This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
File: tBFqjm2pkf3PcWJue-oR_2nLqEY.mft (raw, json)
Hash identifier: 7/RcxU1nOMXL2CtCRzzqBjmSg04QeXVj/Wb/aXfhgxw=
Subject key identifier: 08:C0:33:2C:24:9B:36:86:37:83:C1:9A:71:1A:C2:3F:02:B2:F2:6B
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0CED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
Manifest number: 0C4B
Signing time: Tue 20 Jan 2026 18:34:30 +0000
Manifest this update: Tue 20 Jan 2026 18:34:30 +0000
Manifest next update: Tue 27 Jan 2026 18:34:30 +0000
Files and hashes: 1: tBFqjm2pkf3PcWJue-oR_2nLqEY.crl (hash: 2/0nQxvypGwJkePS80M8TLahPpBf6DqDnh8yJhrLf5w=)
2: F894F5B0E09411F0B3B2B389426F56BC.roa (hash: l0zJiMqUs38T7gj8LgR61k0ZJBInXfpY/Qkr3IvYCnU=)
3: 52636904771911F083181320C4F9AE02.roa (hash: /N8Je2h9Ml0PEQGrFc9NWTNF1W+nc4xwFKtdjj8nfho=)
4: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (hash: FuJ+0zC5emsysfIUM1yM5haaZPmnTrgVqP1fYVReGjo=)
5: 8B5ED70E821611F0B778F47DC4F9AE02.roa (hash: ec9OX9UoLwyn7wN5VObF9v2iz3RI0N5kTbWroMU/2/c=)
6: 8BEC7D66E54911F091014A6A756F56BC.roa (hash: w60zjM5Rho09NvawEfZQYqYpztssq7KJEuwPjRdxeWo=)
7: 234D0D6C500611F08771CE55C4F9AE02.roa (hash: tT6wpY26Z4BuIfJge3UrKFFEij5wdhpGksDHGEKyueE=)
8: E58488D0BB7A11F09DC5801DC4F9AE02.roa (hash: 2c2fswoHtuwwjSDYm9YL0aP4fxZNIBHz0gEM3XmMKGw=)
9: 0E43AECA3B5D11F0A26BC064C4F9AE02.roa (hash: EDVStKKxG06lw8JN0F9X4jCTKiN0LdF9zVSZbm6YceU=)
10: E3903588DA3311F082FD85DA8AD3641D.roa (hash: EIkvBGNH5qK3+2nje6yCtU9+YLtk6KnHnSU6Aq8nm+k=)
11: 1D231FDEBDD511F0BAEEED5AC4F9AE02.roa (hash: atOk9wYqp34gIO2eKlS4DkecCVwSIujOckF38AN4BrA=)
12: 622E19EEDA1811F0A393A6F584D3641D.roa (hash: mYZTJsIJ7du6lrRHsZhFQos72s6lXlq/gx3QFyxY95k=)
13: 76BF01E88EF511F0BA815369C4F9AE02.roa (hash: mr1shSg9tdqYjDdey+BXiwnN08ArL/8XDM1KQaxVcCg=)
14: F3B9AEC4740A11F09DAF2A29C4F9AE02.roa (hash: KHyJIG6frQiFoPJvg1lo79fhG8UBhK1qYbLoHf3tBMY=)
15: 5164F13EDBD811F0A0A88CE756641951.roa (hash: dzkg5DJUbZBryBBl0bj8Y0ekyIFso09dXRIHhTkjR50=)
16: 1DB49770BDD511F0BF83ED5AC4F9AE02.roa (hash: 4baJUQaJ57JlaoSVexNlINX3qHBtfZSmHXr0z4zuVeE=)
17: 43DCAEE0BBE811F092C97714C4F9AE02.roa (hash: 2+UD4SRzge5CHFOfNK8qJ8s2gmC4j2WFn9LceyV1EXk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 18:34:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3309 (0xced)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Validity
Not Before: Jan 20 18:34:30 2026 GMT
Not After : Jan 27 18:34:30 2026 GMT
Subject: CN=696fcab6-01aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:a5:fa:0c:f8:9b:87:88:f7:48:90:51:08:
90:0f:41:3a:82:50:21:8a:db:7f:c9:e5:0a:86:2f:
4a:11:50:5d:95:0d:c8:f4:40:dc:bd:74:ce:28:ee:
b7:ed:8b:dc:5b:62:dd:48:c5:40:2f:86:72:cd:28:
26:65:30:af:bd:90:8f:c8:62:46:b7:59:1e:36:35:
e2:e7:b6:24:36:90:b0:3a:4d:05:9f:72:c8:8d:3f:
67:a8:6d:4a:2a:ed:e9:49:d4:b9:7b:ab:ea:5f:81:
cc:33:5a:22:d0:d5:0f:a7:f1:b6:ee:33:d1:85:b5:
20:80:ae:ef:a6:75:cb:fa:4c:92:4e:b2:4d:b1:e7:
a4:5c:cc:1b:fa:e3:6c:07:16:c7:3c:12:60:34:64:
99:69:41:8c:d8:e8:20:dc:60:4a:40:49:c1:b8:26:
05:07:c3:98:c0:25:61:98:8e:5d:90:6f:68:68:84:
6b:99:da:ae:cb:53:96:e6:40:52:6a:53:bc:0e:44:
4c:c1:2c:57:be:f0:37:18:fb:ba:eb:c3:2b:fe:cd:
8f:9f:4c:43:2d:ca:fa:ff:d3:d2:ea:3b:1c:3c:5a:
f5:19:be:9d:b7:02:cf:df:65:6f:b2:fd:c3:41:9b:
39:e5:b3:ea:8e:43:93:38:97:5a:62:79:be:95:82:
48:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C0:33:2C:24:9B:36:86:37:83:C1:9A:71:1A:C2:3F:02:B2:F2:6B
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9e:3c:53:ba:07:e7:1c:c9:0d:46:68:9e:0c:7b:13:9c:80:
36:89:80:6b:c8:c6:0a:43:b3:70:95:7f:67:26:26:c4:3c:5a:
55:c1:3d:18:de:8e:de:82:ce:51:4f:04:3c:c0:6b:b2:b5:6d:
28:ca:6d:86:ad:14:6f:cf:6a:15:9d:d4:72:41:5e:fd:f9:5c:
40:bf:a9:98:9a:84:4d:8f:6e:00:70:f6:01:e6:63:b4:57:9d:
94:8f:5e:f0:f4:00:41:42:a1:77:a5:5d:d7:b2:d6:f2:5c:c3:
d4:d6:49:a2:c6:15:a2:da:b8:cb:d7:36:91:59:e6:9c:1b:e5:
2d:10:ef:39:f2:4b:c3:41:f0:bf:e7:d8:b4:c2:81:3e:c9:14:
d1:f7:82:84:b8:c1:ed:a5:ff:ec:27:b2:90:b1:26:1d:46:d3:
08:cd:6c:ad:dc:66:3d:35:f3:25:ef:f7:99:c7:2d:b0:dd:a3:
a8:dc:22:14:d2:48:53:70:ca:71:51:b9:1f:93:23:c9:9a:f6:
ef:af:49:b0:96:14:74:cb:91:42:32:88:b9:2c:91:06:a0:18:
ab:6c:ea:8a:58:dc:e1:45:9d:aa:6b:dc:70:53:99:2f:10:5f:
5b:73:74:5e:44:b6:e8:54:8f:ac:6e:a7:59:18:2e:f3:b7:fb:
2a:59:e4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 06:52:04 2026 by rpki-client