This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
File: tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json)
Hash identifier: LXCA3Vl7rFTxcd4kSIlb61pIdDWVoDuCza8iQPdeNUc=
Subject key identifier: A2:DE:32:CA:8D:A2:5F:7E:43:26:DB:B7:75:81:BA:BC:E2:C0:CF:B6
Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76
Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276
Certificate serial: 03C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
Manifest number: 03B1
Signing time: Sat 24 Jan 2026 23:52:41 +0000
Manifest this update: Sat 24 Jan 2026 23:52:40 +0000
Manifest next update: Sat 31 Jan 2026 23:52:40 +0000
Files and hashes: 1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: agh8fM9WqpjYRZjshh3ZStHyLoZEtNNmXh2fQy+isa4=)
2: 69B0C410EC2411EFBE58C381C4F9AE02.roa (hash: +kwqGbWpipbMrj0CLjpjVwB+WbolyL/GD/coYdvqy5o=)
3: D56B4ABED54E11EFAD8C4E52C4F9AE02.roa (hash: A43/xgJTGYeraFwPZtUL84bZHCq+gEn3dFwYExX8W/g=)
4: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: NWdLC1okjSMZC1re8r0GPv+coLAtzqUNZd/WJqoFC0I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl
rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 964 (0x3c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276
Validity
Not Before: Jan 24 23:52:40 2026 GMT
Not After : Jan 31 23:52:40 2026 GMT
Subject: CN=69755b48-9655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:be:13:16:8e:be:8e:88:aa:60:89:0a:a0:0a:
3e:fd:d5:97:9b:a5:7b:74:3a:6e:be:1a:0a:cb:f6:
0c:63:e3:33:70:36:93:34:75:37:58:33:9a:5f:5c:
d2:55:54:5f:d4:1a:3e:60:06:4e:71:07:49:55:a4:
62:75:7e:1d:0b:29:8b:2a:c0:44:af:f7:f8:31:9f:
2c:a0:22:ce:23:dc:65:ba:29:7f:1b:66:ca:d3:4c:
5b:b6:2e:ae:10:b0:c9:a2:02:ff:d4:62:c9:60:dd:
c8:39:c5:98:7b:1f:66:86:ef:71:ee:44:e6:1b:93:
f1:19:a8:ba:6a:3e:ea:e2:78:7f:b2:fe:56:e5:29:
c0:c2:19:79:59:df:76:0a:63:80:1e:ce:24:d0:59:
71:c6:b5:4f:7f:d2:43:38:fc:3f:96:2a:f2:22:ac:
06:19:51:d6:67:41:8f:71:b6:f5:3c:96:72:d0:ce:
84:f1:b7:15:d5:8b:7d:bf:21:2f:e9:c4:7d:dc:fe:
33:8c:07:4b:32:2a:8a:40:6d:0c:62:85:7b:69:0b:
b3:4d:f3:e7:9d:d2:d0:b1:14:a3:92:79:46:5f:a4:
a3:cc:69:52:cb:58:a4:e9:58:0e:6a:77:5b:e3:ef:
27:6c:d1:0c:24:c3:87:94:4b:96:af:0b:61:db:f0:
72:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DE:32:CA:8D:A2:5F:7E:43:26:DB:B7:75:81:BA:BC:E2:C0:CF:B6
X509v3 Authority Key Identifier:
keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:b5:79:c7:fc:b8:77:6b:c5:52:23:e2:15:df:cc:78:dc:dd:
82:ca:cd:f5:6f:7d:ac:af:86:dd:0b:ef:51:7d:f1:20:34:17:
42:fc:e1:11:77:9c:df:ff:16:3b:48:3e:4e:4d:f3:7b:9a:2c:
cd:87:06:e5:1f:a4:d6:62:d0:45:24:34:9a:1a:15:ec:62:0d:
e6:1e:da:ab:ac:58:26:01:d7:cd:f9:64:c0:a1:de:2e:96:8e:
6c:a3:ed:43:0f:37:93:e3:51:9b:c5:f1:58:af:bc:26:f9:42:
1f:e5:9a:38:f5:2f:b5:56:a5:f7:8e:44:a6:e0:8a:83:f1:54:
0b:dd:bc:4d:3b:98:e6:42:f4:75:53:e0:89:6a:d4:d2:64:03:
1d:88:b5:4a:fc:a2:3c:aa:02:fd:e4:cf:c9:66:57:9c:75:f3:
4a:30:8d:61:f1:b1:50:f4:9a:36:46:c7:c7:72:df:92:7b:46:
0a:9a:f1:c8:9d:1c:cf:b7:1a:05:55:1e:ce:e8:f3:e0:07:42:
d9:19:9d:2f:d0:1e:60:48:cd:73:2d:fe:4e:68:3b:d0:59:d9:
59:04:8f:27:40:f5:a2:12:69:d0:dd:13:f8:54:5c:5b:7f:85:
ca:ab:ca:f9:f4:cc:d3:93:68:c1:88:97:e5:ce:86:b7:db:d4:
65:23:39:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE0NDYxMTAvBgNVBAUTKEI1RDMzQTdBMzJBNTA4MkQzMzZCNkIwNUI3OTY1RjMw
NzQ3MEEyNzYwHhcNMjYwMTI0MjM1MjQwWhcNMjYwMTMxMjM1MjQwWjAYMRYwFAYD
VQQDDA02OTc1NWI0OC05NjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8L4TFo6+joiqYIkKoAo+/dWXm6V7dDpuvhoKy/YMY+MzcDaTNHU3WDOaX1zS
VVRf1Bo+YAZOcQdJVaRidX4dCymLKsBEr/f4MZ8soCLOI9xluil/G2bK00xbti6u
ELDJogL/1GLJYN3IOcWYex9mhu9x7kTmG5PxGai6aj7q4nh/sv5W5SnAwhl5Wd92
CmOAHs4k0FlxxrVPf9JDOPw/liryIqwGGVHWZ0GPcbb1PJZy0M6E8bcV1Yt9vyEv
6cR93P4zjAdLMiqKQG0MYoV7aQuzTfPnndLQsRSjknlGX6SjzGlSy1ik6VgOandb
4+8nbNEMJMOHlEuWrwth2/ByfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKLeMsqN
ol9+Qybbt3WBurziwM+2MB8GA1UdIwQYMBaAFLXTOnoypQgtM2trBbeWXzB0cKJ2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ0Ni8yQTFGRjU2RUM1
MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbENDMHphMnNGdDVaZk1IUndv
blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RkTTZlaktsQ0MwemEyc0Z0NVpmTUhSd29uWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MTQ0Ni8yQTFGRjU2RUM1MzUxMUVDOEU1QTAzMTNDNEY5QUUwMi90ZE02ZWpLbEND
MHphMnNGdDVaZk1IUndvblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCWtXnH/Lh3a8VSI+IV38x43N2Cys31b32sr4bdC+9RffEgNBdC/OER
d5zf/xY7SD5OTfN7mizNhwblH6TWYtBFJDSaGhXsYg3mHtqrrFgmAdfN+WTAod4u
lo5so+1DDzeT41GbxfFYr7wm+UIf5Zo49S+1VqX3jkSm4IqD8VQL3bxNO5jmQvR1
U+CJatTSZAMdiLVK/KI8qgL95M/JZlecdfNKMI1h8bFQ9Jo2RsfHct+Se0YKmvHI
nRzPtxoFVR7O6PPgB0LZGZ0v0B5gSM1zLf5OaDvQWdlZBI8nQPWiEmnQ3RP4VFxb
f4XKq8r59MzTk2jBiJflzoa329RlIzlV
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:10:22 2026 by rpki-client