This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
File: TAYxLToLHGP1R9TWRXxM1a9xQ80.mft (raw, json)
Hash identifier: xJgnwvD7nqZJdm3XxfOBFi4lPIC74cDWubBthOl+wDw=
Subject key identifier: 6B:5F:CA:68:29:C4:3D:6F:B8:45:AC:E1:57:0B:B9:48:2F:F1:B3:87
Authority key identifier: 4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD
Certificate issuer: /CN=A91E0EF2/serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD
Certificate serial: 04A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
Manifest number: 04A1
Signing time: Fri 26 Dec 2025 23:05:19 +0000
Manifest this update: Fri 26 Dec 2025 23:05:18 +0000
Manifest next update: Fri 02 Jan 2026 23:05:18 +0000
Files and hashes: 1: TAYxLToLHGP1R9TWRXxM1a9xQ80.crl (hash: OTlhSvrm5qUTe/NpHPqBMPAdXnTk3XykKiJezjHx4lo=)
2: 09C2A1645A3511ED8F0A3087C4F9AE02.roa (hash: RiGNiFnNAoJRKUyYrUN1wLZV9I9idQnh7FmtgNq/Suc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl
rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Jan 2026 23:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1189 (0x4a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0EF2, serialNumber=4C06312D3A0B1C63F547D4D6457C4CD5AF7143CD
Validity
Not Before: Dec 26 23:05:18 2025 GMT
Not After : Jan 2 23:05:18 2026 GMT
Subject: CN=694f14ae-3878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:93:50:85:48:99:34:8e:15:58:df:2b:e3:b2:
bb:de:07:60:b5:6a:76:c4:72:45:ef:08:1d:d0:c7:
57:bb:70:84:85:18:83:57:a7:05:8f:b7:6f:b3:14:
0a:20:fc:90:3e:21:10:2a:3e:e4:cb:87:b4:99:86:
3e:ba:d4:c6:8d:b3:ed:82:ad:30:90:c8:08:3d:a6:
c2:28:f6:bd:ef:44:c9:bb:ef:54:f9:8f:25:fe:fe:
ec:59:20:92:3b:59:e2:f7:a9:72:de:b6:e0:77:01:
5f:8a:88:ad:76:1c:6e:41:54:46:f5:d7:be:43:a5:
15:06:cc:ca:4d:28:4c:96:9c:4c:a9:95:3d:72:53:
c9:77:ff:07:5b:16:5b:97:e5:fa:3f:ec:ee:b8:63:
fb:3a:17:53:eb:42:01:b9:ad:0a:a0:83:a8:98:79:
8f:55:4f:e3:5c:8f:8f:75:16:a4:45:be:a7:05:55:
90:ac:45:f9:f2:f0:2e:f5:a1:23:74:cb:56:aa:b8:
85:cd:8b:cb:68:c9:15:0b:d5:b5:e0:89:8e:a5:dc:
4c:a3:c6:68:05:92:aa:ed:bb:0e:40:23:cb:a4:60:
3e:d2:73:e0:75:5d:3f:a8:eb:e7:fc:f6:8e:a6:83:
7d:29:6e:ee:59:7a:f4:1d:c4:21:e3:f6:74:fa:fc:
57:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5F:CA:68:29:C4:3D:6F:B8:45:AC:E1:57:0B:B9:48:2F:F1:B3:87
X509v3 Authority Key Identifier:
keyid:4C:06:31:2D:3A:0B:1C:63:F5:47:D4:D6:45:7C:4C:D5:AF:71:43:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAYxLToLHGP1R9TWRXxM1a9xQ80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/B50546525EE211ECAFA64B44C4F9AE02/TAYxLToLHGP1R9TWRXxM1a9xQ80.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:d9:6e:76:5c:96:a8:d3:5c:90:45:45:dd:cc:9a:1d:79:65:
cb:26:1e:8a:30:43:9a:dd:11:44:8c:8d:8b:ec:b7:47:25:9b:
a6:86:98:02:b4:c5:c3:ce:22:0c:5d:53:4a:f2:48:37:e5:ea:
10:d7:1e:79:52:e0:bf:ab:b2:a3:e5:11:d1:46:a3:a5:92:70:
ab:71:d1:d7:c7:b1:b6:47:6e:67:c6:b1:24:47:e5:7f:26:f7:
3a:b6:32:11:43:65:1a:f0:38:39:06:b0:dd:a0:8c:e8:46:50:
68:d2:5b:8b:7b:63:eb:fd:f4:ae:3c:61:38:4b:81:64:50:24:
ae:41:35:c3:d8:89:11:40:24:c3:fe:8d:0f:cf:76:e7:cd:1a:
f4:06:85:09:ec:01:5b:e3:f1:1e:86:8e:6d:88:a7:87:ea:be:
71:4c:f4:17:bf:92:5f:29:3f:f1:2e:75:ad:09:d2:26:c5:c0:
a1:58:c9:7f:de:21:ac:1e:65:84:f2:a5:d5:36:62:2a:e6:b7:
d1:25:d4:d1:09:9a:4c:1b:bb:7a:d3:47:d2:82:81:39:85:51:
34:ce:e0:43:cf:90:22:29:15:c0:8d:63:75:93:68:d8:e7:7c:
d4:b7:bf:1e:90:5d:07:3c:58:5b:56:43:9d:52:c9:7a:73:7b:
08:a5:cf:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBFRjIxMTAvBgNVBAUTKDRDMDYzMTJEM0EwQjFDNjNGNTQ3RDRENjQ1N0M0Q0Q1
QUY3MTQzQ0QwHhcNMjUxMjI2MjMwNTE4WhcNMjYwMTAyMjMwNTE4WjAYMRYwFAYD
VQQDDA02OTRmMTRhZS0zODc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1pNQhUiZNI4VWN8r47K73gdgtWp2xHJF7wgd0MdXu3CEhRiDV6cFj7dvsxQK
IPyQPiEQKj7ky4e0mYY+utTGjbPtgq0wkMgIPabCKPa970TJu+9U+Y8l/v7sWSCS
O1ni96ly3rbgdwFfioitdhxuQVRG9de+Q6UVBszKTShMlpxMqZU9clPJd/8HWxZb
l+X6P+zuuGP7OhdT60IBua0KoIOomHmPVU/jXI+PdRakRb6nBVWQrEX58vAu9aEj
dMtWqriFzYvLaMkVC9W14ImOpdxMo8ZoBZKq7bsOQCPLpGA+0nPgdV0/qOvn/PaO
poN9KW7uWXr0HcQh4/Z0+vxX3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtfymgp
xD1vuEWs4VcLuUgv8bOHMB8GA1UdIwQYMBaAFEwGMS06Cxxj9UfU1kV8TNWvcUPN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEVGMi9CNTA1NDY1MjVF
RTIxMUVDQUZBNjRCNDRDNEY5QUUwMi9UQVl4TFRvTEhHUDFSOVRXUlh4TTFhOXhR
ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RBWXhMVG9MSEdQMVI5VFdSWHhNMWE5eFE4MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MEVGMi9CNTA1NDY1MjVFRTIxMUVDQUZBNjRCNDRDNEY5QUUwMi9UQVl4TFRvTEhH
UDFSOVRXUlh4TTFhOXhRODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBz2W52XJao01yQRUXdzJodeWXLJh6KMEOa3RFEjI2L7LdHJZumhpgC
tMXDziIMXVNK8kg35eoQ1x55UuC/q7Kj5RHRRqOlknCrcdHXx7G2R25nxrEkR+V/
Jvc6tjIRQ2Ua8Dg5BrDdoIzoRlBo0luLe2Pr/fSuPGE4S4FkUCSuQTXD2IkRQCTD
/o0Pz3bnzRr0BoUJ7AFb4/Eeho5tiKeH6r5xTPQXv5JfKT/xLnWtCdImxcChWMl/
3iGsHmWE8qXVNmIq5rfRJdTRCZpMG7t600fSgoE5hVE0zuBDz5AiKRXAjWN1k2jY
53zUt78ekF0HPFhbVkOdUsl6c3sIpc9x
-----END CERTIFICATE-----
Generated at Sat Dec 27 21:02:15 2025 by rpki-client