This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
File: q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft (raw, json)
Hash identifier: /4QnxEt7NZ0Y/D41zi8NrZYZiFwuJ1t2Sxa3BPVdSS0=
Subject key identifier: 22:1B:68:8A:F9:BA:9C:B1:55:0D:78:C8:53:BE:85:AD:F2:15:E3:52
Authority key identifier: AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF
Certificate issuer: /CN=A913C91A/serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF
Certificate serial: 0204
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
Manifest number: 01FB
Signing time: Sun 25 Jan 2026 01:58:40 +0000
Manifest this update: Sun 25 Jan 2026 01:58:40 +0000
Manifest next update: Sun 01 Feb 2026 01:58:40 +0000
Files and hashes: 1: q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl (hash: FHOtJzfF+fUM6zMr4D9Fd7eCluM5Z81gupxk4TQSs3A=)
2: ADAEBBD6161F11EE9C6E4529C4F9AE02.roa (hash: 7BVmNepQES6T7o+2bZV/zc2Q9T00B1Q0rsuk0jHEIvU=)
3: ACFD7470161F11EE9C6E4529C4F9AE02.roa (hash: kG8HKid+EZkU/hyqnFNZ4Dj2sC9Icf/i925ERR1UGyw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl
rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:58:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516 (0x204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C91A, serialNumber=AB8789C70C742EAF959F46A1B974E5454C0AFFAF
Validity
Not Before: Jan 25 01:58:40 2026 GMT
Not After : Feb 1 01:58:40 2026 GMT
Subject: CN=697578d0-169e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ab:99:d6:38:c1:9b:ea:c9:ad:c6:55:8a:9e:
60:e6:b6:23:f4:4d:54:a5:33:56:a7:1c:70:20:87:
bd:89:78:ec:c3:32:de:19:95:85:01:85:6d:13:d6:
42:bc:79:08:9e:d0:66:28:73:bc:ed:f9:9f:a5:17:
e5:18:0f:3b:b8:35:43:ff:bc:03:9c:71:60:b4:69:
4d:83:dc:c7:8e:66:01:ca:ff:45:b2:61:e4:06:b8:
ef:94:a2:ed:aa:74:69:53:5d:75:88:9b:7a:ab:95:
aa:e0:37:c6:c4:67:63:27:27:21:b5:c4:d5:38:aa:
d0:d1:01:4f:73:a9:18:d8:51:0e:58:d6:54:16:ba:
f4:6a:82:91:2f:9e:c1:65:ea:98:8e:ae:8f:3a:b4:
ad:ba:7c:d2:09:8a:31:79:1d:95:33:da:11:a4:07:
54:53:ca:64:7d:01:d2:1b:73:13:43:5f:90:aa:8b:
c5:70:b7:7d:b8:ec:7a:48:9a:ae:e5:86:a6:58:c2:
c1:27:ba:6b:30:84:26:dd:fc:36:d9:22:ef:13:96:
fd:92:bb:b4:de:9c:9e:8b:b9:71:ed:10:ec:39:42:
fa:0f:98:b5:56:1c:ff:cf:59:f9:69:d2:50:a8:a1:
d6:d7:4d:01:89:cb:44:da:84:8d:73:88:17:10:e0:
9f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1B:68:8A:F9:BA:9C:B1:55:0D:78:C8:53:BE:85:AD:F2:15:E3:52
X509v3 Authority Key Identifier:
keyid:AB:87:89:C7:0C:74:2E:AF:95:9F:46:A1:B9:74:E5:45:4C:0A:FF:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C91A/61E70D86161811EE80B9414EC4F9AE02/q4eJxwx0Lq-Vn0ahuXTlRUwK_68.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:ff:ae:3c:2e:2d:96:a9:f9:35:2e:83:32:94:44:82:d7:91:
b7:f6:49:a0:d1:d6:d9:e3:5c:df:cc:14:cf:5d:c0:06:21:90:
9c:b1:93:f9:93:a6:08:24:f2:64:15:aa:0b:bb:23:d6:7d:b8:
3e:d8:26:0a:e6:b3:3b:73:34:0b:a6:bb:da:22:3e:1d:76:95:
b1:7a:a0:4f:f8:96:e3:41:be:81:3e:80:9a:56:d0:88:76:cf:
a0:fd:70:64:62:64:52:cc:2b:fa:ba:fe:f2:10:87:b6:8a:6f:
89:de:b9:5e:c3:35:4e:a4:83:3e:df:c8:2a:70:bc:8f:ac:36:
56:c5:7d:7e:41:17:69:42:81:ab:29:52:d6:35:65:0b:e1:be:
6e:0e:88:1f:75:fe:be:35:96:e8:a6:cd:b8:49:a3:f0:48:99:
ab:1c:7f:34:2d:46:4f:b9:4f:e5:7b:a7:b5:45:85:93:c7:31:
09:b6:f9:ce:8c:23:b4:fa:f4:2e:07:a7:6b:be:0b:9f:5a:d5:
91:af:e8:8e:4c:93:c9:ab:da:cb:9f:e7:7e:07:a7:27:d0:45:
02:f2:35:6c:85:a6:2c:a8:be:a9:51:2d:31:70:fe:0c:9f:6f:
60:2c:0e:7b:86:f6:36:cf:d8:31:bf:7d:7a:6a:44:99:6c:35:
40:61:9d:28
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0M5MUExMTAvBgNVBAUTKEFCODc4OUM3MEM3NDJFQUY5NTlGNDZBMUI5NzRFNTQ1
NEMwQUZGQUYwHhcNMjYwMTI1MDE1ODQwWhcNMjYwMjAxMDE1ODQwWjAYMRYwFAYD
VQQDDA02OTc1NzhkMC0xNjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjauZ1jjBm+rJrcZVip5g5rYj9E1UpTNWpxxwIIe9iXjswzLeGZWFAYVtE9ZC
vHkIntBmKHO87fmfpRflGA87uDVD/7wDnHFgtGlNg9zHjmYByv9FsmHkBrjvlKLt
qnRpU111iJt6q5Wq4DfGxGdjJychtcTVOKrQ0QFPc6kY2FEOWNZUFrr0aoKRL57B
ZeqYjq6POrStunzSCYoxeR2VM9oRpAdUU8pkfQHSG3MTQ1+QqovFcLd9uOx6SJqu
5YamWMLBJ7prMIQm3fw22SLvE5b9kru03pyei7lx7RDsOUL6D5i1Vhz/z1n5adJQ
qKHW100BictE2oSNc4gXEOCfSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIbaIr5
upyxVQ14yFO+ha3yFeNSMB8GA1UdIwQYMBaAFKuHiccMdC6vlZ9Gobl05UVMCv+v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzkxQS82MUU3MEQ4NjE2
MTgxMUVFODBCOTQxNEVDNEY5QUUwMi9xNGVKeHd4MExxLVZuMGFodVhUbFJVd0tf
NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3E0ZUp4d3gwTHEtVm4wYWh1WFRsUlV3S182OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QzkxQS82MUU3MEQ4NjE2MTgxMUVFODBCOTQxNEVDNEY5QUUwMi9xNGVKeHd4MExx
LVZuMGFodVhUbFJVd0tfNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBH/648Li2Wqfk1LoMylESC15G39kmg0dbZ41zfzBTPXcAGIZCcsZP5
k6YIJPJkFaoLuyPWfbg+2CYK5rM7czQLprvaIj4ddpWxeqBP+JbjQb6BPoCaVtCI
ds+g/XBkYmRSzCv6uv7yEIe2im+J3rlewzVOpIM+38gqcLyPrDZWxX1+QRdpQoGr
KVLWNWUL4b5uDogfdf6+NZbops24SaPwSJmrHH80LUZPuU/le6e1RYWTxzEJtvnO
jCO0+vQuB6drvgufWtWRr+iOTJPJq9rLn+d+B6cn0EUC8jVshaYsqL6pUS0xcP4M
n29gLA57hvY2z9gxv316akSZbDVAYZ0o
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:16:23 2026 by rpki-client