This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
File: tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft (raw, json)
Hash identifier: 1KfCihCCu8BZn3OjJuQT2KRrIX+tt4a5+EcKVywP+KM=
Subject key identifier: A8:6B:9C:46:30:A4:46:49:98:5E:64:6D:3A:07:46:2C:98:B7:1D:0D
Authority key identifier: B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68
Certificate issuer: /CN=A91897BB/serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568
Certificate serial: 0800
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
Manifest number: 07FA
Signing time: Fri 16 Jan 2026 20:29:35 +0000
Manifest this update: Fri 16 Jan 2026 20:29:34 +0000
Manifest next update: Fri 23 Jan 2026 20:29:34 +0000
Files and hashes: 1: tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl (hash: /Ax7W4ynrxRTgjOqi/DYohq/yyACNHwauokXflyKJr4=)
2: E51ECC8610E711EBAD066E1DC4F9AE02.roa (hash: xKjoE/L7amuNhMSwGDrHGE81K3Mhyx0/ODd0Eq8CTmg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl
rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 20:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2048 (0x800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91897BB, serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568
Validity
Not Before: Jan 16 20:29:34 2026 GMT
Not After : Jan 23 20:29:34 2026 GMT
Subject: CN=696a9fae-ab04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9d:9f:d8:27:df:bd:61:82:9a:81:0f:c6:b9:
ca:5e:3f:a7:f5:f5:f4:e4:e5:79:10:49:82:cd:a8:
9a:40:ff:99:ed:5d:c4:66:60:92:19:b4:b3:db:ef:
ad:f3:a3:20:e6:63:d9:90:8f:44:87:43:bb:52:ac:
17:8e:9e:53:3f:8c:c9:c2:2f:21:7c:d8:e0:5f:e9:
5b:6d:87:eb:59:cb:4d:f8:4b:31:84:8c:e4:3f:15:
94:75:10:f6:52:f1:57:cd:9d:a9:af:ec:d6:5e:c7:
3c:45:db:92:a0:d1:d1:23:f4:ea:12:27:e3:9e:38:
04:67:8d:2a:6f:13:6b:92:a8:62:7a:a6:cd:cd:06:
0c:ad:6d:b9:13:39:67:b7:c2:d3:cd:93:54:4d:2e:
be:f1:bc:51:df:73:9f:0c:cb:54:66:b6:31:71:76:
76:40:db:fe:5d:94:cf:b1:1f:8a:3a:d1:3b:b2:8a:
24:c3:69:8f:92:2e:7b:43:8f:32:8b:49:a1:79:9c:
51:3f:33:42:48:f7:4a:82:b0:63:d0:92:53:d0:68:
03:4a:60:b4:8f:5f:59:3a:9f:1a:22:f0:63:82:c7:
ff:c0:38:ed:f1:62:51:4d:b8:2c:76:d1:bc:52:d1:
8d:7f:00:95:af:4b:a7:f7:97:5d:ad:90:29:4f:d6:
ed:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6B:9C:46:30:A4:46:49:98:5E:64:6D:3A:07:46:2C:98:B7:1D:0D
X509v3 Authority Key Identifier:
keyid:B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:3d:d6:9e:d5:2e:9a:f6:c6:3e:e9:11:d8:70:d5:a4:6f:20:
d5:ff:b2:59:32:67:69:d8:1d:a4:ef:e1:98:8c:34:1f:d4:e0:
3b:93:87:51:b6:9a:45:d5:8c:d1:22:f0:24:a1:d3:20:b6:e4:
33:8e:75:60:54:b4:cb:03:12:14:0a:03:f5:b7:3d:2f:2f:24:
7a:2b:89:2a:35:44:db:1f:37:e0:2f:f3:5f:ae:f4:0c:85:19:
5a:2d:ae:d9:d1:c8:a6:34:97:e0:37:08:0b:ea:db:c6:3b:20:
e3:9b:70:16:92:5d:ff:e1:1f:3a:c8:0d:ec:c1:72:42:bb:a1:
7e:0c:01:c5:eb:10:96:17:f3:fa:13:10:fc:06:dd:8c:8b:2f:
5c:b8:0b:e6:f8:a9:bc:9b:c9:9b:d0:ff:13:18:9d:7b:96:6c:
4d:ab:97:83:56:ec:e6:42:79:09:a9:c3:b1:52:4c:1e:7d:a2:
47:cb:db:6e:94:04:c7:ed:73:90:96:48:ec:4b:59:16:77:ec:
67:c0:86:c4:cc:b1:f1:a5:bb:f9:6e:96:c7:86:c9:6f:dc:07:
1a:6d:f1:9e:c0:0b:75:c2:bf:b7:de:e5:03:b1:45:05:d4:a3:
a1:a8:09:74:7f:2f:39:6f:78:40:f5:e9:68:ff:f9:50:0a:44:
6c:f8:e4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 05:25:56 2026 by rpki-client