This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft
File: tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft (raw, json)
Hash identifier: p7kaTcSM2jYXKjjp5Bi0iYbxCJ3SrG5ZnxLGj/W4K/o=
Subject key identifier: F7:5A:C5:86:CC:02:7D:B7:3A:F9:CE:18:AA:0F:A0:0F:5E:97:76:B6
Authority key identifier: B6:94:A8:C5:28:F0:B9:A4:D4:53:BC:44:20:E5:0B:51:9D:CF:D0:AB
Certificate issuer: /CN=A91994D1/serialNumber=B694A8C528F0B9A4D453BC4420E50B519DCFD0AB
Certificate serial: 1C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft
Manifest number: 1B
Signing time: Fri 16 Jan 2026 20:14:09 +0000
Manifest this update: Fri 16 Jan 2026 20:14:09 +0000
Manifest next update: Fri 23 Jan 2026 20:14:09 +0000
Files and hashes: 1: tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl (hash: zUZEt8OjZKoNk6MMRKLRq1zaZ6CAPOl2dKbtXdumjyI=)
2: 527245ACD42311F0A8A37057C4F9AE02.roa (hash: JAe8IRDZjRhBc/cJ3AbxdISllVbM5/bUgdQx1DGqHrM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl
rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 20:14:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91994D1, serialNumber=B694A8C528F0B9A4D453BC4420E50B519DCFD0AB
Validity
Not Before: Jan 16 20:14:09 2026 GMT
Not After : Jan 23 20:14:09 2026 GMT
Subject: CN=696a9c11-18f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:22:8a:6b:c8:b5:ce:41:df:78:4a:9b:da:
68:68:cb:b2:88:81:aa:15:1f:00:50:75:69:5a:85:
45:92:72:7d:6a:5f:82:84:7b:5c:8d:b4:a2:5f:08:
d2:07:36:21:3f:ae:d2:c9:3f:a1:29:79:ec:e9:60:
83:a3:cb:d7:13:a2:74:ab:6e:58:86:dc:38:f5:4c:
10:81:68:8d:c2:13:e6:8f:8c:32:d6:98:70:0b:33:
22:d3:f9:6c:71:2f:15:e8:31:41:a5:56:b2:8f:96:
bf:4d:d5:e2:5f:70:51:a6:c2:66:72:3b:3b:c4:5c:
cd:29:84:e2:85:1e:3b:42:f7:f5:1e:2d:41:7e:0c:
d9:c2:ce:e5:a1:58:b1:03:2a:8f:7a:73:bc:9c:2b:
72:e0:b3:2a:40:2d:d7:28:9b:b3:4f:1c:bf:df:e3:
2e:fa:a3:98:23:35:44:81:68:72:6f:58:17:c6:69:
f8:49:74:85:90:8f:90:f6:ee:cc:e5:1d:7b:29:8d:
99:c9:9f:93:65:64:ce:a3:7c:df:7c:f6:46:f5:63:
da:96:97:f7:08:6c:b2:6d:8b:96:bb:e5:ef:16:ca:
5a:0f:03:13:1d:04:03:ec:47:17:07:8a:bb:88:4c:
0e:bf:c8:06:d3:f0:93:97:54:9a:49:5c:88:87:1a:
98:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5A:C5:86:CC:02:7D:B7:3A:F9:CE:18:AA:0F:A0:0F:5E:97:76:B6
X509v3 Authority Key Identifier:
keyid:B6:94:A8:C5:28:F0:B9:A4:D4:53:BC:44:20:E5:0B:51:9D:CF:D0:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91994D1/950D7702CE6E11F0B001ED4FC4F9AE02/tpSoxSjwuaTUU7xEIOULUZ3P0Ks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:a6:fe:77:bc:76:80:37:f2:cb:fa:a1:5a:c3:f5:c0:57:3d:
62:39:ac:47:4d:28:eb:9d:1e:8b:e5:99:cc:2d:c1:23:2c:1b:
90:95:f6:cc:8a:51:ab:ba:37:d9:a6:5a:1a:5a:1f:cf:d3:b5:
7a:3c:34:2d:81:08:09:b5:a9:65:f7:ee:3e:88:de:13:47:f0:
84:da:6a:13:62:ea:6f:23:2f:85:22:47:77:40:ea:1d:a6:50:
eb:d7:46:74:da:15:1e:88:49:63:8d:3b:d2:b5:90:3a:b9:5c:
47:71:06:34:87:aa:9c:6a:9d:e5:e7:0b:02:e8:67:b8:0f:2c:
c0:f0:88:9a:8b:aa:2b:29:5e:df:fb:7b:bf:14:11:33:e3:8d:
ef:b4:1c:c1:48:00:a6:2e:0a:24:23:8d:62:c1:8c:1f:06:46:
ce:2a:ac:2a:1c:72:d7:4e:1c:62:3b:1f:a4:c7:0f:d7:ef:63:
df:72:ef:df:a2:b1:12:28:5f:17:42:b6:10:48:a6:dc:d3:ee:
3c:e2:9d:b9:7b:10:19:c7:e3:e9:d2:c5:63:d3:e8:1e:c0:df:
ab:6c:30:41:a8:5f:aa:26:93:e0:af:b8:36:44:d0:a1:10:05:
80:61:fe:7a:73:ae:bd:c4:44:3d:e2:c8:d5:56:66:1a:b5:b9:
f2:b2:47:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:15:27 2026 by rpki-client