This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft
File: tIGYczHh7UCLUcuf2O9KZQrIZpo.mft (raw, json)
Hash identifier: I5kanmEtyjhgExec2h9TDRN4DyZKNfhBcjcB1cMGxDU=
Subject key identifier: 4E:3C:71:E4:33:D8:A3:59:6C:F2:99:44:CA:4C:02:C5:BF:6E:09:AD
Authority key identifier: B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A
Certificate issuer: /CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A
Certificate serial: 022B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft
Manifest number: 0216
Signing time: Mon 29 Dec 2025 01:34:15 +0000
Manifest this update: Mon 29 Dec 2025 01:34:14 +0000
Manifest next update: Mon 05 Jan 2026 01:34:14 +0000
Files and hashes: 1: tIGYczHh7UCLUcuf2O9KZQrIZpo.crl (hash: vynszi75wBAzJi6BXnnY7uZek1ucjjaZy/DB5Q7e2tg=)
2: 9C6F02C6249D11EF9532356DC4F9AE02.roa (hash: Ah9DA9XDU6AgPBrVhyRA7IEj119ByF47rhFGR96tGKc=)
3: 42D4386CDFDB11F0A18E0FE3536F56BC.roa (hash: mJLvR1p4ts88KkpVKKt2PVk1iLkTAtrbOa4ytntbS6o=)
4: B4B581DEDFDB11F0B149F2E3536F56BC.roa (hash: g8h4AuAjSU2htCTyorJM2XPUCNXDA6cYYOZOcIV/cZY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl
rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Jan 2026 01:34:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 555 (0x22b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E28E2, serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A
Validity
Not Before: Dec 29 01:34:14 2025 GMT
Not After : Jan 5 01:34:14 2026 GMT
Subject: CN=6951da96-4872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:eb:4b:06:45:96:e3:93:cd:db:af:76:9e:fe:
33:7d:4f:7c:dc:13:49:36:07:ba:12:6e:d9:03:52:
4f:13:81:0c:06:ae:63:01:65:e8:c0:75:54:ae:5d:
1c:7c:8b:7b:3e:a8:4d:91:17:08:8d:a3:eb:fc:4a:
4b:92:f9:bb:e0:f1:03:d5:32:01:bc:62:ff:68:3a:
ee:ec:ec:c6:0c:bc:ab:80:26:e5:73:fb:7e:f0:e7:
a9:79:c4:c8:ea:1f:09:7e:7c:72:e9:57:32:55:90:
ad:75:be:24:86:e5:be:7a:28:ce:42:86:1c:0a:40:
8a:3b:a1:61:53:75:84:fc:b4:0c:d3:1a:1d:81:cf:
2a:ac:83:b1:f5:08:b5:b0:72:47:d5:1d:ae:4f:4f:
cd:57:ec:8d:3d:b6:df:0f:6c:69:9a:48:ff:a0:cd:
d7:19:78:97:4b:c9:a5:c2:59:f2:3d:90:2b:09:72:
44:f0:c6:9e:d6:4c:cb:cf:64:5e:9c:c4:e3:56:c1:
6e:30:e6:da:df:20:cc:ab:0f:f9:46:54:3a:41:74:
46:68:3a:4d:72:73:4b:c3:af:bd:b7:fb:f6:cd:43:
0f:12:11:f5:cd:1e:60:0c:fa:00:18:4a:7a:89:cf:
d0:59:77:e1:06:65:2c:bd:33:10:1b:1d:a2:84:76:
5e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3C:71:E4:33:D8:A3:59:6C:F2:99:44:CA:4C:02:C5:BF:6E:09:AD
X509v3 Authority Key Identifier:
keyid:B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:15:74:28:1d:30:30:07:e4:5d:11:44:68:e8:c4:f2:f3:67:
9a:f6:5b:ce:85:45:46:97:fa:50:a2:24:fd:65:8e:46:fb:40:
0d:f2:cd:c9:32:84:65:16:e9:c3:b6:73:72:c4:f3:50:ec:3f:
3a:b0:f8:90:6d:ed:46:8c:f2:e0:f1:37:38:79:ab:43:50:b5:
d3:56:68:27:43:45:b0:a1:84:d0:02:06:0c:7c:47:6b:dc:df:
c4:39:61:b6:c8:f3:81:3c:26:13:4b:dd:b0:6a:6a:36:b8:cd:
85:52:47:fb:ef:4e:7e:f1:55:ca:2c:2f:63:32:50:ff:18:a5:
17:55:01:f4:5b:87:05:c5:69:d1:c6:30:8e:db:ac:f7:a0:2f:
a2:b7:6e:20:ac:98:8b:5d:0a:ce:80:d2:ab:5e:bb:ed:6c:cd:
d6:6b:0f:0e:28:7f:63:21:fb:f6:9a:d9:a3:17:5a:fc:09:e0:
65:4d:40:2e:b2:cc:af:97:f7:5c:6c:23:f1:8f:7b:cf:8f:27:
06:b2:df:3b:7d:b2:f0:01:2d:84:96:3c:2a:9f:4e:00:69:ec:
61:d6:23:f5:cd:f3:84:fa:27:92:b6:45:2d:18:c1:a7:47:3d:
4a:a6:a5:9d:4d:f6:3f:46:37:ff:ae:3b:b4:71:61:84:7e:68:
2f:90:af:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 14:41:41 2025 by rpki-client