This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft
File: cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft (raw, json)
Hash identifier: RhR23QQbPvVJdCwLJeiG+M7PEORydbgKNVwAlmrqO1A=
Subject key identifier: 8F:84:3F:89:EE:0E:2A:E0:8B:14:54:F2:83:A6:A7:16:D4:49:2B:37
Authority key identifier: 71:05:37:24:46:A2:06:45:46:D9:62:9F:42:1C:37:6F:DC:EF:21:D6
Certificate issuer: /CN=A9125C31/serialNumber=7105372446A2064546D9629F421C376FDCEF21D6
Certificate serial: 0C71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft
Manifest number: 0C69
Signing time: Sat 24 Jan 2026 18:11:47 +0000
Manifest this update: Sat 24 Jan 2026 18:11:46 +0000
Manifest next update: Sat 31 Jan 2026 18:11:46 +0000
Files and hashes: 1: cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl (hash: 8o9sYp/KtVtU3GU9GGUO0dzU0vR/lbOHJrRiRy5OO7A=)
2: 4697751815B111EA8277BA34C4F9AE02.roa (hash: DkIZeAaAkan684ICatRphM4s8owrBwB7oASzcpSzFXU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl
rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3185 (0xc71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125C31, serialNumber=7105372446A2064546D9629F421C376FDCEF21D6
Validity
Not Before: Jan 24 18:11:46 2026 GMT
Not After : Jan 31 18:11:46 2026 GMT
Subject: CN=69750b62-8db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2a:73:24:9e:5a:ae:37:cf:c2:4a:62:08:6d:
b7:79:72:cf:ae:84:05:e7:0b:17:fc:fb:85:bf:f8:
5e:3e:b9:fa:5b:77:97:b7:08:97:9d:06:56:80:34:
55:0c:f5:77:ce:d1:cd:83:73:2d:54:f9:db:74:b3:
b8:b6:60:d8:00:5e:f2:28:ff:53:04:ed:1e:03:eb:
1f:c2:57:ec:f7:00:b0:c9:ec:51:54:71:b0:ff:6f:
bb:6b:ab:f0:6f:91:f7:6e:a9:06:b0:8c:65:19:94:
9f:0f:04:2c:24:82:88:a8:4a:3d:99:c0:87:69:e1:
a0:f6:f6:31:9f:b9:8b:09:0e:4a:12:73:d6:42:8a:
3d:1d:a4:c9:9c:f0:4c:97:23:0e:46:79:20:b2:cc:
3f:78:32:e9:76:98:e7:ec:9f:61:58:ea:a7:54:4a:
bb:38:97:32:58:a7:54:c5:0f:22:46:80:14:2a:36:
9e:93:db:ac:0f:08:14:97:c6:4a:cf:28:a3:d7:49:
32:e8:ee:e0:ea:d2:46:2d:3c:36:9f:16:66:5d:5d:
ae:50:2b:a6:85:82:65:a9:ba:d7:46:2a:ae:cb:ae:
4e:81:05:b1:ed:ee:1b:76:0d:19:7c:2f:f1:3a:8f:
a1:ca:cb:6d:fa:33:d9:76:70:97:53:a1:a7:c7:08:
6d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:84:3F:89:EE:0E:2A:E0:8B:14:54:F2:83:A6:A7:16:D4:49:2B:37
X509v3 Authority Key Identifier:
keyid:71:05:37:24:46:A2:06:45:46:D9:62:9F:42:1C:37:6F:DC:EF:21:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:43:9d:77:13:86:60:34:02:14:11:ca:4a:19:4a:18:28:c3:
bc:3b:2d:25:3f:b7:ed:05:b3:be:d8:de:fc:2d:23:e0:f7:e8:
90:08:bf:55:9c:d3:3a:16:b0:08:b5:74:ed:99:b6:cf:99:10:
f9:55:e0:73:99:5f:5d:48:ba:47:fe:dd:75:1b:00:99:a0:b7:
49:71:61:5b:b9:24:5e:05:4e:65:b7:e8:bf:37:c1:b1:c1:ed:
b8:ef:01:06:6e:6e:03:67:d2:05:9f:8b:60:8d:9e:88:ab:33:
97:d4:7f:d6:2a:ee:1c:ef:1f:23:11:7b:a4:06:89:b7:b5:bc:
cd:79:36:d5:69:fa:ea:e7:55:76:2f:f5:37:cd:03:b9:55:2d:
db:e8:db:de:bb:b8:7f:2e:4a:2f:38:30:ff:7c:6e:67:93:a1:
14:35:68:77:b7:d9:47:82:80:27:d2:b4:3a:da:1e:04:99:c6:
51:f6:21:8c:97:6b:32:a8:a3:64:d8:ce:b6:03:1c:9b:53:6e:
18:74:4a:d2:80:16:80:88:e6:41:bb:1f:e7:c3:49:47:f4:8d:
f6:b9:f1:0d:45:d1:15:14:5b:35:ca:41:2d:58:67:99:ae:72:
d8:fe:50:f4:52:00:c7:26:0e:fe:ae:38:11:03:20:ab:02:f0:
73:10:a2:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MjVDMzExMTAvBgNVBAUTKDcxMDUzNzI0NDZBMjA2NDU0NkQ5NjI5RjQyMUMzNzZG
RENFRjIxRDYwHhcNMjYwMTI0MTgxMTQ2WhcNMjYwMTMxMTgxMTQ2WjAYMRYwFAYD
VQQDDA02OTc1MGI2Mi04ZGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnypzJJ5arjfPwkpiCG23eXLProQF5wsX/PuFv/hePrn6W3eXtwiXnQZWgDRV
DPV3ztHNg3MtVPnbdLO4tmDYAF7yKP9TBO0eA+sfwlfs9wCwyexRVHGw/2+7a6vw
b5H3bqkGsIxlGZSfDwQsJIKIqEo9mcCHaeGg9vYxn7mLCQ5KEnPWQoo9HaTJnPBM
lyMORnkgssw/eDLpdpjn7J9hWOqnVEq7OJcyWKdUxQ8iRoAUKjaek9usDwgUl8ZK
zyij10ky6O7g6tJGLTw2nxZmXV2uUCumhYJlqbrXRiquy65OgQWx7e4bdg0ZfC/x
Oo+hystt+jPZdnCXU6GnxwhtRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+EP4nu
DirgixRU8oOmpxbUSSs3MB8GA1UdIwQYMBaAFHEFNyRGogZFRtlin0IcN2/c7yHW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMzMS8zOEJGNDA5QTE1
OTAxMUVBOUM0MTM2NTJDNEY5QUUwMi9jUVUzSkVhaUJrVkcyV0tmUWh3M2I5enZJ
ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NRVTNKRWFpQmtWRzJXS2ZRaHczYjl6dklkWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NUMzMS8zOEJGNDA5QTE1OTAxMUVBOUM0MTM2NTJDNEY5QUUwMi9jUVUzSkVhaUJr
VkcyV0tmUWh3M2I5enZJZFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDFQ513E4ZgNAIUEcpKGUoYKMO8Oy0lP7ftBbO+2N78LSPg9+iQCL9V
nNM6FrAItXTtmbbPmRD5VeBzmV9dSLpH/t11GwCZoLdJcWFbuSReBU5lt+i/N8Gx
we247wEGbm4DZ9IFn4tgjZ6IqzOX1H/WKu4c7x8jEXukBom3tbzNeTbVafrq51V2
L/U3zQO5VS3b6Nveu7h/LkovODD/fG5nk6EUNWh3t9lHgoAn0rQ62h4EmcZR9iGM
l2syqKNk2M62AxybU24YdErSgBaAiOZBux/nw0lH9I32ufENRdEVFFs1ykEtWGeZ
rnLY/lD0UgDHJg7+rjgRAyCrAvBzEKII
-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:50 2026 by rpki-client