This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
File: qSHPiNjIngus1O4YU4wzsnipWSw.mft (raw, json)
Hash identifier: dQjy9a8EkQefuoy6uY3YAU7/OrCea6FyXSUKr32osUY=
Subject key identifier: 1D:23:0E:0C:0E:EB:98:BD:43:46:28:CC:D0:D3:02:F2:01:E2:66:2C
Authority key identifier: A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C
Certificate issuer: /CN=A91127A2/serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C
Certificate serial: 066A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
Manifest number: 0664
Signing time: Sat 24 Jan 2026 21:51:45 +0000
Manifest this update: Sat 24 Jan 2026 21:51:44 +0000
Manifest next update: Sat 31 Jan 2026 21:51:44 +0000
Files and hashes: 1: qSHPiNjIngus1O4YU4wzsnipWSw.crl (hash: CX1ojWzRZu8JCO78DebzJXGrO9Q8nAoJnhehkFHVxiw=)
2: 07332486B1D111EBA956F96AC4F9AE02.roa (hash: ttRZLKoMySXPeabXatArFdOxpzq9cRtpWwNwu6sfYas=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl
rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:51:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1642 (0x66a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91127A2, serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C
Validity
Not Before: Jan 24 21:51:44 2026 GMT
Not After : Jan 31 21:51:44 2026 GMT
Subject: CN=69753ef0-c3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:30:36:54:63:72:27:4a:70:3c:ed:1e:25:
39:c6:1b:42:d7:2a:b7:d9:7a:95:b9:68:05:aa:03:
9a:0a:ba:ca:c8:9a:88:98:48:ce:f6:e4:b9:cd:4d:
86:72:01:21:5f:f9:22:ea:e7:9d:57:59:9a:73:b0:
76:c3:a5:57:9d:6b:ab:21:f6:a8:c3:22:14:7f:b6:
5c:a4:14:2e:c7:5e:31:5e:03:d5:30:45:21:6b:6b:
fd:1a:3e:72:3c:73:8e:67:b1:91:4a:0d:25:ef:74:
21:80:0b:e4:b9:36:f1:f0:9c:30:e2:56:e9:3b:5f:
39:50:fe:ab:5b:70:e7:c5:62:19:57:44:f8:38:4b:
34:b1:93:0f:e7:d9:2f:83:be:b8:af:48:6a:63:b1:
f2:fd:49:3d:1e:8c:75:51:71:73:8c:91:d4:af:d9:
7a:72:3b:ae:16:b3:b7:91:16:7e:1e:73:e7:12:63:
90:93:90:1b:22:e2:69:b1:92:1d:99:98:59:3f:40:
73:0c:f5:d0:45:4e:a3:e9:1a:f2:36:60:f8:91:9f:
55:25:b6:d4:b5:e2:aa:2b:29:13:6d:dc:40:5b:a5:
78:36:21:2f:e0:2a:92:b3:5b:7e:ce:64:03:b6:f4:
34:64:31:b3:7e:2c:74:51:19:83:22:22:3a:2f:1c:
60:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:23:0E:0C:0E:EB:98:BD:43:46:28:CC:D0:D3:02:F2:01:E2:66:2C
X509v3 Authority Key Identifier:
keyid:A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:8c:35:43:63:b4:63:99:5f:e2:55:6c:ac:ab:ea:d3:6b:e1:
2c:44:a6:03:6a:6f:f8:57:49:12:32:bf:ca:66:35:b0:7c:22:
fe:1b:a8:6e:09:f9:c0:d0:ca:e0:89:31:4c:84:28:99:1d:cc:
73:0b:15:9d:80:a3:7a:b8:42:7c:13:25:9a:6d:84:13:c1:69:
46:ae:b0:fa:1a:7c:e9:8d:6b:e7:30:ed:be:04:38:01:0b:55:
6e:0c:74:42:00:f8:80:b6:2d:32:e2:84:56:24:77:4b:b8:e3:
fa:97:a2:1e:e1:34:75:7a:c2:cd:a4:b0:0a:69:aa:ce:b0:e5:
8d:36:23:e5:7f:8e:36:ac:0a:95:65:63:f5:ac:1d:cf:15:2c:
9c:99:64:3f:be:c4:83:73:a9:02:34:49:88:2c:b0:99:f7:5f:
1d:4e:71:0c:38:7c:1b:c4:84:58:9f:d3:f6:09:d1:69:e8:5c:
e7:ba:3f:d9:5d:81:f4:6f:57:31:f1:ca:ef:ca:8c:cd:26:60:
ed:6c:ef:53:7b:e2:a7:02:a0:30:41:ac:8f:ec:a2:7c:23:a7:
9e:4c:17:02:be:74:ad:7d:61:5b:09:95:cc:ab:2c:14:52:0d:
2d:18:dd:04:d3:a2:6a:92:9c:e3:c6:bf:89:21:e8:37:b9:cb:
d9:45:43:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:33:22 2026 by rpki-client