This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft
File: qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft (raw, json)
Hash identifier: yIRyzAxkxBaOU0dHlDwCp+ebchWP/oCfP4uMceJdReQ=
Subject key identifier: F8:44:A1:FE:24:44:0A:61:9F:C9:E6:F0:81:7E:95:26:3D:E9:F6:C1
Authority key identifier: AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B
Certificate issuer: /CN=A913C04E/serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B
Certificate serial: 01CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft
Manifest number: 01C5
Signing time: Fri 23 Jan 2026 02:15:37 +0000
Manifest this update: Fri 23 Jan 2026 02:15:37 +0000
Manifest next update: Fri 30 Jan 2026 02:15:37 +0000
Files and hashes: 1: qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl (hash: 4Qmu1Gj6XV02ez4+y5E8wbfSXoLe05RHo2ai3TRUzUo=)
2: F696778AFE6C11EF8DF5DD5FC4F9AE02.roa (hash: MhowPeZSiNZp59R7cxUY280rgW3KhDyuYTuF7r4VgLQ=)
3: 7236C4D8513211EEA8D81765C4F9AE02.roa (hash: u8AwSmxDFWZDKiV8J1m6ovC7b3ZHtGWT1cfjDOWs8Nc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl
rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 02:15:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459 (0x1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C04E, serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B
Validity
Not Before: Jan 23 02:15:37 2026 GMT
Not After : Jan 30 02:15:37 2026 GMT
Subject: CN=6972d9c9-289c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:3f:cc:1e:2d:b1:58:7a:51:0a:f6:5e:ac:
75:36:3a:b8:fe:7a:d2:00:dc:1f:d3:53:9d:e4:9c:
3e:45:7d:95:a7:ba:74:e0:4e:db:b6:2f:7b:12:8b:
e4:a4:eb:41:6d:b5:2d:6e:c1:be:da:7e:94:e5:af:
90:ec:0b:93:49:aa:3d:05:b0:45:5f:4e:9e:dd:11:
22:a3:be:98:7a:4e:90:c8:14:cb:fb:73:10:23:16:
07:bf:52:b1:5b:96:1b:9a:bb:08:dc:22:da:29:3f:
ad:5a:c8:8f:1b:93:17:21:d6:1d:31:fe:7a:da:51:
a5:d2:8e:4a:b8:37:5d:b2:92:59:ae:09:63:7a:f4:
50:58:a4:58:50:1a:2e:7a:1b:02:66:4d:96:dd:3e:
3a:df:de:7a:af:b7:70:0e:05:1e:b9:65:40:81:a8:
bd:5d:e3:2f:93:38:f0:6c:54:00:bd:30:b3:df:26:
63:01:6f:6c:2e:fd:3b:ae:04:e1:ca:01:7d:47:24:
dc:a9:6e:b6:a2:03:a3:b5:f5:67:0e:67:e6:0b:74:
45:ee:e0:ec:7e:81:ec:e1:4d:41:94:87:f0:cf:88:
ab:6b:45:2c:ef:08:aa:af:98:68:20:5c:76:f5:af:
8f:83:3e:14:c8:be:b2:3e:6d:6a:7a:3c:eb:19:09:
b3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:44:A1:FE:24:44:0A:61:9F:C9:E6:F0:81:7E:95:26:3D:E9:F6:C1
X509v3 Authority Key Identifier:
keyid:AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:22:b3:d1:e4:2e:03:e2:87:e6:9c:f8:f6:37:21:fa:7a:60:
aa:b7:07:38:b0:c9:80:70:6f:c2:2e:38:33:83:ce:10:0b:62:
f7:97:3b:19:92:f9:2f:39:7b:d4:d8:58:82:81:a0:5d:c3:b8:
54:aa:c9:53:78:09:df:5e:75:97:72:a6:d4:d0:25:1f:c2:4d:
71:7b:02:61:95:f7:1d:8b:36:e0:3e:44:ab:cd:03:de:f3:28:
53:cd:09:0c:5e:75:23:bb:a1:2d:a7:17:70:1a:31:15:88:b7:
36:17:44:01:9f:f1:3c:81:f1:be:d7:7f:ae:fd:15:8c:cb:ac:
67:97:db:f2:e5:11:d9:99:f0:d2:b4:49:96:ce:b8:90:2d:58:
7e:9d:94:d2:52:94:79:aa:f3:07:8f:3f:17:bc:95:31:42:7a:
11:3f:44:6b:36:a8:c6:3c:d4:e6:50:32:bf:10:db:40:1b:41:
3f:47:74:35:68:f5:d6:5b:d6:d2:96:a6:4f:ba:00:7a:8e:7b:
4f:ba:35:b6:30:4f:41:d2:d8:c2:0c:7c:1d:57:cf:d5:da:f0:
3b:89:ec:03:22:e5:bc:a9:27:0f:79:46:25:bf:c3:da:26:64:
ba:fd:b4:23:3e:4d:a0:aa:8b:1d:2f:1f:16:a0:00:1a:66:0a:
dd:db:d6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:36 2026 by rpki-client