This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft
File: mqzM8QlZesZbyPegUCo-pK4cXxk.mft (raw, json)
Hash identifier: 1AMBDN12r5B9f97Fzlualjy/GsfnoIrAoUYB8+vcg54=
Subject key identifier: C5:15:FC:1B:21:B8:F3:B8:E6:25:20:60:FD:01:8B:20:6E:9A:75:E3
Authority key identifier: 9A:AC:CC:F1:09:59:7A:C6:5B:C8:F7:A0:50:2A:3E:A4:AE:1C:5F:19
Certificate issuer: /CN=A91232CA/serialNumber=9AACCCF109597AC65BC8F7A0502A3EA4AE1C5F19
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft
Manifest number: 74
Signing time: Fri 23 Jan 2026 05:54:11 +0000
Manifest this update: Fri 23 Jan 2026 05:54:11 +0000
Manifest next update: Fri 30 Jan 2026 05:54:11 +0000
Files and hashes: 1: mqzM8QlZesZbyPegUCo-pK4cXxk.crl (hash: 6pOnXGEUH6UsFVvkS1TeH4vd1Tyks5mgef7hQvlxkOI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.crl
rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 05:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91232CA, serialNumber=9AACCCF109597AC65BC8F7A0502A3EA4AE1C5F19
Validity
Not Before: Jan 23 05:54:11 2026 GMT
Not After : Jan 30 05:54:11 2026 GMT
Subject: CN=69730d03-71e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:a6:5e:13:39:b3:d8:93:c5:d8:c4:42:4c:
c0:e7:23:a8:d5:82:bb:46:68:8e:70:eb:9b:24:3e:
9f:ac:4d:1c:7f:c1:81:23:8e:96:c7:6f:79:43:62:
a1:d7:07:41:58:bc:8d:80:81:ca:20:85:c9:4c:e7:
50:e9:71:1a:e5:5a:aa:22:45:59:ff:f7:9c:26:a0:
b7:6d:fd:dc:70:d0:d3:15:eb:4e:f2:ee:ed:b7:7b:
ea:c3:4a:43:4d:25:61:63:93:cf:37:30:12:4e:11:
54:1a:83:d6:92:86:89:16:76:79:95:e9:35:cf:5c:
d5:dc:48:12:26:43:e7:f5:fa:03:ff:75:1e:7c:db:
51:e1:22:8b:88:51:de:40:b5:1b:f8:3c:b7:bb:3e:
ef:7f:9d:be:6b:af:c0:44:ae:66:5a:70:ad:43:0e:
f0:2a:dc:0a:0e:28:e7:6a:60:13:29:46:92:6f:2c:
50:ec:d3:4b:ed:b6:85:42:ef:e3:a1:78:2d:11:ee:
d9:da:13:4d:7f:d2:43:78:09:72:2e:c2:97:e7:b0:
89:97:68:07:28:53:35:41:3d:cb:c9:15:62:ab:a9:
da:b5:2a:10:99:76:bf:f3:af:a4:ab:d2:ff:86:69:
e8:5f:44:d5:7c:b5:e7:47:d8:98:81:13:ed:ab:ed:
5c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:15:FC:1B:21:B8:F3:B8:E6:25:20:60:FD:01:8B:20:6E:9A:75:E3
X509v3 Authority Key Identifier:
keyid:9A:AC:CC:F1:09:59:7A:C6:5B:C8:F7:A0:50:2A:3E:A4:AE:1C:5F:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqzM8QlZesZbyPegUCo-pK4cXxk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91232CA/8158ED2E468611F0A974F740C4F9AE02/mqzM8QlZesZbyPegUCo-pK4cXxk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:72:4d:a2:11:7d:b1:d5:dc:1f:41:e0:74:a0:7c:1a:69:ae:
25:73:f6:22:4c:1e:f5:21:44:27:34:4f:37:fe:a6:24:c9:15:
9b:83:89:ce:75:29:f7:a1:45:81:77:34:c3:b2:19:c9:fc:f6:
9e:27:d4:63:6c:9d:9d:30:48:d2:42:13:25:13:a6:8a:34:1e:
af:b5:5d:bc:1b:69:fe:5d:65:32:f3:45:9e:7c:54:ef:43:e3:
98:eb:d5:67:b8:0e:49:ae:33:c9:6e:e4:66:5e:d9:30:67:9b:
20:5f:30:1a:48:90:4c:66:2d:c3:69:9c:9a:36:6c:d7:88:08:
75:dd:93:aa:1a:53:fd:b7:52:0b:e6:c2:ba:4d:0b:49:86:cf:
9d:c3:91:43:9b:f1:ff:f0:9e:e2:1f:72:5f:48:eb:10:4a:4c:
d1:eb:f6:59:ae:c6:26:1d:eb:80:0c:f6:1d:58:ef:e4:cb:49:
28:dd:b4:3c:e1:75:a8:54:52:8b:e2:4a:14:70:42:b9:4b:1c:
59:40:ef:47:f5:6e:10:07:37:2e:20:6d:e7:5b:d9:0f:6f:68:
e0:91:1e:78:b9:75:0c:98:aa:d5:40:f5:1f:75:4f:82:41:ba:
22:91:c4:bf:bc:41:69:dd:53:35:2c:fa:b7:c0:b2:3c:83:89:
19:c5:29:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:27 2026 by rpki-client