This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
File: TmiwSN0926X0ePH9KIqGGLqfq6o.mft (raw, json)
Hash identifier: 4JhbjxQ9NxZE10hAwRTxZp64n4XJd7G7r1aYGtpFAyE=
Subject key identifier: D8:84:1F:D4:14:24:3D:60:10:5E:22:46:D1:01:89:01:30:06:CC:55
Authority key identifier: 4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA
Certificate issuer: /CN=A91FEB37/serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
Manifest number: A7
Signing time: Sun 11 Jan 2026 05:27:35 +0000
Manifest this update: Sun 11 Jan 2026 05:27:35 +0000
Manifest next update: Sun 18 Jan 2026 05:27:35 +0000
Files and hashes: 1: TmiwSN0926X0ePH9KIqGGLqfq6o.crl (hash: wgbHNloOc4D/34Kgy0nowKY0oY/SKvC7ZK4Uu8dOLJo=)
2: 0FED0338F66C11EFA1F5216AC4F9AE02.roa (hash: U5ihYANfpqZVv2wTmvSMJeDuFIy+/heVKl2c8EiBKYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl
rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Jan 2026 05:27:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEB37, serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA
Validity
Not Before: Jan 11 05:27:35 2026 GMT
Not After : Jan 18 05:27:35 2026 GMT
Subject: CN=696334c7-bc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:88:f8:90:1b:a9:4c:4d:10:86:7d:ad:ff:
74:18:05:bb:07:75:8f:67:89:87:c7:69:b7:83:11:
99:85:de:a2:60:b5:46:a0:1d:3d:eb:d2:e7:b9:50:
2f:b9:4b:04:7b:06:22:67:1f:c4:19:0d:58:ae:a0:
1c:3b:ee:4c:fe:5b:25:bf:11:3e:ad:8a:8a:49:4e:
98:29:e2:09:b9:70:e2:fb:96:7b:a1:5b:a3:54:fd:
66:e2:f0:d6:19:0a:d3:33:4b:0a:24:49:35:6f:6a:
d4:7e:3f:ec:8f:9d:ea:85:b6:aa:d2:0e:35:93:84:
d0:89:99:06:84:41:90:7f:72:72:5f:32:d9:72:2d:
4a:7c:db:9d:03:d6:ff:1b:61:44:fe:ab:82:2a:1b:
fd:33:44:9f:2b:33:2a:bf:54:8f:6d:c0:d4:57:6b:
b0:d8:b9:fe:db:06:5a:2a:ca:a7:9d:ad:1d:41:f6:
02:cf:ec:7c:6a:7a:03:50:11:d1:6e:c5:00:b7:d2:
e7:f2:14:8d:e4:0d:59:a7:20:b5:3f:69:35:d2:7a:
44:a8:63:7c:1f:f2:58:d2:d1:41:7c:40:50:d6:58:
13:60:08:99:7a:f6:02:bb:18:64:17:b3:e8:8c:48:
2e:0f:38:d1:ce:32:bf:3e:ba:af:0b:d9:d8:99:26:
ab:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:84:1F:D4:14:24:3D:60:10:5E:22:46:D1:01:89:01:30:06:CC:55
X509v3 Authority Key Identifier:
keyid:4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:56:e8:4a:6d:fa:ac:7e:10:ae:86:72:14:70:0d:d1:ec:7e:
07:9a:50:8e:6c:da:91:9d:58:64:92:b1:68:eb:82:00:7a:35:
d3:55:56:ee:ed:fa:c1:4a:3d:a4:cb:9f:b6:13:09:91:cc:cb:
01:df:be:63:1e:47:2c:1c:9b:e3:41:d5:ab:2e:35:db:8d:0f:
59:53:20:00:c8:8a:af:cb:95:94:b2:dd:0b:5a:db:1e:86:3c:
f8:52:ab:10:a0:4c:f8:65:a9:02:99:2d:3d:78:a8:03:7b:4b:
11:7c:7c:e8:09:38:7d:7a:6a:7f:9e:cb:aa:5f:19:d0:a5:9c:
7c:d3:f1:ab:b1:46:27:4f:01:de:a1:27:b0:86:63:41:85:38:
8a:e1:b9:2f:7a:ce:95:b3:f4:77:c2:35:da:1e:85:f5:22:42:
af:03:dc:64:04:73:3f:5a:d1:86:47:d1:7d:0d:2f:50:cc:6c:
ab:4f:90:91:dc:f3:75:70:fd:59:a5:a6:61:b5:b5:31:47:78:
a9:5e:bc:45:96:f2:66:b0:ab:06:ed:6a:15:41:ee:52:02:bf:
51:c0:df:e1:22:9f:5d:8e:06:b6:dd:96:9c:17:ae:f6:43:09:
53:37:c9:5f:f9:ca:1d:0e:a1:cd:46:f4:51:9b:ef:35:1b:3a:
00:6d:10:17
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkVCMzcxMTAvBgNVBAUTKDRFNjhCMDQ4REQzRERCQTVGNDc4RjFGRDI4OEE4NjE4
QkE5RkFCQUEwHhcNMjYwMTExMDUyNzM1WhcNMjYwMTE4MDUyNzM1WjAYMRYwFAYD
VQQDDA02OTYzMzRjNy1iYzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArpyI+JAbqUxNEIZ9rf90GAW7B3WPZ4mHx2m3gxGZhd6iYLVGoB0969LnuVAv
uUsEewYiZx/EGQ1YrqAcO+5M/lslvxE+rYqKSU6YKeIJuXDi+5Z7oVujVP1m4vDW
GQrTM0sKJEk1b2rUfj/sj53qhbaq0g41k4TQiZkGhEGQf3JyXzLZci1KfNudA9b/
G2FE/quCKhv9M0SfKzMqv1SPbcDUV2uw2Ln+2wZaKsqnna0dQfYCz+x8anoDUBHR
bsUAt9Ln8hSN5A1ZpyC1P2k10npEqGN8H/JY0tFBfEBQ1lgTYAiZevYCuxhkF7Po
jEguDzjRzjK/PrqvC9nYmSarqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiEH9QU
JD1gEF4iRtEBiQEwBsxVMB8GA1UdIwQYMBaAFE5osEjdPdul9Hjx/SiKhhi6n6uq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUIzNy8zQ0I3NzlFMEY1
RjcxMUVGQjgyRUZENkJDNEY5QUUwMi9UbWl3U04wOTI2WDBlUEg5S0lxR0dMcWZx
Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RtaXdTTjA5MjZYMGVQSDlLSXFHR0xxZnE2by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RUIzNy8zQ0I3NzlFMEY1RjcxMUVGQjgyRUZENkJDNEY5QUUwMi9UbWl3U04wOTI2
WDBlUEg5S0lxR0dMcWZxNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBUVuhKbfqsfhCuhnIUcA3R7H4HmlCObNqRnVhkkrFo64IAejXTVVbu
7frBSj2ky5+2EwmRzMsB375jHkcsHJvjQdWrLjXbjQ9ZUyAAyIqvy5WUst0LWtse
hjz4UqsQoEz4ZakCmS09eKgDe0sRfHzoCTh9emp/nsuqXxnQpZx80/GrsUYnTwHe
oSewhmNBhTiK4bkves6Vs/R3wjXaHoX1IkKvA9xkBHM/WtGGR9F9DS9QzGyrT5CR
3PN1cP1ZpaZhtbUxR3ipXrxFlvJmsKsG7WoVQe5SAr9RwN/hIp9djga23ZacF672
QwlTN8lf+codDqHNRvRRm+81GzoAbRAX
-----END CERTIFICATE-----
Generated at Sun Jan 11 23:55:15 2026 by rpki-client