This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft File: qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft (raw, json) Hash identifier: BVEkpNp1VkDYqpZYdTOtRbWs9nk/+oUjvJDine7G1I4= Subject key identifier: D4:D2:7C:83:07:42:4E:1B:E2:14:AB:EF:95:DC:DB:CA:6E:C7:AD:57 Authority key identifier: A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52 Certificate issuer: /CN=A9131C4B/serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft Manifest number: 42 Signing time: Fri 23 Jan 2026 06:23:55 +0000 Manifest this update: Fri 23 Jan 2026 06:23:55 +0000 Manifest next update: Fri 30 Jan 2026 06:23:55 +0000 Files and hashes: 1: qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl (hash: Zlv7jgm9CjTMoDsHv1d5UCstCFOc0B2cr+jFrSG1zTE=) 2: E811884091F511F0AF44B33CC4F9AE02.roa (hash: B8mE+BnGcSCfetwEpKMi2JnuLvodcbXJyjm1nAZFbgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:23:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131C4B, serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752 Validity Not Before: Jan 23 06:23:55 2026 GMT Not After : Jan 30 06:23:55 2026 GMT Subject: CN=697313fb-1c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1f:37:c2:f4:8b:96:93:2f:e0:98:fa:1c:d8: 44:f7:a9:85:1c:ba:19:38:6b:48:83:da:2e:f9:94: 7e:e2:84:64:3e:30:9f:8a:32:ee:40:c5:33:bf:81: f9:32:5b:48:4a:5c:c1:85:4f:d7:76:cc:d4:57:40: 1e:95:50:e7:4c:7b:28:91:8c:f1:03:99:f9:3b:ef: 69:97:01:42:f0:12:91:5e:a4:63:22:47:52:31:91: 25:b2:33:a5:2c:a8:f6:7a:d1:9a:68:59:74:8c:23: ab:26:40:7e:f0:2b:ba:48:a7:2c:d5:2a:5b:0a:f5: f7:18:85:97:60:df:2e:6a:90:ca:3d:ac:ea:03:e1: 1b:c3:5e:09:fb:4a:73:a8:12:eb:f0:25:0b:06:19: 3f:56:81:af:bd:22:b1:a0:53:fd:e8:e0:0e:a4:37: 84:1c:02:55:ed:45:d5:c3:38:21:54:77:df:72:9d: 83:6e:8c:81:42:72:15:e7:ef:28:23:73:6e:93:5e: 0b:fe:56:94:da:9d:3d:4d:3a:a0:d1:28:61:66:3a: 76:49:b6:4c:8a:44:cb:1b:3e:c3:ef:af:33:e8:d7: a4:91:57:ce:1f:69:7f:22:20:72:7e:f9:a7:c2:a0: b8:05:f4:94:09:2d:7b:03:ac:dc:c4:12:75:5b:b0: bd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D2:7C:83:07:42:4E:1B:E2:14:AB:EF:95:DC:DB:CA:6E:C7:AD:57 X509v3 Authority Key Identifier: keyid:A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:f7:1c:65:2d:3d:e1:84:72:04:5c:3b:30:87:7c:0d:c6:b0: b5:04:d4:00:a2:1c:1e:a6:d8:bc:7d:50:ad:d7:71:e4:71:ed: 8e:09:3c:c3:5e:de:15:d9:4d:c6:5c:7e:e9:d3:40:4f:52:50: 2f:e3:be:69:b5:19:53:28:40:2a:b5:03:4e:f8:00:db:40:3b: 0c:16:89:00:82:e6:c6:5c:27:ef:51:d2:23:eb:f5:52:12:02: 28:4e:16:5e:e7:a4:a1:bf:20:97:5a:10:84:df:f0:40:0f:b4: 46:72:47:52:a1:06:0f:84:1f:b2:50:96:31:24:1e:fe:73:99: ff:c8:ea:40:e0:f1:f3:06:fe:e0:96:87:ee:ce:f9:0e:b3:de: 92:ce:77:9c:0e:af:b8:e4:6b:96:b6:c2:20:e6:c4:4e:06:70: f7:f2:1c:96:98:fb:57:ac:fc:bf:ee:19:09:71:8e:47:70:2f: 36:73:0b:39:16:4a:fd:dd:0b:45:14:0b:df:9b:de:2a:b6:b0: c6:a2:cc:46:8c:e7:0d:9d:48:8f:23:f4:84:f2:44:e9:aa:88: 84:0c:68:bc:83:74:27:e8:c4:01:f1:3b:67:71:13:c1:db:da: 16:04:8c:91:70:f2:ca:ce:ca:e3:a8:b4:45:b2:5d:f6:36:17: 90:26:f1:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MUM0QjExMC8GA1UEBRMoQThFMTkzMENCQjcyOENCRThEOUVBM0EyRjY0MEY1Mzk4 NDYzQzc1MjAeFw0yNjAxMjMwNjIzNTVaFw0yNjAxMzAwNjIzNTVaMBgxFjAUBgNV BAMMDTY5NzMxM2ZiLTFjNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBHzfC9IuWky/gmPoc2ET3qYUcuhk4a0iD2i75lH7ihGQ+MJ+KMu5AxTO/gfky W0hKXMGFT9d2zNRXQB6VUOdMeyiRjPEDmfk772mXAULwEpFepGMiR1IxkSWyM6Us qPZ60ZpoWXSMI6smQH7wK7pIpyzVKlsK9fcYhZdg3y5qkMo9rOoD4RvDXgn7SnOo EuvwJQsGGT9Wga+9IrGgU/3o4A6kN4QcAlXtRdXDOCFUd99ynYNujIFCchXn7ygj c26TXgv+VpTanT1NOqDRKGFmOnZJtkyKRMsbPsPvrzPo16SRV84faX8iIHJ++afC oLgF9JQJLXsDrNzEEnVbsL1FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1NJ8gwdC ThviFKvvldzbym7HrVcwHwYDVR0jBBgwFoAUqOGTDLtyjL6NnqOi9kD1OYRjx1Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxQzRCLzA5QzZDMzdBOTFG NTExRjA4ODM0RUIxQUM0RjlBRTAyL3FPR1RETHR5akw2Tm5xT2k5a0QxT1lSangx SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcU9HVERMdHlqTDZObnFPaTlrRDFPWVJqeDFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx QzRCLzA5QzZDMzdBOTFGNTExRjA4ODM0RUIxQUM0RjlBRTAyL3FPR1RETHR5akw2 Tm5xT2k5a0QxT1lSangxSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJT3HGUtPeGEcgRcOzCHfA3GsLUE1ACiHB6m2Lx9UK3XceRx7Y4JPMNe 3hXZTcZcfunTQE9SUC/jvmm1GVMoQCq1A074ANtAOwwWiQCC5sZcJ+9R0iPr9VIS AihOFl7npKG/IJdaEITf8EAPtEZyR1KhBg+EH7JQljEkHv5zmf/I6kDg8fMG/uCW h+7O+Q6z3pLOd5wOr7jka5a2wiDmxE4GcPfyHJaY+1es/L/uGQlxjkdwLzZzCzkW Sv3dC0UUC9+b3iq2sMaizEaM5w2dSI8j9ITyROmqiIQMaLyDdCfoxAHxO2dxE8Hb 2hYEjJFw8srOyuOotEWyXfY2F5Am8dk= -----END CERTIFICATE-----Generated at Sun Jan 25 08:58:33 2026 by rpki-client