This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json)
Hash identifier: PPAYuwUo/5YG1xSu+yFQSBEzSd/Z6aiqU8SK9W4gJB0=
Subject key identifier: F4:76:3C:FA:98:8C:AE:19:E4:07:C1:F1:71:10:58:3B:65:B5:A3:41
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial: 1A14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
Manifest number: 1801
Signing time: Wed 10 Dec 2025 16:23:43 +0000
Manifest this update: Wed 10 Dec 2025 16:23:42 +0000
Manifest next update: Wed 17 Dec 2025 16:23:42 +0000
Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: QmhN1ISk2vYenNtO/qc4lSfbVLTB2jO057hh8jOH1H4=)
2: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 5uITBc+pZTop6KZh3NhbY8ifInIc97Y2n3CHN/qqt94=)
3: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: H2LNVWI/4SBtnLIxC+HsKb0Sn6SPu235wjCIk/88N90=)
4: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: Y+I6xs+Ghxp/nManyHpMLzBR6d+9ACgxr4bM9Tk/9sc=)
5: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: lNqOJJYDQvLu7DRWfBEiDCTTNbz1juAgLIKu2ZnWJwo=)
6: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: dqGvsBo+O3A3ECQgQGmvroXEzldwim2Z97cn9HnwO7I=)
7: 47AAFC5A661311F09011712CC4F9AE02.roa (hash: a50VCxDM+rD8Ar8TkJi367BRkd8ietONIDl/hmG93rs=)
8: A865A1925B1611F083088661C4F9AE02.roa (hash: Rw9T99RuNwJAGQR3ACNuRpkBbGAU9I1LWh2/O8OeLqs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Dec 2025 16:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6676 (0x1a14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Validity
Not Before: Dec 10 16:23:42 2025 GMT
Not After : Dec 17 16:23:42 2025 GMT
Subject: CN=69399e8f-033b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c6:e9:e5:11:47:6a:9b:a3:df:75:63:0e:16:
7b:a9:8e:d9:37:8a:22:73:fd:0e:4a:dc:45:d0:81:
07:9b:3a:f4:5a:db:dc:44:52:c6:a3:07:eb:3d:05:
58:52:dc:70:90:5d:da:1b:98:c6:64:9a:11:0b:ba:
b4:3c:ad:4a:b0:34:3e:56:66:f7:68:20:80:4e:6e:
a4:9d:14:c2:1c:3e:34:d0:30:57:36:79:e1:63:e9:
7f:10:be:36:ca:26:5d:95:b2:58:db:d5:b8:ec:5d:
44:f0:94:ea:b3:db:ef:84:36:01:ea:72:9c:9f:1f:
08:ff:49:e5:d2:66:4f:f6:18:db:d6:57:65:30:54:
e8:6a:79:f0:91:ee:02:45:09:35:10:6a:d3:c3:2a:
93:fa:d8:f2:9c:3b:c2:85:6d:ea:a3:b1:49:83:9c:
e0:f8:a6:4c:65:dd:8f:c3:80:6f:63:3b:8b:cc:66:
4e:a3:b1:38:71:bd:16:15:b2:32:ac:a7:39:3f:9f:
1b:98:2e:69:54:7d:78:70:31:23:1e:cd:51:db:02:
72:26:5f:3d:c7:81:6b:34:9f:cb:1e:f4:57:e1:71:
d1:f1:af:77:d0:0a:5b:a2:c4:2a:b0:8c:14:8b:ed:
60:59:c0:d2:a9:12:3a:df:6d:89:de:33:26:b9:ed:
02:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:76:3C:FA:98:8C:AE:19:E4:07:C1:F1:71:10:58:3B:65:B5:A3:41
X509v3 Authority Key Identifier:
keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:f5:69:5d:5f:f9:58:43:cf:68:17:55:31:e7:08:3b:47:65:
d2:16:b0:22:16:81:82:b5:85:59:06:0f:c6:c5:c3:47:a9:b8:
c2:69:76:2f:f9:79:b0:0e:b1:01:e1:9f:77:bc:a7:db:67:b5:
57:4b:f5:2e:0a:25:1b:ad:76:7e:80:88:91:c4:29:f8:0a:ed:
24:89:bf:22:d9:85:86:9e:44:e5:42:54:d2:db:8e:bb:13:53:
76:7c:c4:ec:34:0b:9a:0b:c4:e1:d7:81:7d:2e:cc:43:ae:8d:
09:60:57:e7:92:ea:6b:57:93:d9:bf:f9:9c:9a:87:c6:94:31:
2e:80:8e:a7:db:79:9f:89:c3:bd:e5:37:41:8c:09:0c:1f:2a:
61:ee:29:04:85:3c:18:c7:50:0e:8c:02:3a:5e:56:ce:fb:bb:
4e:a3:19:4f:14:ee:ec:e8:40:e3:58:69:db:93:72:cb:27:8a:
23:5b:f3:f4:2c:46:de:d7:0b:eb:5b:9c:07:8c:6f:1e:d1:25:
55:0c:e0:ff:97:46:9b:c7:c4:10:f3:7d:af:bd:23:3b:56:f1:
45:e7:5a:c8:70:39:f1:05:b7:a7:ee:c1:8a:8c:58:cb:b1:0d:
a4:63:aa:54:60:12:d5:f2:f4:79:c0:eb:bd:fc:51:5d:8f:33:
ab:ac:85:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 16:23:33 2025 by rpki-client