This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
File: TbA103TIQSzmgNnaCtvsBkKdiLg.mft (raw, json)
Hash identifier: QBXiGyGp1PekDw/I2qnVnurx+TvsU5Jwe83fdV4GaNo=
Subject key identifier: CF:0C:FA:7E:C1:20:EB:E3:1A:B9:4B:DB:23:F0:8D:45:2E:E8:B7:50
Authority key identifier: 4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
Certificate issuer: /CN=A917E678/serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Certificate serial: 1A19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
Manifest number: 1806
Signing time: Sat 20 Dec 2025 16:37:10 +0000
Manifest this update: Sat 20 Dec 2025 16:37:10 +0000
Manifest next update: Sat 27 Dec 2025 16:37:10 +0000
Files and hashes: 1: TbA103TIQSzmgNnaCtvsBkKdiLg.crl (hash: niOicE6E4BeW9DirmvH85o++ZSeG+zj1i9GS49Qx+3w=)
2: 0D08636C75D611EB920B5162C4F9AE02.roa (hash: lNqOJJYDQvLu7DRWfBEiDCTTNbz1juAgLIKu2ZnWJwo=)
3: 70E478D0C06D11F0ABA91C6CC4F9AE02.roa (hash: Y+I6xs+Ghxp/nManyHpMLzBR6d+9ACgxr4bM9Tk/9sc=)
4: 47AAFC5A661311F09011712CC4F9AE02.roa (hash: a50VCxDM+rD8Ar8TkJi367BRkd8ietONIDl/hmG93rs=)
5: 820BE5609CEE11EF9001717EC4F9AE02.roa (hash: dqGvsBo+O3A3ECQgQGmvroXEzldwim2Z97cn9HnwO7I=)
6: 1F24033CDF7111EEB534147FC4F9AE02.roa (hash: 5uITBc+pZTop6KZh3NhbY8ifInIc97Y2n3CHN/qqt94=)
7: B62B9156280611ED8BEBC536C4F9AE02.roa (hash: H2LNVWI/4SBtnLIxC+HsKb0Sn6SPu235wjCIk/88N90=)
8: A865A1925B1611F083088661C4F9AE02.roa (hash: Rw9T99RuNwJAGQR3ACNuRpkBbGAU9I1LWh2/O8OeLqs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 16:37:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6681 (0x1a19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=4DB035D374C8412CE680D9DA0ADBEC06429D88B8
Validity
Not Before: Dec 20 16:37:10 2025 GMT
Not After : Dec 27 16:37:10 2025 GMT
Subject: CN=6946d0b6-8a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:63:63:de:90:c3:4a:37:e4:5e:72:f3:57:
d3:48:2d:36:9f:90:b2:df:aa:8a:fe:46:2f:53:6f:
00:ff:7b:ca:15:f2:ac:a9:88:59:91:ad:61:b7:fd:
47:47:7a:d7:59:65:8a:2c:ec:e2:dd:05:02:45:3b:
04:d6:9f:b9:32:a4:62:38:01:74:d2:8a:83:c1:5a:
43:eb:96:6a:75:5c:1b:a2:5e:26:92:c0:d3:48:cf:
a0:31:25:67:a5:17:9f:19:5a:88:35:ae:8a:28:0b:
10:5a:96:4b:13:45:89:e0:e2:22:95:df:6a:ef:53:
9b:06:42:b9:78:20:0f:40:d6:28:d2:2b:64:99:b5:
d5:2f:9a:78:de:ea:4b:86:22:3c:9f:24:81:68:c0:
85:9a:53:e9:2d:97:9c:90:1d:7e:5c:8c:aa:2b:b7:
14:58:ab:ae:44:5b:68:e2:a7:09:85:2b:f7:32:d1:
6c:79:1d:fa:dc:13:51:cd:98:b3:cb:20:a6:e2:e1:
7d:c8:04:f0:51:f9:97:3c:47:b1:76:b2:d0:20:bb:
e6:98:04:f4:a1:27:87:a2:e0:52:79:5e:c2:a0:d4:
eb:5d:e9:25:18:18:78:69:b1:35:c2:c0:42:4e:07:
69:ff:70:b2:86:13:6e:f2:28:64:27:75:73:2f:f6:
64:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0C:FA:7E:C1:20:EB:E3:1A:B9:4B:DB:23:F0:8D:45:2E:E8:B7:50
X509v3 Authority Key Identifier:
keyid:4D:B0:35:D3:74:C8:41:2C:E6:80:D9:DA:0A:DB:EC:06:42:9D:88:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TbA103TIQSzmgNnaCtvsBkKdiLg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/72583AFA695711E8A42BE680C4F9AE02/TbA103TIQSzmgNnaCtvsBkKdiLg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b4:c7:a1:ed:b7:b5:13:fd:e2:10:b3:f9:c3:be:b7:2d:24:
15:7c:f6:f2:f0:3c:13:07:85:40:a4:9a:79:e4:c7:e9:ef:05:
b8:6f:a4:b6:f1:bc:58:16:b0:7b:67:8f:75:7e:42:3d:86:2f:
80:09:29:12:18:9f:6d:30:a8:5c:81:3e:7e:b5:49:12:5e:af:
32:19:02:bb:e4:8a:3f:8c:22:c6:cb:f2:68:eb:da:62:9b:c9:
b8:9a:bf:fb:3d:38:d4:02:47:ff:c4:da:63:6c:97:eb:4f:25:
66:c2:03:3e:21:88:4f:f0:98:b4:d1:18:77:a6:f5:ec:c5:4b:
57:f8:ca:c0:54:9a:32:22:e1:b6:d5:a2:fb:3d:f2:19:a3:55:
c4:7d:9b:8c:6f:7d:0a:f4:f3:8d:03:a0:76:a9:d0:8b:a4:69:
3d:e0:8c:fb:dd:93:9a:55:66:df:f6:6a:57:6a:93:34:1c:cb:
e4:66:ee:4c:10:e3:7f:d6:a7:df:58:e9:fd:5a:18:c3:e7:af:
5d:cd:22:cd:60:fc:2e:ae:68:67:b7:78:01:c3:0b:e5:75:4f:
a0:a7:68:95:63:49:e0:d2:6a:4b:af:32:c1:de:31:f3:4d:bc:
2d:a7:76:79:64:20:a8:ff:d2:ff:72:93:b4:d5:65:4b:b8:f5:
57:b4:db:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:51:13 2025 by rpki-client