This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft
File: QbMaaMknik1EdI4t-MasqBV47LU.mft (raw, json)
Hash identifier: T2YDsHfz4acqgd02qht98ur3Q9ZOUcELUZvunoldt5I=
Subject key identifier: A3:4E:40:6F:AC:88:CD:32:36:EE:39:7A:FC:02:49:8D:7B:46:77:7F
Authority key identifier: 41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5
Certificate issuer: /CN=A9120A29/serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5
Certificate serial: 0B50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft
Manifest number: 0B49
Signing time: Sat 24 Jan 2026 18:44:37 +0000
Manifest this update: Sat 24 Jan 2026 18:44:37 +0000
Manifest next update: Sat 31 Jan 2026 18:44:37 +0000
Files and hashes: 1: QbMaaMknik1EdI4t-MasqBV47LU.crl (hash: EmM9C0K7NlW487BUwdQhB4wG5240lvrKl/ZJsU7e1V0=)
2: 73A346A24D5D11EAA811C368C4F9AE02.roa (hash: AtiHUqqiSc5seLUNoB/SjIutv6okcY16FsBOaprHkwA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.crl
rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2896 (0xb50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120A29, serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5
Validity
Not Before: Jan 24 18:44:37 2026 GMT
Not After : Jan 31 18:44:37 2026 GMT
Subject: CN=69751315-c510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:57:61:03:64:95:b8:2b:14:e4:6d:20:19:40:
c4:27:e0:60:cc:e0:29:88:8d:c7:d9:23:8d:9e:70:
e4:90:bd:91:c3:43:32:7f:3d:bf:b3:3b:8f:26:ab:
28:d7:fb:d2:c2:2a:80:74:11:c8:26:23:d3:17:95:
21:c1:10:48:ea:1f:8d:9f:67:0c:f7:db:01:51:29:
7c:9a:00:f1:fa:2f:1f:61:56:09:7e:e9:de:0c:ac:
a9:5e:ac:a7:a2:6d:79:a3:34:9a:c5:4c:b6:c2:8e:
d0:8b:84:70:4f:81:26:50:dc:32:98:aa:de:60:83:
27:e4:f5:79:9e:3b:15:47:fc:e8:6b:7f:d3:de:81:
55:40:e5:a1:46:67:1f:85:4e:b7:13:22:eb:98:c9:
22:d3:39:ee:27:e1:27:46:60:2b:44:58:ca:53:ca:
0f:84:7f:92:97:fd:b7:8d:6c:ca:06:03:9a:ed:35:
d0:6d:42:68:b6:8b:86:f6:6a:21:10:82:d6:c6:dd:
a3:60:4f:9a:86:31:c8:d6:4d:35:e1:1d:ba:87:8c:
43:1e:3f:0d:75:e2:76:41:aa:ec:fa:35:63:2a:f5:
fd:73:1d:ca:06:d2:3d:ea:91:de:db:4f:df:0f:bb:
a7:df:9c:35:36:ba:7b:fd:16:1e:42:e5:83:97:cd:
0d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4E:40:6F:AC:88:CD:32:36:EE:39:7A:FC:02:49:8D:7B:46:77:7F
X509v3 Authority Key Identifier:
keyid:41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:91:d4:cc:fd:ed:40:94:5f:9e:9e:f4:d1:98:e1:44:02:23:
a6:08:bf:70:d2:ae:c3:8c:cb:b6:2c:66:d5:79:34:ec:a3:35:
b2:14:48:7c:8a:98:a8:26:15:86:5f:86:5d:a4:88:b0:00:d6:
cb:9d:fe:93:04:4d:77:b2:d7:ce:5c:c5:8f:e6:a9:15:1f:55:
cf:4e:3e:9b:98:cd:2c:1c:bf:97:0e:6e:5b:04:0b:3a:62:df:
e2:1f:c1:8e:c3:bb:fd:52:82:f4:4f:b4:a7:d6:82:ef:2a:85:
71:72:86:39:17:fb:06:2e:15:2c:e2:9f:dc:55:fe:e4:68:86:
d4:64:ce:4a:b0:53:42:4b:6d:a9:34:b3:3f:32:87:d8:5f:3d:
e5:ea:f7:92:5f:79:dc:52:5b:7e:8a:bf:ef:c0:af:f1:54:0c:
3b:eb:01:2e:f3:d4:e1:54:31:03:10:93:2f:57:cd:0c:96:97:
bf:4a:dc:c6:89:77:f8:9c:6c:ff:01:f0:89:c5:ae:8b:c2:4c:
65:b1:16:fd:4d:00:dc:3c:67:1e:c2:d0:fd:be:f3:ea:b8:9d:
80:c0:34:6e:d2:8b:42:ea:30:55:f4:10:71:3f:9d:c1:2f:86:
08:ff:35:12:73:4b:9e:8e:50:4f:a2:fc:6a:71:db:38:40:83:
9a:09:20:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:27 2026 by rpki-client