This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
File: TmiwSN0926X0ePH9KIqGGLqfq6o.mft (raw, json)
Hash identifier: 7VyxKOK0vnC3lYtFTVUB9yZmO0VxnO6PQI3qMAcfE5Y=
Subject key identifier: 9C:17:E0:43:43:EF:97:7F:F5:7A:99:70:C2:6F:A2:70:21:0F:ED:EF
Authority key identifier: 4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA
Certificate issuer: /CN=A91FEB37/serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA
Certificate serial: A4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
Manifest number: A0
Signing time: Mon 29 Dec 2025 05:26:14 +0000
Manifest this update: Mon 29 Dec 2025 05:26:13 +0000
Manifest next update: Mon 05 Jan 2026 05:26:13 +0000
Files and hashes: 1: TmiwSN0926X0ePH9KIqGGLqfq6o.crl (hash: mTNrfQXaVcM4eXrCurvOq+kjHVd8TZy1KRvRoZRmuLk=)
2: 0FED0338F66C11EFA1F5216AC4F9AE02.roa (hash: U5ihYANfpqZVv2wTmvSMJeDuFIy+/heVKl2c8EiBKYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl
rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Jan 2026 05:26:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEB37, serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA
Validity
Not Before: Dec 29 05:26:13 2025 GMT
Not After : Jan 5 05:26:13 2026 GMT
Subject: CN=695210f6-5b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:1b:2d:7b:a6:86:55:51:80:9e:1d:27:53:
b6:8a:e4:c9:ea:9e:ed:f6:d5:f2:f2:17:91:59:29:
da:c5:cd:9d:ba:cf:45:cd:82:bc:d0:cd:ba:2d:cf:
ee:db:e0:e6:43:89:57:8d:b2:e6:f6:fd:f5:df:83:
f0:13:91:dd:af:f5:5e:a8:4c:8b:99:dc:b6:64:6d:
c0:49:bf:d3:8c:00:a2:2b:a0:a1:3c:7c:10:9a:d8:
36:1b:bd:59:24:3b:ed:3c:62:eb:a7:0e:e7:3e:0c:
fd:a2:95:e1:03:89:7d:75:f5:8f:98:7d:94:61:de:
fe:94:90:8d:9e:ae:a4:23:27:11:68:12:10:4c:dd:
36:72:24:45:40:b4:d0:84:0d:73:52:7f:36:d2:77:
0f:8a:1c:52:c3:fb:df:32:0b:76:78:6f:a5:24:07:
c7:5c:3f:9d:13:d2:ce:e3:b8:06:12:51:bb:66:fc:
5a:45:c3:ff:e5:b1:4f:57:a1:38:dd:52:ec:c3:53:
68:54:4d:5e:4c:fc:a6:c1:bc:29:3a:ee:ed:ab:93:
74:78:a9:e3:65:22:cf:2f:b7:36:e0:82:53:9f:82:
f8:f9:40:82:ca:28:a4:75:8d:52:fc:39:10:9b:63:
e2:58:b5:e4:e4:09:c3:b3:06:37:32:7e:56:59:1d:
ac:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:17:E0:43:43:EF:97:7F:F5:7A:99:70:C2:6F:A2:70:21:0F:ED:EF
X509v3 Authority Key Identifier:
keyid:4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:cf:c7:68:46:8c:c0:3a:ac:82:10:e6:5d:43:1e:8f:87:4d:
74:b1:cf:d7:50:cc:6b:b2:d1:dd:37:2d:e2:d0:1d:2d:56:40:
c5:d3:56:1e:d0:a5:93:fb:74:ea:a1:44:e7:c7:a8:45:89:9a:
cb:3a:93:ee:df:41:34:c6:60:d6:4a:74:94:c8:55:de:4e:95:
92:00:a3:74:14:81:e0:1a:b5:3e:4f:10:7c:76:5d:6e:96:64:
d0:b7:ec:a2:07:07:b4:19:76:81:8b:66:45:1e:61:af:c7:57:
24:57:ec:16:e7:03:f6:a3:16:b5:27:68:e2:db:23:62:e1:dc:
f7:64:b8:19:27:7e:5e:ba:7d:73:13:c5:a9:c4:e8:ab:b5:f3:
2d:cf:de:fd:66:18:d9:08:8f:40:bc:b5:fe:2f:08:0a:bb:a1:
e4:74:2f:c0:50:15:a5:c8:dd:30:cc:8b:27:e6:1b:c4:e3:d9:
fc:3a:fb:c9:93:67:35:c7:c0:1e:9d:40:3c:56:03:75:9e:6a:
d6:92:70:a2:53:88:d3:5a:e7:2b:fa:93:bf:43:37:8d:c2:f4:
b1:7a:7d:32:43:68:43:6c:ec:6e:ec:42:54:02:6f:05:65:ad:
41:78:9c:bf:9a:2b:85:e9:69:7e:ca:a9:02:5e:90:0e:4d:ba:
71:f3:29:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 16:26:36 2025 by rpki-client