This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
File: qelaQWvM7v2G6i-gGcJeTXa46dk.mft (raw, json)
Hash identifier: 9SP5g3Zoyn6vzYZ9at3HdsImwMsRjQ5V/GF9H+jS5us=
Subject key identifier: 36:8F:0C:B1:2D:EC:56:55:C1:5E:DC:24:5C:D9:C6:8C:6F:1B:A2:96
Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9
Certificate issuer: /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9
Certificate serial: 12D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
Manifest number: 12BB
Signing time: Sat 24 Jan 2026 16:48:14 +0000
Manifest this update: Sat 24 Jan 2026 16:48:14 +0000
Manifest next update: Sat 31 Jan 2026 16:48:14 +0000
Files and hashes: 1: qelaQWvM7v2G6i-gGcJeTXa46dk.crl (hash: C+H6kezQSHlyLgLB37/m6QHK49n4CS/fqd/lUlaQxSI=)
2: EFA0015E593911EFA8EAD43CC4F9AE02.roa (hash: /Ap9CSMlbg4Z4XpJ5kSZEcOsTjIpg7hIcLCNKU8Ina4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl
rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4821 (0x12d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C676, serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9
Validity
Not Before: Jan 24 16:48:14 2026 GMT
Not After : Jan 31 16:48:14 2026 GMT
Subject: CN=6974f7ce-d513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ba:d7:c6:0a:5e:20:ad:99:c5:fc:6a:3c:02:
23:fc:92:d5:53:5e:99:b7:59:31:34:d8:91:11:2a:
eb:eb:a1:de:b7:6b:b9:1e:02:a3:d3:3c:cd:ec:42:
dd:6f:d6:3b:47:7a:f9:ee:96:ad:f7:f8:29:ab:d6:
13:ef:bb:9d:d0:4d:f7:59:cc:e8:59:a2:73:a1:d3:
53:92:1b:9f:2a:be:2d:6c:ea:75:bf:4c:89:34:9a:
f3:42:c0:9e:8b:2b:60:1b:8f:1a:b0:3c:cd:7b:c8:
b6:7b:db:72:88:51:8a:50:fc:60:4f:2f:7e:eb:db:
ec:9e:05:08:f9:3b:9e:86:d5:7b:a6:75:54:c7:f8:
fc:9d:f1:87:5b:bf:89:b1:10:68:d3:31:e1:f2:0e:
08:b6:b7:cc:04:1e:c3:0f:42:a5:54:b2:47:df:54:
e4:40:2e:55:88:72:2d:86:b7:a4:01:80:78:13:7b:
d1:33:d7:21:58:f3:a3:0e:04:db:fa:bb:68:83:2e:
bb:e3:c1:69:d5:26:84:3a:d0:88:5b:bc:91:d3:73:
2f:cd:f8:19:52:df:73:65:67:c4:04:cc:d8:d0:a2:
b1:87:0f:9c:65:f7:fb:1d:13:1e:f8:e5:a0:a0:57:
42:15:c2:2d:1a:a8:7e:9d:1f:25:40:8b:20:b5:17:
39:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8F:0C:B1:2D:EC:56:55:C1:5E:DC:24:5C:D9:C6:8C:6F:1B:A2:96
X509v3 Authority Key Identifier:
keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:f8:33:3c:0f:c2:d9:e5:1a:b5:10:53:87:b1:9e:8e:38:84:
d8:a9:5e:60:35:2b:44:08:36:e4:16:47:10:57:b6:32:cf:27:
93:6e:51:61:93:9c:4c:d8:c4:2a:12:83:cd:8a:86:89:70:c0:
70:4d:19:41:2c:97:b3:fb:f2:21:f4:b7:e5:99:fb:4d:2f:dc:
28:1d:6e:18:6d:b7:7d:cc:c7:d2:c9:74:38:ea:40:78:48:01:
2c:b2:16:d3:07:6e:d8:fe:52:65:54:01:51:6c:e3:08:ef:6d:
fa:bf:63:7d:53:71:6e:63:c6:9a:34:3f:0e:08:39:5f:c6:7c:
3c:bf:cb:1c:07:aa:52:b5:d7:63:75:8f:e5:ca:54:f8:2c:c8:
7f:0e:b7:10:6b:34:2e:94:b7:10:70:19:2a:8f:83:29:c1:ce:
78:9f:e6:7f:c5:c5:76:84:d5:0f:1e:9c:37:16:2d:30:9e:b0:
35:c5:30:13:6c:02:39:c1:32:7f:54:f6:db:7f:b5:3d:ee:76:
08:48:05:ed:ad:3d:fa:3d:11:46:a0:e6:91:74:90:3a:42:9e:
a1:55:b8:c2:d2:89:ec:5d:9e:79:c9:03:bf:27:40:bd:46:89:
e3:3e:d0:b6:f7:3e:43:b9:1e:d5:e0:dc:fb:fd:c8:57:08:83:
97:cb:59:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:20:48 2026 by rpki-client