This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
File: TiWbqHpAtm2EKsjOCup4TkvXOC4.mft (raw, json)
Hash identifier: bxmGHkVQZJ0M76FRdaX+mPxGaVEbppdMUW2f6dxJbro=
Subject key identifier: 11:D5:C5:E4:57:02:58:83:28:58:D4:6C:B9:FC:60:09:E9:93:A9:44
Authority key identifier: 4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E
Certificate issuer: /CN=A91E57A9/serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E
Certificate serial: 0131
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
Manifest number: 012E
Signing time: Sun 11 Jan 2026 03:48:26 +0000
Manifest this update: Sun 11 Jan 2026 03:48:26 +0000
Manifest next update: Sun 18 Jan 2026 03:48:26 +0000
Files and hashes: 1: TiWbqHpAtm2EKsjOCup4TkvXOC4.crl (hash: 8WM41+hfXXa7XTv+90Rnkw2bR0+kSfEfQ5gPMf7Rf5Q=)
2: 4647BCD66E7F11EF9223EA62C4F9AE02.roa (hash: ktZfaMlA6IUEVI7ymclMb6B8SOgTxjLIP6VRKiXLA/E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl
rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Jan 2026 03:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305 (0x131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E57A9, serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E
Validity
Not Before: Jan 11 03:48:26 2026 GMT
Not After : Jan 18 03:48:26 2026 GMT
Subject: CN=69631d8a-bb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1a:a0:d4:ad:9f:8a:7b:e9:0d:b9:8b:61:00:
76:cb:0e:0d:ad:22:ed:af:26:a6:69:26:2f:f7:82:
1e:30:c4:dd:bc:8b:0b:6a:f8:1c:5c:ca:ed:50:69:
04:67:e6:0a:1d:21:2e:b2:09:6f:43:68:d3:bb:58:
a3:91:55:28:c4:42:da:f8:5f:00:5b:ca:bd:bb:76:
2d:66:21:ba:a6:32:b1:09:fe:c0:82:78:96:b8:a6:
f0:9c:4c:90:3f:b8:64:3d:6d:77:5f:61:5b:77:b3:
0e:a7:f6:3e:67:eb:81:fa:dd:89:21:f9:0f:77:5d:
50:e4:2c:69:c2:f8:24:12:e5:8f:d4:3c:f4:65:46:
c7:39:64:0d:96:4a:86:0c:52:e8:de:24:9d:7d:a2:
6d:06:c7:e6:12:e5:2b:b6:13:75:e6:8d:83:f1:f9:
55:06:39:2c:c9:0c:cf:1f:c7:68:0e:16:51:c5:05:
d5:d6:f6:b7:ec:7f:2d:ce:1a:7b:fe:17:76:25:c9:
7f:cb:7f:33:3a:db:35:75:21:64:32:48:ed:c3:93:
c6:5d:5e:11:d9:00:ef:2f:90:9a:cb:c3:42:69:61:
ad:f1:7b:ab:6a:5d:95:cf:8c:ef:3f:7a:0c:60:10:
a0:7c:56:a4:1f:e4:89:cb:25:53:65:70:4a:26:71:
9c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D5:C5:E4:57:02:58:83:28:58:D4:6C:B9:FC:60:09:E9:93:A9:44
X509v3 Authority Key Identifier:
keyid:4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:01:1e:0c:a0:0f:39:0a:52:5d:6e:32:4e:67:61:5a:a2:03:
4f:0e:45:cc:c7:9f:9b:c4:d4:c1:85:e9:65:1f:e2:6e:44:5b:
14:91:e9:f7:f5:ab:12:17:9c:28:fa:c9:db:b4:6d:44:79:18:
ff:8e:6d:79:4b:33:79:ff:06:77:29:ec:e9:31:38:63:26:cb:
4c:ff:11:3a:33:92:70:cb:2a:3a:b2:af:fd:f1:68:53:d3:05:
30:86:2c:dc:c3:5e:70:0f:45:a6:80:71:3a:33:c6:71:92:ac:
21:7d:4a:a7:88:69:fa:9d:01:1b:21:84:1b:bb:68:12:d8:fe:
2c:2e:e3:4a:f8:42:32:bc:e3:6d:85:07:c5:2f:56:fc:b3:9a:
97:c8:4e:ee:01:04:96:79:f2:42:56:c8:84:e5:da:85:b8:e2:
f4:b4:be:b3:27:9b:db:e4:bc:32:ae:be:63:fe:84:70:81:33:
45:22:e0:5e:64:d7:ca:53:32:9a:35:97:5c:36:bb:1d:11:a0:
b3:d4:4b:ae:21:e7:52:f3:95:c4:2d:3c:87:7f:35:07:4a:fb:
72:4e:a1:8a:74:43:28:c6:68:9d:03:75:4b:34:cf:02:75:2c:
bf:bc:82:24:94:75:d3:28:8d:6f:a3:fd:fc:96:5a:a8:a1:65:
92:c8:3b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 13:08:44 2026 by rpki-client