This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json)
Hash identifier: ouTa1akVlspNotoJA5hbaX7qnzSpQ+RvvaT+WoeiaWQ=
Subject key identifier: 70:B6:09:79:81:29:D7:16:5A:2D:1F:AF:60:6C:46:11:24:92:46:62
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial: 1A2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
Manifest number: 1815
Signing time: Sat 10 Jan 2026 16:36:07 +0000
Manifest this update: Sat 10 Jan 2026 16:36:07 +0000
Manifest next update: Sat 17 Jan 2026 16:36:07 +0000
Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: Jfrgh93xe+InJlXK7Y+CxFFVGJM+WEggBdETiOMFjck=)
2: A865A1925B1611F083088661C4F9AE02.roa (hash: Rw9T99RuNwJAGQR3ACNuRpkBbGAU9I1LWh2/O8OeLqs=)
3: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 5uITBc+pZTop6KZh3NhbY8ifInIc97Y2n3CHN/qqt94=)
4: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: dqGvsBo+O3A3ECQgQGmvroXEzldwim2Z97cn9HnwO7I=)
5: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: Y+I6xs+Ghxp/nManyHpMLzBR6d+9ACgxr4bM9Tk/9sc=)
6: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: lNqOJJYDQvLu7DRWfBEiDCTTNbz1juAgLIKu2ZnWJwo=)
7: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: H2LNVWI/4SBtnLIxC+HsKb0Sn6SPu235wjCIk/88N90=)
8: 47AAFC5A661311F09011712CC4F9AE02.roa (hash: NBI2SzAsfMMyvzm9HMKH7VfCX2Mv5szs8xFiRJF3X2Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 16:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6699 (0x1a2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Validity
Not Before: Jan 10 16:36:07 2026 GMT
Not After : Jan 17 16:36:07 2026 GMT
Subject: CN=69627ff7-6271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ae:87:6c:92:dd:fa:f8:69:1a:01:21:12:c0:
8c:61:ba:f8:b1:50:d2:5b:39:ca:db:bf:5a:12:86:
96:cf:91:b8:10:cf:df:99:ef:ef:00:c1:bb:c9:59:
c0:b7:7d:40:b3:a5:6a:b9:06:f6:57:d7:fe:b0:c1:
8f:c6:c5:b4:5c:40:7e:7a:36:43:4b:34:03:3a:84:
01:36:da:34:4e:4a:b3:30:94:27:67:98:4a:07:76:
92:6f:51:b8:f4:72:2b:dc:a2:c5:59:96:36:51:bb:
1c:c7:ef:d3:63:1a:db:07:10:b6:33:0a:66:06:05:
3b:d4:a3:27:5f:71:bb:e3:47:57:aa:e1:88:01:b2:
c7:37:6a:9a:5c:83:a4:b0:6d:02:1e:58:18:89:d2:
28:f8:0b:b6:40:78:14:85:94:e8:c4:d3:5f:f3:52:
93:0e:72:a1:70:ce:42:ec:23:7e:ef:fa:5a:d0:cd:
78:af:2e:c2:5c:2e:1b:f1:7d:39:88:c7:77:15:fe:
b5:54:c6:8a:29:33:e2:76:23:ae:cd:5d:2c:b7:2c:
19:a1:b2:d0:49:c4:a5:1b:8b:3b:de:c2:d1:f6:18:
57:95:18:03:d4:0f:1d:e4:90:da:fb:d2:0d:69:00:
50:0c:01:9b:c5:92:22:15:60:5c:26:59:12:c4:a7:
5d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B6:09:79:81:29:D7:16:5A:2D:1F:AF:60:6C:46:11:24:92:46:62
X509v3 Authority Key Identifier:
keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:31:e3:8f:1a:50:00:c0:96:a2:3b:3e:96:36:de:4c:66:ce:
92:bd:34:0c:ed:6b:ff:bb:57:b3:f1:8c:ff:eb:96:c3:86:2c:
a5:5c:ad:e3:c1:54:f0:d5:b9:c6:b3:6a:30:0a:e1:41:2e:39:
c8:e2:d2:9b:24:d3:95:b5:d7:d7:68:d7:74:2d:40:28:7d:bd:
e5:ce:e2:9f:98:df:9b:0c:30:71:09:36:12:93:fa:8f:b4:a1:
c4:58:18:4c:5f:63:2a:78:95:7b:e8:9c:70:ba:aa:c2:e7:9e:
2d:f5:72:93:26:7d:07:3f:07:44:77:15:b9:dc:45:64:18:74:
e7:aa:87:4b:fe:9a:5d:f4:c7:a3:4b:ae:a9:38:a8:d2:83:e3:
4c:5c:3a:d0:be:0d:1f:cd:0b:e9:8a:35:ad:26:88:f0:8c:c6:
0b:49:e6:1f:d5:89:ed:a9:d5:cf:87:39:c0:73:f8:b2:0d:77:
91:b9:6c:8e:9f:22:03:08:39:ec:22:3b:ab:e6:4d:e4:f9:84:
98:f8:64:2c:05:94:d6:49:7c:13:62:1f:0e:e4:83:7d:78:3b:
ad:f8:4f:12:1c:fc:59:77:60:61:46:4d:a7:74:2e:77:6d:32:
94:0c:db:f0:a5:f7:da:35:a7:4a:cd:c3:51:30:5b:3e:18:9d:
00:27:1f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 09:01:29 2026 by rpki-client