This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json)
Hash identifier: 1qBPRVlCF/Uhf8ehUiOON4rpOEz0a0HyaLBSk0AvCtw=
Subject key identifier: 5E:C9:90:F0:78:0B:8B:91:62:B3:06:BA:D0:CC:95:B7:60:6A:2F:85
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial: 1A4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
Manifest number: 182C
Signing time: Mon 02 Feb 2026 16:43:52 +0000
Manifest this update: Mon 02 Feb 2026 16:43:51 +0000
Manifest next update: Mon 09 Feb 2026 16:43:51 +0000
Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: nxWSP2LW/jWbO2y6ry92Lixs3Vr6jboszzJwsw/+ELc=)
2: 11E8BC20FFE611F0A90394AA756F56BC.roa (hash: vppnJfYJe6zVwO+h6lFIzWjo2MRbQB2VJ2ft+A/VSmc=)
3: A865A1925B1611F083088661C4F9AE02.roa (hash: Rw9T99RuNwJAGQR3ACNuRpkBbGAU9I1LWh2/O8OeLqs=)
4: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: Y+I6xs+Ghxp/nManyHpMLzBR6d+9ACgxr4bM9Tk/9sc=)
5: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: lNqOJJYDQvLu7DRWfBEiDCTTNbz1juAgLIKu2ZnWJwo=)
6: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 5uITBc+pZTop6KZh3NhbY8ifInIc97Y2n3CHN/qqt94=)
7: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: H2LNVWI/4SBtnLIxC+HsKb0Sn6SPu235wjCIk/88N90=)
8: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: dqGvsBo+O3A3ECQgQGmvroXEzldwim2Z97cn9HnwO7I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Feb 2026 16:43:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6731 (0x1a4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Validity
Not Before: Feb 2 16:43:51 2026 GMT
Not After : Feb 9 16:43:51 2026 GMT
Subject: CN=6980d448-3aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1b:4a:56:c1:92:34:f9:c1:12:87:15:5f:b1:
37:2c:f9:2c:69:9a:b1:d9:cd:68:68:85:81:66:44:
4a:fd:09:bb:55:53:27:bf:57:32:06:cd:9b:da:0e:
2c:53:f0:00:f2:59:c6:c0:f4:44:3b:d9:00:4a:f7:
86:59:0e:3e:3d:1e:94:56:00:f1:c0:1c:33:e5:ad:
37:21:95:7b:c2:0c:83:61:08:55:e7:50:dc:d1:d1:
d1:2e:aa:f0:33:35:da:ae:75:b3:24:5b:2a:3c:74:
86:60:60:8d:a4:08:e6:a0:53:e0:d3:68:fe:76:a2:
26:85:b6:89:91:55:4e:f6:7f:c7:64:4e:a2:bb:6f:
1d:a4:77:da:c2:07:5e:48:f8:3a:46:2f:96:81:ad:
73:9d:a9:5e:a6:4b:2e:33:66:7e:3c:69:59:22:6c:
50:d1:a7:ed:5b:12:25:a8:00:47:7e:3a:33:ae:2c:
cb:f6:b0:1f:d1:a2:60:ab:fb:d4:35:a8:08:95:8b:
19:3d:21:c0:4a:4d:85:cc:e0:5b:92:60:31:7a:a2:
82:fe:12:f7:af:f6:9c:4b:ec:32:a5:9e:84:9e:ad:
d0:70:33:79:0f:92:bd:d9:19:1b:6d:66:90:d0:d7:
e8:df:23:90:14:5a:ef:70:65:95:19:cf:7d:e4:c5:
e5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C9:90:F0:78:0B:8B:91:62:B3:06:BA:D0:CC:95:B7:60:6A:2F:85
X509v3 Authority Key Identifier:
keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:c2:f3:f9:68:94:7b:3a:f0:36:86:a7:0f:53:d9:e1:3b:57:
07:3e:24:35:d3:5a:21:bb:28:af:46:b4:52:30:dc:49:86:d4:
ee:9c:21:6e:29:82:b2:7e:e1:03:88:9f:a0:d9:74:69:07:9f:
0c:b5:f7:ec:5b:31:7f:ac:86:60:eb:e0:a1:62:3c:74:75:9f:
2b:19:f4:83:31:b0:96:b4:54:7d:f4:53:a4:c3:5e:ad:9b:5b:
f5:fa:c3:61:8d:c6:3e:c1:73:57:3b:2c:25:74:5d:76:f8:b4:
5d:3f:c0:98:15:d2:05:14:eb:fe:0c:61:2c:9c:94:b8:66:d7:
a8:19:ae:98:38:cf:29:e3:3b:78:6c:de:5d:19:29:bb:9b:5f:
0d:f5:81:33:d0:ce:ae:f9:8b:aa:de:7c:a6:48:a1:4d:7f:53:
ec:b7:33:cd:be:23:0b:c5:e9:d7:f7:b8:c7:be:47:d2:12:84:
fd:69:be:4b:31:17:c7:12:ba:56:a4:13:5d:50:d8:2e:ca:1c:
ef:9c:50:35:d8:f9:95:8f:18:23:1a:80:ba:9f:69:22:9b:25:
8c:73:3e:cc:25:7b:bc:08:3b:b5:a6:5f:aa:6c:61:a3:05:94:
7f:61:cc:72:1b:70:50:8d:ec:8a:2b:be:04:15:08:a7:48:aa:
5a:6d:06:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 12:57:42 2026 by rpki-client