This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json)
Hash identifier: aGYbbgQ7hT+d133WPvZEJZ5CSuhrkLKRz92MkveL4+g=
Subject key identifier: F2:08:24:00:0B:84:30:FE:5E:07:23:C3:1F:74:E8:84:75:C4:35:A0
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial: 1A43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
Manifest number: 1827
Signing time: Sat 31 Jan 2026 16:36:21 +0000
Manifest this update: Sat 31 Jan 2026 16:36:20 +0000
Manifest next update: Sat 07 Feb 2026 16:36:20 +0000
Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: 0v6l5hnJX/36oI1QQeslkk03xCpbbbvpxXX3GCiLOIs=)
2: CACD55A2F04611F087BCEF76546F56BC.roa (hash: 1U1Fd4t2YRi0fU8MQWqgTVD6JsOngQ62vewQPl3JSa4=)
3: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: lNqOJJYDQvLu7DRWfBEiDCTTNbz1juAgLIKu2ZnWJwo=)
4: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 5uITBc+pZTop6KZh3NhbY8ifInIc97Y2n3CHN/qqt94=)
5: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: H2LNVWI/4SBtnLIxC+HsKb0Sn6SPu235wjCIk/88N90=)
6: A865A1925B1611F083088661C4F9AE02.roa (hash: Rw9T99RuNwJAGQR3ACNuRpkBbGAU9I1LWh2/O8OeLqs=)
7: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: dqGvsBo+O3A3ECQgQGmvroXEzldwim2Z97cn9HnwO7I=)
8: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: Y+I6xs+Ghxp/nManyHpMLzBR6d+9ACgxr4bM9Tk/9sc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Feb 2026 16:36:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6723 (0x1a43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Validity
Not Before: Jan 31 16:36:20 2026 GMT
Not After : Feb 7 16:36:20 2026 GMT
Subject: CN=697e2f84-bff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:6a:b6:52:46:72:eb:76:e7:66:dc:94:7c:
2b:fd:03:00:15:19:a8:9e:f2:4b:d1:97:c4:0e:6a:
e7:db:be:74:dd:11:2f:c3:c3:1b:9c:38:64:30:91:
6b:c9:93:81:b0:7c:29:f0:9f:3c:91:39:f0:5b:52:
7d:49:18:0f:64:73:f1:9d:8e:e5:14:54:5c:10:19:
29:25:40:7b:92:7c:1c:d9:37:a9:44:41:7e:37:19:
a4:f9:9b:52:71:ad:0e:8c:e4:79:72:2a:76:3f:30:
d9:fe:80:66:1e:40:10:9b:91:26:11:e2:b5:e6:a6:
4f:fa:7f:92:4f:e0:78:49:33:04:34:2a:00:5b:4e:
07:60:61:8a:a0:ec:b1:47:f4:2e:3b:33:41:07:0a:
72:f6:3f:db:66:05:ae:3e:ee:12:9d:1b:29:86:a6:
5d:7b:9f:eb:b5:4c:4e:60:18:cb:59:c5:8f:3c:d4:
b0:47:25:58:77:52:89:31:4c:ae:96:42:c4:38:1a:
d6:4d:27:f0:43:8d:47:8b:fa:09:14:f1:8b:d6:e7:
c6:22:af:54:f6:af:fd:5f:cc:40:1b:2d:62:c0:03:
3b:6a:d3:95:f3:9a:7d:48:fd:e7:e3:98:b2:b7:b9:
0a:66:ce:3c:ca:5d:ed:90:b1:10:30:42:f8:b3:57:
ff:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:08:24:00:0B:84:30:FE:5E:07:23:C3:1F:74:E8:84:75:C4:35:A0
X509v3 Authority Key Identifier:
keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:95:ed:c8:9e:9d:19:d6:37:44:1e:52:85:85:34:fe:6e:c3:
9f:04:db:49:99:5d:79:ea:5a:07:c7:14:3a:64:bc:a9:81:fd:
33:7c:2b:6e:be:e8:4c:01:c3:bc:31:8e:21:46:e7:4f:00:9c:
7b:46:3e:a9:6a:07:91:5c:da:c4:00:2b:92:51:28:fc:b3:b5:
32:31:c2:d4:be:12:70:1d:ff:9c:a9:d5:3f:24:6f:9c:66:33:
3b:63:af:03:81:42:f5:37:d2:0c:fb:5e:1e:88:da:41:2d:1e:
2f:35:81:2f:07:03:d4:fc:a5:49:95:f2:4c:73:cd:ac:a1:2d:
a2:bf:e1:a4:fe:e1:e4:60:1e:a2:ab:5f:4b:63:4a:fb:70:7b:
cb:6b:fd:83:fd:52:72:b3:6a:e4:b7:76:dc:81:03:21:1f:51:
39:a7:b3:fa:b6:4a:c6:c3:f6:f0:a7:b6:f6:54:e2:05:e8:40:
54:c0:0d:3d:29:c5:cd:d1:97:7c:b2:66:c3:55:39:62:eb:70:
b3:d3:7d:7e:74:35:f6:5c:db:40:d4:f8:6c:fa:de:fa:23:f8:
ae:d1:ac:01:22:c6:d0:93:7a:47:a5:bb:e6:20:09:67:f2:79:
03:ec:5c:59:a6:c5:7f:98:67:ec:02:a5:83:92:02:2c:4f:c0:
3e:76:24:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 1 12:44:10 2026 by rpki-client