This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
File: qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft (raw, json)
Hash identifier: pUtg+i7ZzKeEe1AQlZ7FNhi/QA5QQpfBF5TMhCrz/p0=
Subject key identifier: B6:FE:AD:CD:4D:1C:90:8E:08:2A:B6:A2:B6:38:24:F3:80:F8:CB:98
Authority key identifier: A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA
Certificate issuer: /CN=A911FABC/serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA
Certificate serial: 022B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
Manifest number: 0225
Signing time: Sun 25 Jan 2026 01:31:11 +0000
Manifest this update: Sun 25 Jan 2026 01:31:11 +0000
Manifest next update: Sun 01 Feb 2026 01:31:11 +0000
Files and hashes: 1: qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl (hash: JisKhuJ5q2oc5p0vlPsTrCCot3SqWBoNUUfGnupVGCA=)
2: 9BF55430C4D611EDA65E8C87C4F9AE02.roa (hash: yQWifcUacebm0QWmZ7UB602HfF6Yw1unRDBx3kif0PM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl
rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 555 (0x22b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FABC, serialNumber=A87242B73627D429234A5F54C523BB41EBBE87AA
Validity
Not Before: Jan 25 01:31:11 2026 GMT
Not After : Feb 1 01:31:11 2026 GMT
Subject: CN=6975725f-34d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:36:bf:61:eb:45:f2:c1:48:97:c4:fd:1d:
1d:08:6d:27:04:db:81:34:89:38:20:cb:b0:40:7a:
ad:fd:3c:c2:61:d3:12:e7:61:ae:98:71:e3:8d:b5:
87:03:f4:86:38:ea:d4:01:64:4f:b8:ec:52:4e:a3:
a4:c0:17:64:a4:07:38:bf:fd:e1:07:e8:6d:e4:a9:
94:a5:49:a2:19:16:a6:6a:e8:a9:7e:13:72:ff:15:
9c:70:70:3c:88:ea:bb:52:d9:a0:0c:f2:2f:6d:29:
17:1a:fa:d8:7f:a8:0a:cf:b1:23:cf:c4:55:3b:9b:
1e:4a:a1:ed:57:5a:59:00:67:c9:fe:91:b5:22:9f:
91:c8:1a:64:0c:9b:7b:37:b7:06:85:7d:7a:af:8b:
86:95:4a:ba:b8:f4:8b:44:1c:3d:65:d7:0f:92:fe:
f2:51:bc:18:88:02:df:8b:f8:87:60:9b:7e:5d:bf:
ed:f4:5a:3f:7c:ac:f8:08:a1:5b:f2:d3:ef:f3:ad:
6a:78:3f:7f:db:79:93:80:c9:0e:4b:d5:ea:a0:29:
96:6c:6f:e5:60:2a:46:5d:ab:0d:2a:02:85:d8:33:
72:14:2f:d7:6d:bb:a1:7d:bf:03:31:29:40:be:2f:
78:fc:84:39:b1:25:9b:1b:ef:f5:24:49:74:40:49:
73:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FE:AD:CD:4D:1C:90:8E:08:2A:B6:A2:B6:38:24:F3:80:F8:CB:98
X509v3 Authority Key Identifier:
keyid:A8:72:42:B7:36:27:D4:29:23:4A:5F:54:C5:23:BB:41:EB:BE:87:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABC/D9420076C4D211EDBF0E1982C4F9AE02/qHJCtzYn1CkjSl9UxSO7Qeu-h6o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:3b:d2:4e:ab:0a:28:57:38:55:31:bc:33:de:03:31:d1:7a:
05:79:91:db:ec:53:49:3a:c4:16:10:87:19:56:a7:71:34:83:
c2:eb:69:31:3e:a3:c6:0a:e9:6d:57:68:a7:98:27:a4:2a:1a:
1f:30:6e:91:7f:36:54:82:c8:9a:c8:c3:df:67:01:b2:af:15:
e7:f3:ea:f1:69:bd:ab:19:e0:60:41:dd:c3:07:23:94:58:46:
b8:b0:e3:79:42:b9:b1:2e:06:1b:c4:15:95:b1:4a:e9:8c:23:
cb:81:ac:14:f4:47:e7:3f:0c:e7:b3:8b:ad:13:49:29:61:c4:
62:e8:bf:25:61:01:fb:35:e8:d5:3a:87:7a:a3:d4:b3:e2:22:
29:e9:f2:66:fc:c1:13:36:85:a9:d4:73:b6:58:10:5c:e8:ac:
32:63:94:a9:73:d3:56:f2:d4:01:cd:19:e8:c4:48:1e:a3:b1:
af:e1:be:02:91:9c:53:dd:d5:b1:31:11:47:1e:1c:eb:6b:b1:
34:3b:4a:79:e0:9a:9d:82:df:03:52:2c:2b:ba:f7:c2:ec:2c:
b2:cf:b8:f7:c9:71:b5:ba:32:9e:35:8e:20:5c:d5:90:d4:89:
c7:cb:8f:9f:e9:fd:12:65:d8:dc:22:37:bf:d9:a6:d6:6a:8a:
5e:20:39:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:56:01 2026 by rpki-client