This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
File: q9Q1SGWcuydu-NNbghL4OOjOt18.mft (raw, json)
Hash identifier: b01poC0mpUfUb0JT8tKJDzRSeuesM1G1JCa35MgbKng=
Subject key identifier: CA:98:4D:A3:FE:1A:35:1B:19:B5:6E:99:B7:48:B0:1D:05:92:19:CB
Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
Certificate issuer: /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Certificate serial: 0B27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
Manifest number: 0A91
Signing time: Sat 24 Jan 2026 19:14:52 +0000
Manifest this update: Sat 24 Jan 2026 19:14:51 +0000
Manifest next update: Sat 31 Jan 2026 19:14:51 +0000
Files and hashes: 1: q9Q1SGWcuydu-NNbghL4OOjOt18.crl (hash: REU90rn4wj2bsTE7pOrIH5kzY4yQJms1W4yVAXq1/KY=)
2: 2452CF76CA7211F0B02B6A1BC4F9AE02.roa (hash: EhRiET3/O/CAcA8UbfYM10LqOs+ivWwDL8NkdbgVPBE=)
3: AEB63B14CA7011F09EF8E018C4F9AE02.roa (hash: ITTyY5G30Fvas/0S+enf6yUkjS5jiMxLhDJKjGPsvSg=)
4: AE493460CA7011F0B41AE018C4F9AE02.roa (hash: x0tDHZhxlrlqp7ek+TZhxXR8qsGnahQo2H42I0fE5ag=)
5: ABF4F248555511F0A341047BC4F9AE02.roa (hash: I1d1RCJ4rw/8orQ3As1NQw/eL62cfyC0BCN7vQ6zw48=)
6: 0B0485A250B811EBA8A3C670C4F9AE02.roa (hash: Ytc9ndn0dlR+m8jI9GCXZzm6gP/TjFiRbPEGnx2/DEc=)
7: AF2F0B70CA7011F08E39E018C4F9AE02.roa (hash: 6Vgk/FxkYHBSFOkyH08KuRKKx5WE4ccXDRwyAZBcYRk=)
8: C14670EE323811F09C91DE2FC4F9AE02.roa (hash: FB2huuZ/tiCR/IS/ucieD51OLCSYw6eG3ZIKY9r9AjQ=)
9: 6580E03C79E511EC99DA1B51C4F9AE02.roa (hash: gXzfPpJraCI1eMZ7u0kJ3M/+wD9m7V2Y4ANIxMghKvU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:14:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2855 (0xb27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B1E, serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Validity
Not Before: Jan 24 19:14:51 2026 GMT
Not After : Jan 31 19:14:51 2026 GMT
Subject: CN=69751a2c-b641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:72:b4:13:ad:68:6d:a2:05:ff:75:88:83:
a9:67:3e:2c:a3:eb:4a:25:84:14:08:27:af:b6:9d:
8c:f6:72:22:5b:d7:3d:1d:9f:b6:ae:01:8e:cb:64:
0f:fa:89:30:fd:b2:48:fb:1b:7d:e5:a9:31:91:c1:
7f:84:6b:e2:00:5b:dd:a4:19:e3:4f:6b:5b:3a:d3:
78:2b:a1:32:f6:69:c2:6c:ff:ff:79:30:93:11:5b:
4e:a9:68:22:c8:3c:d9:28:1f:55:9a:a9:6a:e8:ab:
a4:5c:3a:96:00:a8:d1:37:21:90:d2:01:34:1d:49:
6c:54:68:1c:a6:41:74:a5:be:22:93:86:b2:90:5e:
b6:55:f7:96:dd:20:c8:91:c6:38:ee:34:2a:8d:2b:
5b:1c:d6:9c:ef:f6:f3:cb:bc:b8:21:4b:4f:44:f7:
7a:d4:dd:98:4f:73:f6:b9:01:1a:42:3f:a2:6c:81:
50:98:20:5c:8e:7e:6b:b7:a0:95:a6:12:95:e3:f4:
13:0d:01:3f:9b:3f:53:0e:5b:60:a0:63:00:4d:4c:
37:5a:72:16:ae:13:8b:b3:4a:61:e6:06:1a:a0:c9:
f2:a3:16:54:10:e6:27:b3:8c:40:67:ed:c7:39:00:
6d:6b:70:e6:1a:ab:f2:ff:95:b0:34:e7:a8:d5:39:
fc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:98:4D:A3:FE:1A:35:1B:19:B5:6E:99:B7:48:B0:1D:05:92:19:CB
X509v3 Authority Key Identifier:
keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:90:4e:63:04:5b:18:d7:c4:db:d2:68:3c:e0:42:74:04:d7:
aa:4b:e5:cd:f2:41:25:20:c0:bb:fd:8b:cc:7f:aa:66:fc:ba:
45:49:51:b1:a4:a6:25:1c:46:44:d4:f8:05:58:81:c3:d4:3b:
93:1c:56:ba:59:46:b0:19:2f:68:0f:66:e7:9b:fd:01:26:1a:
26:e1:8f:0e:c4:12:84:43:1f:a4:2a:39:9c:42:d8:2d:04:99:
79:b3:bb:b3:4e:a9:ec:71:93:f7:16:97:9e:b3:3e:f1:50:93:
7c:d3:a8:55:a4:e9:3c:61:b0:2e:1f:86:09:c1:e9:80:e9:20:
77:2c:44:a0:cf:a5:e6:84:c3:3f:ad:eb:ac:ca:7d:15:b2:92:
da:f8:22:58:8b:9a:c7:d1:68:9f:53:fa:ea:c2:ea:0b:ce:0f:
9b:ae:88:ee:0c:e1:28:85:ed:fe:c0:a9:56:58:b3:17:09:57:
54:43:2e:08:2c:48:d5:36:be:59:69:0d:51:00:7e:3b:e9:92:
df:71:5d:68:ab:81:83:66:c5:ee:81:74:62:93:fb:7e:1a:db:
0f:18:06:b3:5f:3c:f7:89:91:75:28:bd:f1:36:20:0c:5a:29:
ad:7c:54:b6:f3:90:14:45:c6:0f:27:51:1c:02:43:43:7e:10:
80:ad:29:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:16 2026 by rpki-client