This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json)
Hash identifier: nEbrMBH8FXbCIOOKeyngL6LB+NrHU/KiboNA7exiGY0=
Subject key identifier: BB:14:83:14:CA:77:0B:9B:69:9A:70:36:A9:43:F2:BC:3D:23:CE:38
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial: 1A1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
Manifest number: 1808
Signing time: Wed 24 Dec 2025 16:37:41 +0000
Manifest this update: Wed 24 Dec 2025 16:37:40 +0000
Manifest next update: Wed 31 Dec 2025 16:37:40 +0000
Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: /KOI0lashUQ7i5Q17KIj3f/McLLTFUrXrm3Lb+ezRUM=)
2: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: H2LNVWI/4SBtnLIxC+HsKb0Sn6SPu235wjCIk/88N90=)
3: A865A1925B1611F083088661C4F9AE02.roa (hash: Rw9T99RuNwJAGQR3ACNuRpkBbGAU9I1LWh2/O8OeLqs=)
4: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: dqGvsBo+O3A3ECQgQGmvroXEzldwim2Z97cn9HnwO7I=)
5: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: lNqOJJYDQvLu7DRWfBEiDCTTNbz1juAgLIKu2ZnWJwo=)
6: 47AAFC5A661311F09011712CC4F9AE02.roa (hash: a50VCxDM+rD8Ar8TkJi367BRkd8ietONIDl/hmG93rs=)
7: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: Y+I6xs+Ghxp/nManyHpMLzBR6d+9ACgxr4bM9Tk/9sc=)
8: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 5uITBc+pZTop6KZh3NhbY8ifInIc97Y2n3CHN/qqt94=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 16:37:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6683 (0x1a1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Validity
Not Before: Dec 24 16:37:40 2025 GMT
Not After : Dec 31 16:37:40 2025 GMT
Subject: CN=694c16d5-efb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a3:5a:b5:e7:13:e8:ef:91:cb:f6:91:d2:e3:
1a:41:f3:38:1b:d0:95:37:e4:86:a9:f5:2a:35:53:
90:15:33:98:c2:db:e3:f4:c1:20:90:a4:ac:16:aa:
c4:b7:68:25:35:d1:64:db:7d:ce:7b:a8:00:25:5f:
d9:e7:55:5a:dd:01:e6:54:15:6d:31:07:7b:24:e6:
36:ac:8f:08:ec:83:dd:18:eb:d5:cd:11:ad:7c:34:
c9:bd:14:22:db:1a:6c:87:bf:af:36:32:d4:28:56:
fe:7c:3c:e9:d4:6c:4f:ab:fe:43:13:d4:34:9c:03:
73:39:d4:bc:cb:13:c8:36:3c:28:3c:2f:7b:97:cc:
e8:c2:02:4e:d6:da:77:f7:28:69:e1:4f:4a:8d:09:
c5:f7:e4:ff:61:54:d8:da:6c:34:e5:96:08:79:60:
32:0a:04:c5:94:b6:17:d2:52:4b:14:8e:82:9c:0e:
1f:c9:ea:9f:85:82:b5:a7:94:a6:12:7d:6f:7e:b8:
4f:91:5b:90:95:e9:1f:af:21:ce:a8:69:24:10:89:
9e:51:37:fd:74:27:79:82:d9:52:ce:d0:02:16:87:
5f:5f:44:34:51:07:33:12:63:8f:1c:e3:2b:b7:85:
04:ca:ca:e0:cc:2c:a9:77:e5:ec:02:76:85:d7:ee:
32:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:14:83:14:CA:77:0B:9B:69:9A:70:36:A9:43:F2:BC:3D:23:CE:38
X509v3 Authority Key Identifier:
keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7e:6a:e1:f6:71:31:94:20:be:d3:50:7f:7b:4f:e3:59:e1:
a9:06:dd:30:34:fe:f1:29:4d:68:d1:84:94:ee:0c:17:b0:d8:
98:6d:fc:b9:ef:41:ef:6b:2e:2e:2c:59:e7:c7:23:76:6a:3f:
96:1d:1e:34:14:b3:c8:8d:1d:80:9c:78:7f:0a:c2:9b:27:f2:
4f:c6:87:75:c8:90:f0:4a:57:6e:d2:36:5a:ba:e3:9e:1c:a8:
14:2e:89:2e:a2:25:dc:9b:7b:79:95:8f:f7:f0:db:84:12:fc:
f3:08:4f:2f:06:8c:96:8c:dc:ab:6b:20:a9:38:f9:85:16:88:
56:a4:56:1a:00:6d:5f:84:72:f6:ce:5e:9a:78:de:30:ac:83:
a0:04:8c:f6:f8:5d:ce:53:a1:12:20:4b:86:f4:11:6e:bd:99:
c5:e2:a6:7c:80:7e:fb:f0:a0:e3:10:e2:da:69:4f:9b:5b:00:
d0:a2:3e:85:40:65:29:73:42:4c:fa:3b:e2:ac:e9:8a:cf:e3:
fd:51:0a:6f:07:4f:4b:e3:7b:8c:40:21:12:6c:21:c6:a2:ce:
6e:9d:84:be:b3:22:1f:26:46:26:46:4c:83:98:07:73:b9:42:
46:d9:63:b7:a5:5b:68:15:20:95:ba:ba:a8:6a:74:60:d3:86:
ef:cf:5f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 21:08:16 2025 by rpki-client