This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft File: QNg3fKpabquREz6WLv9-IbURPbk.mft (raw, json) Hash identifier: sygBEtjWlhf0y+pu6rwN7Ih+m2H7ZW3mFtIinWX0p2s= Subject key identifier: 04:7A:4B:5B:45:38:5A:D7:5E:09:84:17:CA:82:15:97:AB:AD:53:EA Authority key identifier: 40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 Certificate issuer: /CN=A9145D4C/serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9 Certificate serial: 02A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft Manifest number: 029E Signing time: Sun 25 Jan 2026 00:41:08 +0000 Manifest this update: Sun 25 Jan 2026 00:41:07 +0000 Manifest next update: Sun 01 Feb 2026 00:41:07 +0000 Files and hashes: 1: QNg3fKpabquREz6WLv9-IbURPbk.crl (hash: uv0he2YaONPXiSVFrM7h+hby/GKdc6Pq9+MO+agefn0=) 2: 5E24BEAADA7C11ED8156D867C4F9AE02.roa (hash: gYrGpBtOa5YIIgPcE2GiFbVbv7Rp37pYIDK6OFW+qv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 00:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 679 (0x2a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D4C, serialNumber=40D8377CAA5A6EAB91133E962EFF7E21B5113DB9 Validity Not Before: Jan 25 00:41:07 2026 GMT Not After : Feb 1 00:41:07 2026 GMT Subject: CN=697566a4-929b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:da:44:14:ad:dd:94:6a:23:10:ca:b1:f2:e7: 11:8f:9c:69:5c:23:4a:45:1e:3b:ef:82:e1:94:d1: 48:69:08:4a:a1:6e:3b:97:a2:a6:e9:43:22:54:ce: 82:65:1d:26:f2:8a:b7:b2:8e:3f:25:ee:d9:bb:37: c7:97:9f:24:bc:cf:0c:a7:bc:4d:06:a8:b9:ce:b4: 92:06:d1:9a:79:48:91:b0:6a:04:42:5f:46:a0:5a: c1:6f:5c:1d:55:03:82:77:54:3f:5e:4a:42:b5:f4: 5b:a8:eb:7c:c3:35:1d:ff:a8:65:0a:31:d4:16:94: b6:29:d9:ab:f3:9b:3d:a1:1a:66:97:98:d9:24:6f: e0:d1:57:eb:48:56:42:2c:f8:eb:54:d5:5c:df:e4: e7:88:4d:f4:a0:9f:d3:c7:28:2a:4c:5c:11:dc:f4: cd:19:e9:81:f2:8e:c7:1a:b9:c0:c3:2d:e1:ae:59: 30:f7:06:b1:63:33:ca:4c:0a:79:6b:7f:33:1b:54: 0e:d8:23:05:16:15:5e:4a:78:3f:c1:11:bc:e2:50: 67:c6:55:4d:09:3e:b1:8c:e5:10:70:61:a1:fa:d6: 07:27:65:e4:b2:43:cc:f8:6c:6e:e3:90:18:9b:69: 86:ed:59:fc:9f:5a:5f:d4:fb:39:d8:f5:5f:b4:39: 4b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7A:4B:5B:45:38:5A:D7:5E:09:84:17:CA:82:15:97:AB:AD:53:EA X509v3 Authority Key Identifier: keyid:40:D8:37:7C:AA:5A:6E:AB:91:13:3E:96:2E:FF:7E:21:B5:11:3D:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNg3fKpabquREz6WLv9-IbURPbk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D4C/F422FD12325811EDBD16D624C4F9AE02/QNg3fKpabquREz6WLv9-IbURPbk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:cb:52:1d:8a:55:fb:85:8a:ce:e2:67:d8:88:f0:44:69:b7: a0:5c:bb:d8:a5:a2:e3:4b:df:a6:d7:b9:2c:3f:1d:3e:67:cc: 08:8c:fb:e2:17:da:62:59:94:0d:9f:c9:32:43:d0:1e:44:95: de:a9:07:c8:3c:73:7a:ec:c4:97:ef:65:be:c9:af:b6:c9:20: 1f:d6:84:8c:15:2b:02:75:b5:5b:f9:24:7d:4c:2a:0b:ee:c6: 14:9d:af:19:cc:f5:df:be:79:9f:d2:f8:a8:82:48:df:9b:30: ba:18:38:d8:73:05:cf:e3:15:c9:50:7a:93:e9:72:1a:46:f8: f0:d7:11:95:9b:e8:a7:e1:73:4e:ef:81:1f:11:59:90:e4:d9: 1c:79:39:85:d7:e5:d2:ab:34:59:de:c2:05:ef:60:96:ec:90: c1:98:dd:ec:31:db:00:db:c8:4b:ed:cd:f2:ef:52:05:11:e7: 80:be:b8:f0:21:da:33:86:70:0a:2e:8c:a9:4a:54:e7:03:70: 64:0d:d3:ee:2b:21:6c:3c:76:83:bb:47:ac:f3:17:d0:1a:d8: e1:71:3f:37:5b:88:6b:26:de:58:64:20:06:35:38:76:94:42: 8f:23:66:92:63:b7:cd:ce:4b:68:6a:e7:8e:92:f9:f9:78:01: 35:e9:04:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVENEMxMTAvBgNVBAUTKDQwRDgzNzdDQUE1QTZFQUI5MTEzM0U5NjJFRkY3RTIx QjUxMTNEQjkwHhcNMjYwMTI1MDA0MTA3WhcNMjYwMjAxMDA0MTA3WjAYMRYwFAYD VQQDDA02OTc1NjZhNC05MjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4NpEFK3dlGojEMqx8ucRj5xpXCNKRR4774LhlNFIaQhKoW47l6Km6UMiVM6C ZR0m8oq3so4/Je7ZuzfHl58kvM8Mp7xNBqi5zrSSBtGaeUiRsGoEQl9GoFrBb1wd VQOCd1Q/XkpCtfRbqOt8wzUd/6hlCjHUFpS2Kdmr85s9oRpml5jZJG/g0VfrSFZC LPjrVNVc3+TniE30oJ/TxygqTFwR3PTNGemB8o7HGrnAwy3hrlkw9waxYzPKTAp5 a38zG1QO2CMFFhVeSng/wRG84lBnxlVNCT6xjOUQcGGh+tYHJ2XkskPM+Gxu45AY m2mG7Vn8n1pf1Ps52PVftDlLhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAR6S1tF OFrXXgmEF8qCFZerrVPqMB8GA1UdIwQYMBaAFEDYN3yqWm6rkRM+li7/fiG1ET25 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQ0Qy9GNDIyRkQxMjMy NTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJxdVJFejZXTHY5LUliVVJQ YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOZzNmS3BhYnF1UkV6NldMdjktSWJVUlBiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUQ0Qy9GNDIyRkQxMjMyNTgxMUVEQkQxNkQ2MjRDNEY5QUUwMi9RTmczZktwYWJx dVJFejZXTHY5LUliVVJQYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBny1IdilX7hYrO4mfYiPBEabegXLvYpaLjS9+m17ksPx0+Z8wIjPvi F9piWZQNn8kyQ9AeRJXeqQfIPHN67MSX72W+ya+2ySAf1oSMFSsCdbVb+SR9TCoL 7sYUna8ZzPXfvnmf0viogkjfmzC6GDjYcwXP4xXJUHqT6XIaRvjw1xGVm+in4XNO 74EfEVmQ5NkceTmF1+XSqzRZ3sIF72CW7JDBmN3sMdsA28hL7c3y71IFEeeAvrjw IdozhnAKLoypSlTnA3BkDdPuKyFsPHaDu0es8xfQGtjhcT83W4hrJt5YZCAGNTh2 lEKPI2aSY7fNzktoaueOkvn5eAE16QTb -----END CERTIFICATE-----Generated at Sun Jan 25 06:18:13 2026 by rpki-client