This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
File: QRUiNGCj3frIOoL8YbK-nsYmwgw.mft (raw, json)
Hash identifier: BI60IuLhJz4xHB+KcskBqU3fgc1lFu3CwI776MxChA8=
Subject key identifier: 4C:38:6F:47:9F:BE:2C:5F:5C:E0:2E:46:C8:B4:EB:4B:46:9F:BA:71
Authority key identifier: 41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C
Certificate issuer: /CN=A914B45F/serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C
Certificate serial: DF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
Manifest number: DD
Signing time: Sun 25 Jan 2026 02:07:37 +0000
Manifest this update: Sun 25 Jan 2026 02:07:36 +0000
Manifest next update: Sun 01 Feb 2026 02:07:36 +0000
Files and hashes: 1: QRUiNGCj3frIOoL8YbK-nsYmwgw.crl (hash: jgLev9U+VHTtTd7w1bNZbcUlhogQ6kRHZDVAGSYb+Mo=)
2: 2017BFC2B07211EF83629B37C4F9AE02.roa (hash: mZ/ViBjIVIPe+nE/GVSLUGS2VukLj6yBRBsTJ8+0mQA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl
rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B45F, serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C
Validity
Not Before: Jan 25 02:07:36 2026 GMT
Not After : Feb 1 02:07:36 2026 GMT
Subject: CN=69757ae9-e277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:f7:b6:14:e0:a3:fb:15:81:5b:1d:75:ed:
02:61:75:2d:f5:87:fd:d7:e2:86:be:2c:26:6d:b9:
3f:82:64:e8:86:96:b5:03:28:03:aa:67:bd:b3:ad:
18:f9:1d:16:e1:85:ed:cd:a0:a4:04:73:2f:cd:ff:
13:c8:7b:b0:b1:2c:37:e6:11:d9:bc:e0:3f:b4:49:
04:89:23:2b:17:d6:ab:1b:75:3d:2a:1a:1d:9e:07:
2a:d4:75:16:92:30:da:62:fb:e0:30:54:61:92:59:
3d:3e:50:3b:4a:16:dc:64:a9:5e:00:a9:4f:99:c9:
15:e3:2f:7c:b7:96:c5:b5:ad:d4:a3:ce:4b:cd:e4:
13:7f:7b:28:4c:d6:05:be:9a:b4:59:0c:d9:e0:79:
91:8a:07:31:cb:71:00:39:72:dc:eb:b9:77:27:78:
74:93:a5:89:b2:79:3d:62:e7:e3:fa:c8:ff:c1:df:
15:36:c5:b8:3f:9f:ec:6e:22:b6:3c:c2:08:00:10:
fc:f5:67:f3:f7:3b:38:a5:c1:19:0b:59:30:81:08:
3d:82:e8:f6:a4:cc:93:bd:a9:2f:4d:6f:61:9e:a5:
7a:07:51:2b:98:32:e8:e7:56:ad:7a:88:bc:8b:3e:
f8:d6:31:bd:c1:4b:1a:63:2c:e6:07:ce:97:3a:69:
30:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:38:6F:47:9F:BE:2C:5F:5C:E0:2E:46:C8:B4:EB:4B:46:9F:BA:71
X509v3 Authority Key Identifier:
keyid:41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:e0:3b:6d:fa:04:5c:0e:e8:07:8a:4c:50:da:9c:8e:67:50:
a6:d1:34:fd:9c:95:40:94:51:b4:d1:a6:ac:f4:5e:73:9f:d5:
ef:e0:40:c4:f9:a5:63:3a:25:8f:2a:07:21:01:37:a4:35:4a:
73:d0:5e:63:5b:02:f5:11:50:ca:5e:42:1b:fa:99:65:dd:57:
19:aa:89:f5:5f:70:f1:61:a0:71:a7:61:c8:2c:d8:eb:b3:eb:
12:2c:ef:78:2f:62:d0:4b:db:1e:a9:b4:dd:0b:83:f2:0a:8e:
3a:ce:f1:0a:0b:cd:83:70:da:a7:9a:80:2e:0c:a9:88:fd:8f:
75:57:f4:d0:a1:3d:7c:d9:f7:8c:b7:45:da:4a:91:44:6b:55:
b9:20:59:e4:69:4d:6e:67:6b:42:5f:8a:3f:2d:53:1d:58:d0:
7c:25:84:ed:9c:6b:34:9e:e3:f4:ba:5a:c0:c8:95:61:ba:dd:
45:47:0d:f4:8b:c8:90:6e:15:60:47:e5:b1:24:74:4a:5f:94:
72:fb:e2:c7:8f:7a:1f:a5:a2:ce:26:5d:59:18:61:88:2b:b9:
5b:0e:00:71:80:a5:e4:5d:01:39:ae:50:1e:d9:b3:f7:19:8b:
57:a0:8d:a0:e3:8f:ea:42:f1:28:8e:ed:57:92:b0:3c:0e:0a:
70:2d:ec:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:59:17 2026 by rpki-client