This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
File: TK0nK60dhwmxbpl1AG4SJVIFyPY.mft (raw, json)
Hash identifier: 3Rvlen8Vmm4I96G/ONtXxs2Y8ziBLkJ+vuGJIJenSlE=
Subject key identifier: 63:87:33:93:96:30:22:80:D2:3A:2F:64:06:22:E0:55:F0:5B:81:41
Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6
Certificate issuer: /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6
Certificate serial: 018E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
Manifest number: 0180
Signing time: Tue 09 Dec 2025 01:59:10 +0000
Manifest this update: Tue 09 Dec 2025 01:59:10 +0000
Manifest next update: Tue 16 Dec 2025 01:59:10 +0000
Files and hashes: 1: TK0nK60dhwmxbpl1AG4SJVIFyPY.crl (hash: c0nxiowdpzo7uKe0yEEIing8VHQ7ieJwv7HWc5ahr48=)
2: 34B484F49B0D11EEB69D6B1CC4F9AE02.roa (hash: LN+Bl9RZ1hirx8n/6IVVyjnDU7gxEMZFLl6YFsSXHSs=)
3: C4B561629AFA11EEB91A2174C4F9AE02.roa (hash: Ba1lgzMsQfqpR3ei0tOYxQcrh9RVC5oeP2BQeuQZDHk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl
rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Dec 2025 01:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9A6E, serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6
Validity
Not Before: Dec 9 01:59:10 2025 GMT
Not After : Dec 16 01:59:10 2025 GMT
Subject: CN=6937826e-8252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:b9:d8:cc:94:5e:d1:1f:c3:a7:79:ce:82:
82:cb:93:8c:65:ae:7d:f2:fd:26:63:c7:2e:30:dc:
98:02:af:3c:4c:8e:d5:a3:25:8e:76:af:29:58:ac:
3b:bc:7f:fd:74:22:72:c8:cf:6b:d1:07:e8:50:fe:
08:f2:08:73:ae:da:6b:4d:a3:18:18:ad:4d:43:06:
06:77:c4:ae:0c:57:ea:22:39:40:ac:3b:bc:6f:ab:
28:1d:94:2d:e7:45:9b:a7:d5:50:9f:0d:d1:00:14:
0e:87:df:49:c9:5a:62:98:b9:51:dc:a4:86:40:c7:
b1:82:cb:4b:d7:80:0e:bb:3e:f1:bd:47:5f:9b:a3:
05:d7:fd:6e:22:ca:c8:3c:c9:07:37:fd:89:be:a8:
d9:32:50:92:a4:94:a4:91:3a:50:36:43:bc:6c:4c:
b6:60:22:e9:1b:1b:cf:d9:a4:26:78:fd:81:47:7f:
e5:d0:54:4a:8e:fa:52:a9:ba:e6:a8:b3:54:7b:5c:
01:88:a1:56:73:4e:83:93:34:a2:56:6d:98:c0:8e:
65:76:5d:2f:2a:d9:b2:7d:15:9b:ef:fe:21:78:2c:
dd:c2:a8:19:79:75:ad:f9:e7:7f:ad:53:d3:78:bd:
b0:45:a2:1c:c0:2b:56:da:08:30:f8:7a:3f:42:a5:
a9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:87:33:93:96:30:22:80:D2:3A:2F:64:06:22:E0:55:F0:5B:81:41
X509v3 Authority Key Identifier:
keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e5:da:bc:64:79:8d:14:a7:69:2e:24:ee:6d:b8:46:87:c2:8a:
ed:14:98:83:ac:f7:e8:c7:81:0e:a9:a8:c0:b9:0f:2a:2a:44:
2c:df:45:ec:07:da:c2:28:76:a3:ca:ee:9c:9b:67:1e:e1:1f:
19:74:4f:b9:86:7e:3d:d9:6a:0a:92:de:0c:c5:05:a3:fc:62:
0a:bf:0f:cd:79:08:7f:f0:89:ee:89:c9:95:82:4c:db:c2:b3:
c1:a5:89:a0:fa:c9:19:8f:6a:3c:2c:55:26:1d:74:67:9d:11:
eb:1b:83:75:1a:3c:11:78:7b:96:60:5f:47:0a:6d:02:6d:57:
d9:18:d9:4a:94:67:b4:0b:80:24:ab:e8:f4:3e:3d:0a:eb:eb:
f8:ea:9a:df:d2:8c:03:2a:45:42:74:00:ae:14:10:5c:70:11:
f2:db:32:6a:73:ed:97:e9:db:49:a7:9d:9d:b3:c5:c2:29:16:
34:28:56:2f:79:8b:c3:5e:a6:af:c9:52:c6:c9:56:58:62:2c:
2e:b1:31:0f:9b:19:e0:97:86:a6:ea:9a:92:55:a8:82:71:04:
d8:af:26:61:1f:0e:75:cc:f5:ef:c6:6b:ba:75:9c:2f:20:bf:
a9:71:b2:2e:c4:03:ae:91:b2:f4:52:b5:cd:33:4c:a8:c8:9c:
ac:35:cf:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 04:47:33 2025 by rpki-client