/serialNumber=4EB9CC4A3877B3FF9D40BC1BB3E60C90ADFACD53
Certificate serial: 0B1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft
Manifest number: 0B13
Signing time: Sat 24 Jan 2026 18:50:39 +0000
Manifest this update: Sat 24 Jan 2026 18:50:39 +0000
Manifest next update: Sat 31 Jan 2026 18:50:39 +0000
Files and hashes: 1: TrnMSjh3s_-dQLwbs-YMkK36zVM.crl (hash: RbIbbvu/r9JvE9DzVNjgUl5fkxCSgrQ75PgvyT43btw=)
2: 1979A7C0586111EA9FC98555C4F9AE02.roa (hash: xDyHMOSdBh/dyG33YZNyTvI/uTZvDpSN0G7FGwuu7h4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.crl
rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:50:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2843 (0xb1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F104D, serialNumber=4EB9CC4A3877B3FF9D40BC1BB3E60C90ADFACD53
Validity
Not Before: Jan 24 18:50:39 2026 GMT
Not After : Jan 31 18:50:39 2026 GMT
Subject: CN=6975147f-549f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:86:25:4a:37:ed:78:a7:5f:4b:fe:fb:dc:47:
7c:d9:cc:02:a3:91:0a:8d:57:0f:87:f2:a4:ba:13:
ca:f4:d1:b5:2c:5b:58:95:59:6e:46:0b:2b:a1:61:
18:43:4a:37:7e:a0:e5:9b:60:aa:99:6e:40:c9:44:
4c:74:3c:9c:4f:6b:bf:41:ec:92:da:9d:0b:93:9a:
f4:5b:d3:d7:13:3c:34:f8:a2:1b:ac:ae:7b:7f:28:
c5:b5:0c:79:63:c7:9d:0f:38:0c:42:d6:51:3c:c6:
5e:0c:19:a3:87:29:26:14:1c:91:90:a6:3e:ab:b2:
dd:79:98:f4:0b:3d:90:da:55:ef:86:42:49:28:d4:
bc:8c:5f:34:df:52:cc:f5:9c:da:fa:22:ff:6d:9d:
17:1b:53:6c:28:70:8d:1f:43:ba:e8:8f:c5:b5:fd:
1d:d3:20:d7:c2:35:95:43:e7:79:ef:13:4f:dc:2c:
fc:6b:fe:80:20:77:a8:86:c5:10:fe:59:41:02:0a:
53:97:72:c2:13:fc:57:e3:41:08:aa:20:22:68:6e:
29:fa:00:6b:ca:2a:c7:16:c2:62:2f:db:28:f8:0c:
b2:9b:bd:ca:f2:82:b6:36:9e:79:09:73:b1:e3:ec:
0e:6f:8d:41:0f:cd:0d:5a:d6:2c:00:e7:6e:b0:11:
13:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:ED:09:C7:BC:BE:F7:45:36:27:13:BD:6A:89:4C:EF:77:BE:70:6D
X509v3 Authority Key Identifier:
keyid:4E:B9:CC:4A:38:77:B3:FF:9D:40:BC:1B:B3:E6:0C:90:AD:FA:CD:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TrnMSjh3s_-dQLwbs-YMkK36zVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F104D/21C2A08C585F11EA8A1B8753C4F9AE02/TrnMSjh3s_-dQLwbs-YMkK36zVM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e3:a3:aa:b2:9d:bc:c8:72:1c:41:17:5c:26:57:c1:d6:bd:
80:4b:2b:b7:aa:7c:33:cf:0c:ad:63:15:77:08:94:2f:4a:6c:
a9:75:80:bc:e5:5f:3a:b3:61:be:8f:65:d7:2d:16:bd:9a:fd:
e1:3c:1b:9b:72:ec:30:35:b5:f0:75:e5:ea:29:33:b9:5c:28:
55:b1:87:61:52:d9:6c:fd:01:ea:c2:6c:f1:e4:23:c4:79:bd:
37:f8:08:ed:61:29:cf:dd:3a:61:3d:a9:94:34:3d:8b:a4:30:
a4:0d:d8:c7:87:d3:85:f6:43:f4:53:fa:ff:9a:58:aa:52:9f:
69:c8:84:8d:f2:42:a8:f3:16:19:2c:d7:23:db:d2:bb:32:e3:
ff:de:66:d8:f5:de:e9:3a:b5:b3:79:20:2f:fb:10:e5:f0:60:
c2:bc:1a:22:2a:3e:bb:d3:16:aa:44:35:bb:d6:77:43:a2:3a:
25:c0:94:82:80:99:b5:57:72:ae:62:b1:68:15:82:38:7a:6f:
a9:b2:36:5e:50:58:28:47:34:4f:d9:c6:53:35:d5:8e:8f:8e:
a3:73:ac:93:61:b2:a7:0f:b8:c6:86:33:80:c9:95:77:d4:d7:
e9:d9:28:a1:7f:50:f1:e1:2a:7d:f0:1e:9d:22:dd:61:9f:65:
46:24:d9:8c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RjEwNEQxMTAvBgNVBAUTKDRFQjlDQzRBMzg3N0IzRkY5RDQwQkMxQkIzRTYwQzkw
QURGQUNENTMwHhcNMjYwMTI0MTg1MDM5WhcNMjYwMTMxMTg1MDM5WjAYMRYwFAYD
VQQDDA02OTc1MTQ3Zi01NDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyYYlSjfteKdfS/773Ed82cwCo5EKjVcPh/KkuhPK9NG1LFtYlVluRgsroWEY
Q0o3fqDlm2CqmW5AyURMdDycT2u/QeyS2p0Lk5r0W9PXEzw0+KIbrK57fyjFtQx5
Y8edDzgMQtZRPMZeDBmjhykmFByRkKY+q7LdeZj0Cz2Q2lXvhkJJKNS8jF8031LM
9Zza+iL/bZ0XG1NsKHCNH0O66I/Ftf0d0yDXwjWVQ+d57xNP3Cz8a/6AIHeohsUQ
/llBAgpTl3LCE/xX40EIqiAiaG4p+gBryirHFsJiL9so+Ayym73K8oK2Np55CXOx
4+wOb41BD80NWtYsAOdusBETiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLtCce8
vvdFNicTvWqJTO93vnBtMB8GA1UdIwQYMBaAFE65zEo4d7P/nUC8G7PmDJCt+s1T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTA0RC8yMUMyQTA4QzU4
NUYxMUVBOEExQjg3NTNDNEY5QUUwMi9Ucm5NU2poM3NfLWRRTHdicy1ZTWtLMzZ6
Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Rybk1Tamgzc18tZFFMd2JzLVlNa0szNnpWTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MTA0RC8yMUMyQTA4QzU4NUYxMUVBOEExQjg3NTNDNEY5QUUwMi9Ucm5NU2poM3Nf
LWRRTHdicy1ZTWtLMzZ6Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA946Oqsp28yHIcQRdcJlfB1r2ASyu3qnwzzwytYxV3CJQvSmypdYC8
5V86s2G+j2XXLRa9mv3hPBubcuwwNbXwdeXqKTO5XChVsYdhUtls/QHqwmzx5CPE
eb03+AjtYSnP3TphPamUND2LpDCkDdjHh9OF9kP0U/r/mliqUp9pyISN8kKo8xYZ
LNcj29K7MuP/3mbY9d7pOrWzeSAv+xDl8GDCvBoiKj670xaqRDW71ndDojolwJSC
gJm1V3KuYrFoFYI4em+psjZeUFgoRzRP2cZTNdWOj46jc6yTYbKnD7jGhjOAyZV3
1Nfp2Sihf1Dx4Sp98B6dIt1hn2VGJNmM
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:07 2026 by rpki-client