This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
File: TuVApIrZc_vYMavQJgO1-w-5Rb4.mft (raw, json)
Hash identifier: J5DzZeDW4pJrm8qPsd5Unechuy6N/eVXkqsUcuwFr2I=
Subject key identifier: 8D:84:E5:DA:8F:B6:87:5F:E3:1E:1E:8B:A5:B3:6A:D6:92:30:90:D8
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial: 18F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
Manifest number: 187D
Signing time: Mon 26 Jan 2026 16:17:30 +0000
Manifest this update: Mon 26 Jan 2026 16:17:30 +0000
Manifest next update: Mon 02 Feb 2026 16:17:30 +0000
Files and hashes: 1: TuVApIrZc_vYMavQJgO1-w-5Rb4.crl (hash: 7wogG45cdfk4J9qg5/QqXIC+vFCUD/4viMWy1yc7oD4=)
2: 2F268460A40311EFBD995535C4F9AE02.roa (hash: Nc9fjbQQaQM2ngJvCwaCgEuj+SZKkpHjO1qgG0sZIHg=)
3: 2F903356A40311EFBD995535C4F9AE02.roa (hash: uO169iwF7Z+iK825Wy21kUBoHTcQcMmcJT8QN4XB2IQ=)
4: 4ACF06E24CE111F08EB6EB2AC4F9AE02.roa (hash: Efx4cvLJwgDVDbTYOOkuaG1d46gN7cwEwLt6snlfZA0=)
5: 1760C2F0DE0F11EFBC253748C4F9AE02.roa (hash: G2dT/aqsMx0KoCwmXvgkhmTnoPOvK+397UePsMgxeC8=)
6: 0BC405C092CD11EFB1C8E669C4F9AE02.roa (hash: pLQhbQ0mTRBssMztKv86DK/TOvY561i4aTIXdGlEvzU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Feb 2026 16:17:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6393 (0x18f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Validity
Not Before: Jan 26 16:17:30 2026 GMT
Not After : Feb 2 16:17:30 2026 GMT
Subject: CN=6977939a-3f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:79:97:d1:5f:2e:0f:33:e4:05:58:a8:71:
57:d9:f8:46:63:31:cc:1c:7a:be:c2:ae:54:8a:6e:
5b:28:90:eb:8a:6f:62:be:d8:b4:a2:92:92:31:12:
40:4d:14:98:bb:eb:c9:80:b7:a2:df:9a:f9:f5:e1:
a6:1c:03:9e:bb:e4:f7:3a:d4:47:03:7c:54:98:00:
e9:8d:0f:92:0a:3b:09:75:1d:b4:54:9b:10:77:cc:
b7:ba:11:e4:89:9c:11:aa:aa:12:62:1d:03:5d:3b:
3f:af:74:19:7a:f0:fa:d2:07:c9:dc:a6:15:85:80:
bc:ac:ce:28:e3:13:bd:a7:c0:49:73:79:b8:68:a2:
55:3a:12:ba:7d:80:8c:14:d8:22:5b:91:68:d5:5b:
63:2d:d0:b3:6f:3e:5e:23:1c:5d:a9:4d:ef:d2:d2:
4b:6a:c0:1d:14:9c:6d:9e:27:42:68:cc:45:21:22:
4e:f3:6b:d9:e8:0e:70:d9:c3:37:f9:15:66:c6:8f:
9a:19:97:80:2b:02:ac:64:46:f2:e4:54:43:8b:9e:
1c:fb:de:0f:5d:f9:70:18:97:93:bf:81:4a:ba:3d:
cb:2b:d3:07:5b:4f:c6:af:89:65:a3:a2:72:b8:61:
49:bb:cd:98:c0:4c:a6:b2:d4:52:79:e1:25:74:b5:
1e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:84:E5:DA:8F:B6:87:5F:E3:1E:1E:8B:A5:B3:6A:D6:92:30:90:D8
X509v3 Authority Key Identifier:
keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:61:a3:32:b0:84:f7:2c:23:12:aa:6f:74:7c:78:e8:e9:21:
bf:80:8f:dd:81:d7:8b:bf:2a:5a:f2:b2:1d:a5:65:c2:22:7e:
4c:91:03:85:0a:52:8c:b4:a7:41:4f:4d:c8:97:94:35:d3:27:
12:07:8d:66:f9:01:b2:cd:ab:da:ef:a3:06:ee:35:56:11:34:
f6:6c:4f:db:1c:0a:e6:c7:af:ca:4b:3f:d2:8b:90:76:99:99:
8c:ae:6a:c1:78:c7:08:34:87:d2:68:6a:7f:b7:eb:13:27:ba:
d0:71:e1:63:f2:d3:26:59:a7:5e:c9:7d:cc:5c:bc:8d:f0:2a:
c0:46:17:ef:e4:fb:5d:f7:df:db:f0:5b:6a:ea:61:f4:9b:75:
67:26:a8:3a:d0:ee:95:a0:2c:ff:6d:cf:e5:49:ad:9b:0e:bb:
6a:a5:20:00:3c:84:76:e5:03:15:ec:72:77:8e:9b:76:2e:fb:
e7:4c:5b:80:14:31:47:84:02:52:c2:2e:df:e4:05:2c:20:ed:
df:06:42:22:8f:39:eb:2a:dc:a6:91:b6:be:52:94:f2:89:43:
3e:4e:89:f4:ef:a4:2b:93:66:0b:7c:43:99:29:ec:44:e1:b0:
37:3b:ba:6a:4a:b2:17:a0:c9:0b:34:73:99:6f:5f:8b:e9:71:
55:8d:be:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 13:23:18 2026 by rpki-client