This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
File: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft (raw, json)
Hash identifier: X5o8HlVEMGE+QgJ+zI8K7qt8auhkUoWcR639PhVv21U=
Subject key identifier: 25:58:1D:E3:16:F3:AE:B1:23:1F:CF:B6:71:3B:4F:5F:A6:B2:29:7B
Authority key identifier: 42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96
Certificate issuer: /CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
Certificate serial: 0105
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
Manifest number: 0101
Signing time: Sun 25 Jan 2026 04:23:38 +0000
Manifest this update: Sun 25 Jan 2026 04:23:38 +0000
Manifest next update: Sun 01 Feb 2026 04:23:38 +0000
Files and hashes: 1: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl (hash: Mrbra60K1oJI6FfADDru9byXAh/X0KrGt2oMoR2E1+Y=)
2: 5F18EB127A7E11EF932E0B3EC4F9AE02.roa (hash: VWRRCd4nJbWD0TRBP58eY5MdXn/pUrD+aCnAKKgYqGE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl
rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140436, serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
Validity
Not Before: Jan 25 04:23:38 2026 GMT
Not After : Feb 1 04:23:38 2026 GMT
Subject: CN=69759aca-d31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ef:76:17:73:7a:4b:45:9c:74:85:e8:cf:e9:
9f:68:b6:34:c2:89:35:14:45:82:71:3c:68:c8:4a:
d3:92:c9:5b:fd:cd:b8:00:00:f5:73:b0:73:99:72:
0f:96:8c:38:a0:a9:76:36:97:6a:37:de:83:1d:92:
ff:05:ba:81:42:33:d4:c2:91:ff:5a:d5:8d:db:96:
0b:43:72:35:35:a6:9f:78:a1:5f:0d:fc:a4:90:f9:
80:a3:77:75:48:60:fb:2e:00:d9:4b:63:5c:34:3c:
73:99:c6:d6:17:7c:88:0b:9b:75:58:d1:13:ed:dd:
06:bc:56:46:8c:3b:ee:0a:16:bd:d8:c6:9e:03:ba:
5d:8f:4f:71:39:36:4f:62:4e:8c:c0:2e:91:89:b7:
c1:72:c4:1e:78:2d:ad:00:16:cf:36:d0:d4:ed:6a:
3a:d4:86:b8:97:7d:8f:d1:c9:ae:e4:9b:17:08:9d:
0b:95:ee:e0:27:53:ee:22:12:3c:aa:04:72:31:a4:
da:02:1b:99:71:a9:f3:e5:73:11:2e:06:21:34:e5:
ab:03:92:74:15:56:f6:86:a5:25:8d:0b:e7:41:ad:
95:7d:80:ac:fb:7f:6b:31:fc:32:2f:b8:b5:dd:08:
66:aa:ff:2d:8e:ab:18:13:9d:e0:ff:46:3d:cd:20:
8a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:58:1D:E3:16:F3:AE:B1:23:1F:CF:B6:71:3B:4F:5F:A6:B2:29:7B
X509v3 Authority Key Identifier:
keyid:42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:7e:f0:52:59:b1:05:48:19:c9:91:79:2d:ce:5b:3b:cb:57:
1d:21:61:af:e6:62:2d:9a:18:ef:83:f7:94:84:1e:07:5c:cd:
cd:4b:23:48:36:ae:6a:65:df:0d:f6:6d:7a:97:48:35:0c:3b:
30:cd:0f:ea:6e:fd:c3:75:3d:df:b3:88:d8:d7:6d:a1:c5:c0:
52:70:83:4a:63:52:14:c4:b9:6c:4c:8c:29:85:da:05:7e:62:
87:c4:85:7e:ac:92:0e:db:e1:6c:d4:db:2d:0e:53:f1:27:d3:
a9:51:e6:da:54:85:b4:67:10:50:45:8b:af:7f:3f:d9:ff:76:
78:51:b9:d2:fc:48:04:19:3a:04:59:3a:34:97:7e:3f:0a:44:
30:83:3a:34:24:ca:77:90:eb:9f:c1:9a:ae:6e:28:09:4f:87:
31:1e:61:1d:c9:c2:9a:bd:84:b0:86:5c:23:04:a6:55:97:1c:
ea:fb:15:25:e4:a4:15:84:db:a1:33:1c:39:a1:be:ce:e3:94:
a1:26:9a:10:50:3d:d5:b3:65:4d:aa:92:e0:b9:83:20:55:b6:
4b:a7:a9:5a:51:3f:46:61:4d:60:30:9e:44:c5:b5:cb:a1:ff:
98:2e:e8:d0:de:8c:63:cc:5f:4a:38:34:02:e4:46:21:4b:3b:
4c:8f:6e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:17:13 2026 by rpki-client