This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
File: tKlqre7ce-3VfWL8mknqCz_29Qw.mft (raw, json)
Hash identifier: syO/xG84ORax1l08f6tCZqruJ1nA5Q1LZspeAVp5ygs=
Subject key identifier: 4D:A5:05:05:FE:A8:AA:3C:48:03:2D:82:76:74:30:D5:0F:1C:1F:C8
Authority key identifier: B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C
Certificate issuer: /CN=A916A983/serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C
Certificate serial: 12FD
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
Manifest number: 12F5
Signing time: Tue 20 Jan 2026 16:46:37 +0000
Manifest this update: Tue 20 Jan 2026 16:46:36 +0000
Manifest next update: Tue 27 Jan 2026 16:46:36 +0000
Files and hashes: 1: tKlqre7ce-3VfWL8mknqCz_29Qw.crl (hash: Q5dSF0+UpDQ+ZuNMQQeQUQoy2qsplzgBtE4G5YgL7LY=)
2: 1C839F861BA111EA8BDD6114C4F9AE02.roa (hash: QOShMQ6mMEZRjJ5JESydTLr4xwZz//rE2YbhLSt51RI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl
rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 16:46:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4861 (0x12fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A983, serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C
Validity
Not Before: Jan 20 16:46:36 2026 GMT
Not After : Jan 27 16:46:36 2026 GMT
Subject: CN=696fb16d-6449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b1:95:f2:bf:62:6f:4b:88:42:6b:dc:9f:ff:
d8:b5:c7:3e:7c:3d:22:e7:2f:fb:ad:c8:98:0a:7f:
96:e5:8d:c2:98:60:23:24:b4:6e:7f:23:bb:50:62:
26:1c:00:fa:cd:b1:58:91:74:82:ad:e9:70:d2:d1:
65:8b:80:86:cc:d5:47:91:09:96:ad:ce:c7:26:b9:
55:bc:e6:e8:e5:ed:da:16:2d:50:ed:67:83:b5:4a:
6c:7c:1d:d8:e9:1e:25:d4:de:2b:22:07:bc:06:f6:
1e:37:76:03:69:a4:3b:40:35:f4:6a:de:37:93:d4:
7e:06:fd:88:53:73:96:d4:0c:b9:1c:92:0a:d2:de:
0d:87:8b:8e:c5:c9:08:41:c3:66:d2:99:90:97:c8:
4b:81:ae:24:f6:6a:40:fe:b3:ea:69:c8:8a:46:a7:
f6:44:79:f2:44:ea:4b:3c:cb:f1:01:8c:19:59:7d:
f8:ad:79:ba:a7:7c:7e:72:56:8e:9b:50:ce:99:93:
c3:01:ae:84:f5:d9:ae:e4:71:13:d8:63:54:ae:6c:
d3:1a:7a:c9:0a:b9:4e:ad:3b:49:4b:3e:23:80:74:
a6:ee:b0:dc:ab:ce:0f:2f:95:1e:70:f1:6b:87:b2:
d4:0b:f7:13:09:a7:77:43:c7:6f:00:c9:d3:40:62:
b0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A5:05:05:FE:A8:AA:3C:48:03:2D:82:76:74:30:D5:0F:1C:1F:C8
X509v3 Authority Key Identifier:
keyid:B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c1:ec:06:6e:6b:e5:14:c0:27:fa:e2:59:52:5c:d5:bb:f1:
75:8d:76:ce:d3:00:39:a5:84:b5:e2:aa:b0:06:95:f1:53:7c:
09:c1:91:8e:53:b1:c6:48:60:6b:ff:67:e8:cf:c1:df:eb:86:
e6:a2:83:eb:c3:fd:7b:6c:33:13:6a:fc:1f:9d:df:37:2e:ab:
11:e7:51:36:27:2f:3e:af:af:88:a9:21:18:e6:9a:b3:5b:95:
d2:6f:ec:30:a6:31:88:9c:c7:69:9a:fd:f4:91:54:07:4c:7d:
7c:20:3c:de:31:e5:a6:e7:c5:dc:e7:fe:5d:3f:8a:7e:de:c5:
f5:7d:96:89:83:76:66:d7:2c:c3:ec:51:8e:f2:42:6a:b7:60:
6e:db:43:fb:6c:70:2c:f1:b5:db:71:7c:f3:1a:a6:1c:6a:4f:
1c:5e:b5:56:aa:9c:2e:50:39:76:9b:68:c6:ab:35:62:7b:e4:
21:23:23:46:1f:ea:b8:cd:32:b4:8b:0d:fa:78:0d:86:a3:d3:
28:02:89:6e:57:37:b1:fb:40:08:6d:1e:d2:71:06:ea:6d:d8:
49:e3:d9:37:22:ce:18:7e:7a:f2:d7:6a:dd:11:1f:ea:43:66:
ea:2b:2b:57:ea:81:6b:3e:dd:c4:1d:3d:8b:81:01:9c:f7:35:
10:ec:01:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 22:09:01 2026 by rpki-client