This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
File: tkVWXJMbKETS92DqqrDirkvjFBQ.mft (raw, json)
Hash identifier: yNgCWXC+uW7KM8b/OEzNYnr0f8hT56CoWlMuBH7mB3M=
Subject key identifier: A6:26:16:32:01:F8:7A:28:96:A3:69:FD:59:BC:BB:37:21:DD:84:F8
Authority key identifier: B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14
Certificate issuer: /CN=A9170187/serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414
Certificate serial: 04C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
Manifest number: 04BE
Signing time: Sat 10 Jan 2026 23:06:41 +0000
Manifest this update: Sat 10 Jan 2026 23:06:40 +0000
Manifest next update: Sat 17 Jan 2026 23:06:40 +0000
Files and hashes: 1: tkVWXJMbKETS92DqqrDirkvjFBQ.crl (hash: n61wPpys8svUEhbHR+p0rwJUlxdAig1DmbXsmDFEfs4=)
2: 838DF1B0572011EC905C770CC4F9AE02.roa (hash: iL8DbZfU13LX2Ap/5AtahLEn5kXxcngJgS8iYsEF4yY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl
rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 23:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1220 (0x4c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170187, serialNumber=B645565C931B2844D2F760EAAAB0E2AE4BE31414
Validity
Not Before: Jan 10 23:06:40 2026 GMT
Not After : Jan 17 23:06:40 2026 GMT
Subject: CN=6962db81-6cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e3:00:7d:d7:a8:25:ed:89:21:97:b2:29:42:
99:e6:30:3d:14:51:56:69:9e:9e:48:06:47:93:59:
95:38:9e:bf:ee:73:0f:d0:79:2d:81:cf:34:1f:0c:
68:ff:e7:78:7e:e9:b9:03:e4:eb:65:20:fb:58:c0:
2b:6a:cf:37:0a:bf:b7:9e:cd:07:a9:59:a7:3b:93:
e1:1f:cc:84:e4:1a:0e:16:ab:d3:84:b4:d6:f1:ac:
f8:36:59:41:07:23:4b:2e:84:57:6b:b6:6a:b7:a5:
19:b2:26:d9:ba:d9:c2:3b:a4:49:0a:57:a6:6f:77:
82:b7:56:ea:09:55:f7:6d:f3:f8:98:4b:a6:b4:75:
cb:6f:77:de:7a:5a:70:9a:a7:f6:7d:5b:34:c5:13:
14:0f:5e:27:38:d3:76:77:55:28:1a:a4:fb:14:f0:
b8:46:63:c1:ca:c7:5f:82:9d:82:c3:fc:db:3c:43:
1a:fc:65:c2:a9:64:c7:cc:82:d8:f8:99:7a:66:17:
3f:f1:a4:b2:58:85:12:f3:de:24:19:00:91:5a:69:
58:15:da:d9:4f:79:2d:91:86:ea:cd:ad:bf:2d:7f:
bc:0b:3c:96:c4:10:87:e5:3f:b9:30:91:85:0a:11:
3c:e6:bc:85:df:ff:de:67:c3:eb:8b:25:58:30:af:
ff:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:26:16:32:01:F8:7A:28:96:A3:69:FD:59:BC:BB:37:21:DD:84:F8
X509v3 Authority Key Identifier:
keyid:B6:45:56:5C:93:1B:28:44:D2:F7:60:EA:AA:B0:E2:AE:4B:E3:14:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkVWXJMbKETS92DqqrDirkvjFBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170187/F1E2A3F8571C11ECBB63FE83C4F9AE02/tkVWXJMbKETS92DqqrDirkvjFBQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:5e:c2:bc:a8:25:d0:c9:1b:e3:be:9b:6b:4f:f7:01:85:0f:
26:32:b9:ef:bb:48:68:a4:0d:1f:fe:b2:90:9f:0d:95:93:d5:
5e:61:99:8b:22:3b:a1:02:77:74:0c:af:2d:21:a7:e5:e8:cf:
b2:22:5a:79:ad:31:9e:e7:2b:87:ed:04:a0:80:fe:c6:e7:95:
52:1e:9c:e7:91:d3:64:23:34:c8:3b:4b:1d:4e:d9:1c:cf:67:
27:a8:d0:78:d9:f0:69:a8:c5:b8:0d:c8:5b:fe:b8:18:24:cc:
40:e4:65:43:05:8c:46:f9:95:67:ba:52:78:84:1e:1f:92:d5:
b1:f3:c3:8a:bc:a6:5f:99:59:de:dc:22:3b:b7:96:73:b1:11:
31:29:6b:7f:3e:58:61:98:7b:34:2d:78:94:a5:4d:74:6c:f2:
79:d7:4f:79:46:e5:2e:46:ba:e1:47:ad:91:7e:fc:e4:a1:dd:
d8:c2:51:d2:a6:c5:56:c2:c4:58:c1:42:dd:fc:b4:f4:32:45:
96:53:2b:c7:37:3d:f0:2b:2d:4f:77:89:4c:6a:3d:76:4e:d9:
29:89:59:2d:ac:49:78:5e:39:31:a4:80:a5:23:8e:fd:8e:c3:
a8:e7:5b:fd:26:66:47:01:c8:95:af:71:b4:57:2b:0e:6f:bb:
b5:48:89:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:32:45 2026 by rpki-client