This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
File: rtgBDeTSP_TQ-QBbrJJb23898wo.mft (raw, json)
Hash identifier: 12L9L71B7qq8NidOQRnKE7UjwVBRbM6F4REtv0ohAGI=
Subject key identifier: 9F:65:7B:20:E6:07:D2:61:21:C6:8B:74:49:D4:60:41:4E:EE:88:89
Authority key identifier: AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A
Certificate issuer: /CN=A91651CF/serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A
Certificate serial: E8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
Manifest number: E4
Signing time: Tue 23 Dec 2025 04:27:23 +0000
Manifest this update: Tue 23 Dec 2025 04:27:23 +0000
Manifest next update: Tue 30 Dec 2025 04:27:23 +0000
Files and hashes: 1: rtgBDeTSP_TQ-QBbrJJb23898wo.crl (hash: cAMXa5oV1HlYDYnLTb6JJKVBPdO71TakRGtj4SMylRg=)
2: C6CDBA3E3B9A11F0B7924C1FC4F9AE02.roa (hash: RbKkyjXke83zBAWzSPfYjpUNrMECuKEikKXztzGqzuI=)
3: 029673283B9E11F0AA109D6CC4F9AE02.roa (hash: 441G8b4LgkMuxEvi6rr2h+MeNX8DO9NZrdStvzuDXU8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl
rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 04:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91651CF, serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A
Validity
Not Before: Dec 23 04:27:23 2025 GMT
Not After : Dec 30 04:27:23 2025 GMT
Subject: CN=694a1a2b-bf8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:95:20:44:f4:f3:4a:f9:f4:d3:b6:c5:54:09:
ef:3e:53:fe:fa:10:7a:91:7c:df:b7:d4:68:21:d8:
0e:af:a2:6e:0f:b9:c7:7d:bb:b0:57:18:c7:cb:eb:
7e:24:1a:81:30:2e:f0:ff:42:9c:c4:f5:96:96:e0:
e2:87:23:9f:6f:20:ef:43:af:e0:81:7e:1b:67:83:
d5:49:af:c9:59:22:0d:2b:ab:d2:12:a0:a4:17:cd:
63:8f:e5:2d:83:d7:69:f8:a7:90:dd:2f:57:50:87:
30:3f:76:48:c2:65:02:65:7f:dc:09:15:b3:4d:9d:
00:e3:df:d6:52:4a:2c:85:88:b3:46:0d:35:4d:f4:
a5:73:5f:60:ab:6d:79:6c:af:b7:5a:af:18:de:96:
ba:2d:e4:47:b6:50:dd:fb:3a:0c:e3:77:ca:46:1b:
a2:62:e6:d0:bd:2d:7b:55:4f:35:0e:b0:44:ad:72:
58:a3:9f:44:14:7d:93:8b:67:ab:15:8d:bd:40:ad:
db:c8:85:1a:78:54:c2:d0:24:dc:4a:01:07:9e:b6:
76:a8:bb:6e:6d:11:08:10:ea:e8:9d:2c:75:5a:7c:
87:e6:ed:83:9d:1e:1d:a2:3b:14:ce:a7:79:ff:e4:
61:01:23:00:7e:ba:b9:51:60:9e:43:1d:b2:a9:fe:
f6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:65:7B:20:E6:07:D2:61:21:C6:8B:74:49:D4:60:41:4E:EE:88:89
X509v3 Authority Key Identifier:
keyid:AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:87:cc:ed:2e:85:00:fa:5b:09:a3:72:3a:10:9a:94:cb:f3:
3e:c5:38:b5:97:2f:2b:c4:66:e7:69:bd:84:d0:07:f4:2d:0d:
6f:47:f2:9e:49:a0:65:36:ab:f1:fd:18:a0:52:ec:98:7e:c9:
bd:38:01:e6:a9:a9:61:be:51:5d:89:be:d9:34:7f:d8:05:ef:
9d:a3:f8:d0:b0:65:5e:9d:f2:35:3f:1e:4f:78:f7:2b:ae:af:
a1:3e:f4:42:39:8b:a8:1b:f3:76:85:78:db:c9:9e:b4:3b:40:
d5:34:ec:80:8f:83:68:b1:35:0f:df:13:48:6d:78:28:b4:73:
d3:18:06:4d:b8:a2:c8:9c:9f:95:33:bf:bc:d9:82:04:03:29:
20:cd:dc:87:60:26:1d:80:bb:e3:f7:e8:a5:87:55:55:96:9d:
4a:72:b4:57:2c:25:5c:43:cb:f9:6f:db:69:e3:62:65:fe:d4:
a1:ae:dd:60:22:19:c2:13:96:c9:8d:37:12:56:2d:fe:5c:86:
56:11:b0:cb:67:3f:5d:72:6b:33:7f:7d:d1:84:f1:01:06:08:
b8:6a:f2:09:37:4b:3c:ed:9c:e2:be:dc:f2:af:d2:b7:e9:34:
69:cf:f9:25:db:57:27:20:9f:f1:a9:6c:bf:a6:ec:ea:1c:4f:
d2:96:c2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 23:01:04 2025 by rpki-client