This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
File: TRdqC0V6blaV03p-y43LOnPLSBI.mft (raw, json)
Hash identifier: R3hkm+vOaAQqWudbUxPFakuPRXxTPFGjo7IfEbCVGTM=
Subject key identifier: D1:67:E1:E5:9F:5C:1F:CA:3D:73:4E:25:B1:2D:ED:DD:8E:27:41:30
Authority key identifier: 4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12
Certificate issuer: /CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
Certificate serial: 12AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
Manifest number: 127D
Signing time: Tue 20 Jan 2026 16:50:10 +0000
Manifest this update: Tue 20 Jan 2026 16:50:09 +0000
Manifest next update: Tue 27 Jan 2026 16:50:09 +0000
Files and hashes: 1: TRdqC0V6blaV03p-y43LOnPLSBI.crl (hash: XyH64VfB4+ip+oUwgdAt5iHcyUBq88VMvw9kGPM/2EU=)
2: FDBAF28A0DD911F083E3DA5FC4F9AE02.roa (hash: 4yK1Zcme53gjRZmXcK6ZoAjzo2DEGn6xuUISutzXhng=)
3: E7C319C60DD911F0A4D25B5FC4F9AE02.roa (hash: dU6kBxmMrBC21S6m5pc9vdpwA6Vt09xl7536xrmnrys=)
4: 20FA35820DD811F08B2CB42FC4F9AE02.roa (hash: MFGsF5s0PywfTQyvPPsd0Or8v7E52MYn4RYdbArMgM4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl
rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 16:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4779 (0x12ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A8A4, serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812
Validity
Not Before: Jan 20 16:50:09 2026 GMT
Not After : Jan 27 16:50:09 2026 GMT
Subject: CN=696fb242-01ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:66:df:94:f8:30:8c:24:18:77:7b:7c:1f:32:
87:13:c5:a8:9e:0f:ed:83:e6:1c:8f:19:78:da:a5:
2e:92:06:f9:fa:76:60:66:af:aa:b0:e7:42:06:7a:
f5:bb:82:84:1c:c9:b1:0d:f3:dd:e3:2d:6a:9c:7f:
ec:ab:3d:78:f5:99:16:b7:a4:a0:91:3c:a9:50:de:
4c:5a:c1:96:37:e5:16:8d:2b:6e:06:c1:85:0f:b1:
4a:3a:7a:61:22:1c:5b:d2:f6:72:2a:60:49:43:44:
fb:4c:5d:15:f6:c8:b3:79:01:89:53:48:af:8a:3c:
c4:6a:84:c4:da:7a:8e:2a:3d:1e:0c:92:5c:42:78:
f2:d6:71:6f:1b:55:c4:d4:19:58:f9:66:1b:5c:92:
1b:cc:68:d5:3b:7b:98:fa:8c:86:bc:fd:80:aa:92:
49:c5:fd:68:04:b9:5c:32:0b:ef:42:1f:61:b6:fd:
7d:5c:38:1e:43:f0:8c:8e:03:d3:cd:d9:df:fe:04:
68:16:4f:63:3f:1f:b0:b7:96:97:1b:63:54:05:9e:
00:70:21:b6:dc:1c:bb:a1:28:86:a2:b0:fd:89:bf:
02:81:74:49:3e:8a:35:db:a9:f7:20:2d:e6:77:09:
26:9f:17:2e:e5:98:ff:6a:17:7b:5e:71:36:a4:c8:
03:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:67:E1:E5:9F:5C:1F:CA:3D:73:4E:25:B1:2D:ED:DD:8E:27:41:30
X509v3 Authority Key Identifier:
keyid:4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:b0:de:ac:c2:e7:b0:15:41:72:d3:12:ec:5b:45:19:69:83:
8d:ba:c0:1d:b5:bd:c8:d8:a3:2f:d3:47:4a:55:b6:3c:e8:e9:
e4:de:de:db:b2:e4:ad:03:ff:0a:d1:11:2d:83:68:a3:fc:36:
cc:7f:2e:80:7d:c9:a7:27:30:5b:88:8b:74:9b:77:bd:23:fc:
b0:1f:b3:82:95:15:56:0d:12:2c:3b:0c:56:5c:dc:e3:58:bf:
05:28:04:7e:01:df:e5:76:7f:1d:71:e5:5e:bd:4f:d0:c8:bc:
86:b2:f7:26:bf:a2:69:f7:8a:0a:d2:2a:5c:56:dd:97:5d:29:
19:8e:3d:32:e2:a5:f7:57:d9:f8:d4:0a:50:17:93:4c:90:e3:
66:18:9b:4e:bb:98:03:27:29:af:ec:4f:c7:8b:61:39:2a:4f:
6f:2a:60:ef:12:29:36:7d:a7:06:2c:36:be:cb:b9:a7:1a:cf:
21:a6:df:0b:5a:d3:45:b2:d6:31:0b:e3:da:a4:84:44:a5:7e:
13:3e:b8:e6:21:51:45:10:06:ea:97:66:eb:af:a3:c9:c8:67:
1a:4c:c9:fd:3e:e3:be:c8:19:a2:46:ff:72:ab:a4:43:8f:ef:
8b:1c:43:fd:af:c4:b9:32:d0:96:c4:0a:53:e5:12:5b:36:27:
16:6c:39:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 22:45:16 2026 by rpki-client