This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft File: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft (raw, json) Hash identifier: BaF6+pYmovaakcm/E5dAREdsGcZQgBkGa2zjOSoDbjg= Subject key identifier: 95:ED:9D:8F:9C:78:6C:E7:7E:72:15:31:E4:C3:F9:04:04:EC:C8:C2 Authority key identifier: 43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12 Certificate issuer: /CN=A914A2CF/serialNumber=4381955E265A283F85DC9A44E9D51373127A2412 Certificate serial: 2831 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft Manifest number: 2821 Signing time: Sat 24 Jan 2026 15:28:40 +0000 Manifest this update: Sat 24 Jan 2026 15:28:40 +0000 Manifest next update: Sat 31 Jan 2026 15:28:40 +0000 Files and hashes: 1: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl (hash: 7xUU5YG3hKlj3ZEGFwthz6bejvTKqS+xoozC4H0PWM8=) 2: 6DAE125C54F611E79DF7E643C4F9AE02.roa (hash: h5hXtP9IbSxqcG/aS1dzRp2AGDqGhZ3NxNAa9bJM38Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 15:28:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10289 (0x2831) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A2CF, serialNumber=4381955E265A283F85DC9A44E9D51373127A2412 Validity Not Before: Jan 24 15:28:40 2026 GMT Not After : Jan 31 15:28:40 2026 GMT Subject: CN=6974e528-61be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:53:6a:66:e3:c9:74:0d:e4:cf:0a:4d:13:1e: a5:fa:a9:de:0c:54:1a:98:b3:e0:54:91:44:61:2f: a8:4d:eb:97:56:99:14:2e:d4:45:3d:37:bd:56:64: 20:ad:d8:39:01:bd:03:d9:fb:46:12:ba:72:59:8d: 04:5b:32:2b:1d:b6:78:dd:2a:5c:b5:e3:c7:cf:24: 43:53:db:26:f5:37:e3:f7:a4:26:a3:ee:a0:e9:98: 20:92:43:f7:04:8b:86:02:12:92:c4:48:09:dd:f0: 02:2a:0b:3f:2e:29:d1:fe:3c:aa:ad:5a:1d:09:85: 4a:6b:12:b9:e1:22:ce:4d:ee:c3:86:f4:44:8e:2e: e2:4c:01:05:50:6a:30:9a:9b:eb:b0:6b:97:c5:6c: de:c2:12:30:86:85:54:ac:e6:1b:3a:fc:fd:c3:af: e5:b9:e4:1f:3d:ca:e3:12:9a:a9:d1:70:18:78:7a: fc:0d:e1:ba:7b:c7:7e:1e:70:12:b1:71:b1:5e:c1: 7d:8f:d6:bd:7b:3b:11:80:f1:e2:14:29:62:df:fb: 40:15:18:ec:65:aa:38:23:da:23:b4:68:bd:18:c0: d4:34:fd:44:f8:0e:f7:69:30:68:7f:a4:c0:58:74: 50:37:a5:84:ec:ac:7d:2b:ae:f7:6c:22:d5:48:d6: 0f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:ED:9D:8F:9C:78:6C:E7:7E:72:15:31:E4:C3:F9:04:04:EC:C8:C2 X509v3 Authority Key Identifier: keyid:43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:dd:6e:bb:90:94:7b:d9:61:1a:16:0a:31:99:a4:07:65:68: 95:44:d3:67:f2:46:7f:5b:51:9e:9c:3c:4b:ba:31:25:cc:89: 0e:8b:bd:3c:80:ba:6c:5a:61:03:9f:58:ed:12:d4:a3:ee:01: fc:0f:a9:0c:ae:64:4a:cc:a7:1c:2a:03:79:81:bc:90:75:11: cc:fa:0d:cc:70:49:2a:3d:26:0f:d7:78:a2:9c:28:55:92:8d: 73:93:51:ee:cc:f1:65:e0:cd:0e:9b:6f:72:a7:5d:aa:44:57: d1:86:6f:3f:e5:e0:18:0b:e8:78:d2:bc:97:2b:8e:ec:16:a1: 94:c4:26:fe:f5:62:86:cb:fe:7e:56:2f:95:fa:f4:4b:49:40: 7e:80:7b:89:62:b8:ca:6f:dc:f0:55:4f:22:c7:da:42:9e:9c: 9b:71:70:c3:21:94:c1:d3:f4:cf:4f:5b:ae:36:04:60:61:8e: 77:dc:ee:0b:da:60:d7:e8:82:d0:dc:a2:fe:ba:02:6b:1d:87: 10:25:29:14:64:7c:a1:8e:ce:9c:e3:0c:36:ff:15:88:69:84: 16:4d:7b:cd:2b:5d:17:dd:df:07:6b:76:59:21:e7:49:a1:a9: 52:dc:5a:40:a3:d4:1e:9e:13:6c:54:f7:57:a4:68:1f:f2:d2: 10:54:82:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEEyQ0YxMTAvBgNVBAUTKDQzODE5NTVFMjY1QTI4M0Y4NURDOUE0NEU5RDUxMzcz MTI3QTI0MTIwHhcNMjYwMTI0MTUyODQwWhcNMjYwMTMxMTUyODQwWjAYMRYwFAYD VQQDDA02OTc0ZTUyOC02MWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1NqZuPJdA3kzwpNEx6l+qneDFQamLPgVJFEYS+oTeuXVpkULtRFPTe9VmQg rdg5Ab0D2ftGErpyWY0EWzIrHbZ43SpctePHzyRDU9sm9Tfj96Qmo+6g6ZggkkP3 BIuGAhKSxEgJ3fACKgs/LinR/jyqrVodCYVKaxK54SLOTe7DhvREji7iTAEFUGow mpvrsGuXxWzewhIwhoVUrOYbOvz9w6/lueQfPcrjEpqp0XAYeHr8DeG6e8d+HnAS sXGxXsF9j9a9ezsRgPHiFCli3/tAFRjsZao4I9ojtGi9GMDUNP1E+A73aTBof6TA WHRQN6WE7Kx9K673bCLVSNYPrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXtnY+c eGznfnIVMeTD+QQE7MjCMB8GA1UdIwQYMBaAFEOBlV4mWig/hdyaROnVE3MSeiQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTJDRi9ENjFGRUE5RUE3 NjYxMUU0QjExMDNEMzBDNEY5QUUwMi9RNEdWWGlaYUtELUYzSnBFNmRVVGN4SjZK QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E0R1ZYaVphS0QtRjNKcEU2ZFVUY3hKNkpCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTJDRi9ENjFGRUE5RUE3NjYxMUU0QjExMDNEMzBDNEY5QUUwMi9RNEdWWGlaYUtE LUYzSnBFNmRVVGN4SjZKQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl3W67kJR72WEaFgoxmaQHZWiVRNNn8kZ/W1GenDxLujElzIkOi708 gLpsWmEDn1jtEtSj7gH8D6kMrmRKzKccKgN5gbyQdRHM+g3McEkqPSYP13iinChV ko1zk1HuzPFl4M0Om29yp12qRFfRhm8/5eAYC+h40ryXK47sFqGUxCb+9WKGy/5+ Vi+V+vRLSUB+gHuJYrjKb9zwVU8ix9pCnpybcXDDIZTB0/TPT1uuNgRgYY533O4L 2mDX6ILQ3KL+ugJrHYcQJSkUZHyhjs6c4ww2/xWIaYQWTXvNK10X3d8Ha3ZZIedJ oalS3FpAo9QenhNsVPdXpGgf8tIQVIKv -----END CERTIFICATE-----Generated at Sun Jan 25 18:35:10 2026 by rpki-client