This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
File: tj39aGzgqQB25PX_QoaF9j-wjt0.mft (raw, json)
Hash identifier: sLfbcf9D+laDRD+HJu3U9o4S52brQysIW3+hUjiFxJo=
Subject key identifier: 9E:13:E3:37:17:49:B6:75:85:29:D4:0B:2F:E7:99:F8:C4:91:D1:02
Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD
Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
Certificate serial: 011F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
Manifest number: 010C
Signing time: Sat 07 Feb 2026 05:10:14 +0000
Manifest this update: Sat 07 Feb 2026 05:10:13 +0000
Manifest next update: Sat 14 Feb 2026 05:10:13 +0000
Files and hashes: 1: tj39aGzgqQB25PX_QoaF9j-wjt0.crl (hash: HhFiv4iwEPVk55K+5iPjHwtMdGt2vci6HuJDOMrxGzc=)
2: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (hash: XCruC0xKn6ivsUEsNjfTmIOISSTMaA8fgFUqBnZykII=)
3: B8D1F4E8501411F09C0FE83FC4F9AE02.roa (hash: 6QhOrmpvijFEWyqTsDtifgxnnuoD+8QgUKOe4kzD4+Y=)
4: 1FD9809A92A911EFBE53776BC4F9AE02.roa (hash: /pCleS8hdGGbLBEH6XJqZL1n8cMzpSzBKrLM7XIsvnY=)
5: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (hash: OQ/guaL+54MthYgFWH5vV+2qqkhoKOGTMDARqMovmDI=)
6: C243BFC4FCE511F0AACA4132716F56BC.roa (hash: SpWyUHrFrXo8wajGu+WTx4ngCjm16EX3gZD5ygFjNcw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl
rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Feb 2026 05:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD
Validity
Not Before: Feb 7 05:10:13 2026 GMT
Not After : Feb 14 05:10:13 2026 GMT
Subject: CN=6986c936-a542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:20:25:f7:94:70:93:5a:4b:46:59:5a:77:5d:
2d:e3:23:07:5a:4e:32:29:4f:b7:a4:6a:43:a5:66:
3b:c2:ee:4c:5f:d0:89:77:10:ce:ae:e1:25:ee:b9:
4d:60:98:dc:fa:be:52:0b:81:4d:8c:55:ef:c3:38:
ff:3c:a2:2a:d4:cf:6e:27:9c:69:fa:91:67:fc:46:
ef:87:08:b2:4b:a0:88:46:46:93:5a:f3:26:f5:68:
e9:e1:8e:7c:1b:86:9c:19:ba:c0:08:12:4f:c4:29:
d5:f8:98:b1:f6:1c:56:99:a7:cf:f9:59:38:a7:c2:
34:5a:4e:54:71:08:19:d5:b4:05:c2:33:08:45:8f:
35:e2:d9:56:89:a1:b1:16:57:17:24:37:09:a9:29:
ab:bf:e1:6d:1b:6c:77:87:e8:c8:95:e4:cf:1d:1e:
81:68:be:e3:2e:08:94:bd:10:2b:8d:22:b1:b0:ea:
33:fc:be:13:d0:fa:a9:76:3c:f5:b2:a0:a4:26:5d:
f4:e0:79:fa:76:d0:08:9f:4d:c0:07:c1:20:4c:d3:
e3:87:58:07:79:17:6a:4e:be:64:ad:52:f5:1c:ec:
6f:b3:49:9c:c8:b9:48:b4:f0:9f:69:50:c5:69:13:
7c:b9:9f:c2:3d:a1:6f:32:98:b0:87:87:b8:a2:a7:
42:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:13:E3:37:17:49:B6:75:85:29:D4:0B:2F:E7:99:F8:C4:91:D1:02
X509v3 Authority Key Identifier:
keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:50:09:d6:f3:48:05:54:17:95:ca:93:d2:58:06:0f:d4:82:
44:2d:ba:93:48:62:c9:4d:75:30:03:78:f6:a7:4c:45:fe:a1:
8b:77:7b:24:24:05:90:28:9e:d6:83:42:64:ca:15:28:78:36:
5e:ab:c5:b7:0e:59:29:e7:3b:70:d6:db:bf:25:10:6d:7d:4f:
83:da:bf:97:a3:99:20:4f:65:cd:91:01:01:d7:67:b9:27:b8:
95:f5:b7:14:9d:34:75:b0:1e:cc:0a:70:12:ba:0e:bd:c2:2b:
b0:79:7e:ea:27:7f:fc:16:06:44:1e:8d:b8:d6:1c:a1:bd:ba:
70:c3:62:e4:89:1c:94:5d:6b:69:d3:bf:46:74:58:a3:00:65:
a8:e5:9c:e1:a0:3e:76:bc:86:ba:d9:2f:58:64:01:7b:a0:87:
1e:79:c5:fb:85:1a:02:ec:3d:22:7b:7a:cd:dd:ed:f6:17:89:
0b:d0:c6:09:c1:2f:38:a0:6a:c5:09:89:83:ee:eb:d4:40:f7:
c9:ba:ef:56:93:b8:f0:e4:28:8c:7c:e4:30:e4:3c:9f:68:28:
ce:cc:bc:8d:5f:35:cd:cd:1c:24:8b:61:1e:d1:cc:70:83:70:
e5:20:5d:de:04:af:86:79:3f:0d:c2:70:9a:75:e6:d0:c6:31:
d9:43:fb:29
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2
M0ZCMDhFREQwHhcNMjYwMjA3MDUxMDEzWhcNMjYwMjE0MDUxMDEzWjAYMRYwFAYD
VQQDDA02OTg2YzkzNi1hNTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwiAl95Rwk1pLRllad10t4yMHWk4yKU+3pGpDpWY7wu5MX9CJdxDOruEl7rlN
YJjc+r5SC4FNjFXvwzj/PKIq1M9uJ5xp+pFn/EbvhwiyS6CIRkaTWvMm9Wjp4Y58
G4acGbrACBJPxCnV+Jix9hxWmafP+Vk4p8I0Wk5UcQgZ1bQFwjMIRY814tlWiaGx
FlcXJDcJqSmrv+FtG2x3h+jIleTPHR6BaL7jLgiUvRArjSKxsOoz/L4T0Pqpdjz1
sqCkJl304Hn6dtAIn03AB8EgTNPjh1gHeRdqTr5krVL1HOxvs0mcyLlItPCfaVDF
aRN8uZ/CPaFvMpiwh4e4oqdC2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4T4zcX
SbZ1hSnUCy/nmfjEkdECMB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD
NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq
dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
M0I0Qy9EQzlERTI4RThDNTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FR
QjI1UFhfUW9hRjlqLXdqdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCLUAnW80gFVBeVypPSWAYP1IJELbqTSGLJTXUwA3j2p0xF/qGLd3sk
JAWQKJ7Wg0JkyhUoeDZeq8W3Dlkp5ztw1tu/JRBtfU+D2r+Xo5kgT2XNkQEB12e5
J7iV9bcUnTR1sB7MCnASug69wiuweX7qJ3/8FgZEHo241hyhvbpww2LkiRyUXWtp
079GdFijAGWo5ZzhoD52vIa62S9YZAF7oIceecX7hRoC7D0ie3rN3e32F4kL0MYJ
wS84oGrFCYmD7uvUQPfJuu9Wk7jw5CiMfOQw5DyfaCjOzLyNXzXNzRwki2Ee0cxw
g3DlIF3eBK+GeT8NwnCadebQxjHZQ/sp
-----END CERTIFICATE-----
Generated at Sun Feb 8 06:33:43 2026 by rpki-client