This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft File: qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft (raw, json) Hash identifier: 9Lo3fDnBU5nu6oZ3eGbyKJyrzxFLpdsVIYaZE0CcRtQ= Subject key identifier: 23:62:A3:89:F7:C9:62:FC:9A:4F:35:43:2D:CD:91:46:95:A6:8A:BB Authority key identifier: AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 Certificate issuer: /CN=A914E026/serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Certificate serial: 0D0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft Manifest number: 0D0A Signing time: Sat 24 Jan 2026 17:43:36 +0000 Manifest this update: Sat 24 Jan 2026 17:43:36 +0000 Manifest next update: Sat 31 Jan 2026 17:43:36 +0000 Files and hashes: 1: qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl (hash: q1VGB4xTe48eQqV1enBaNJaPynZavJGuGbrys1Ug6KE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3338 (0xd0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E026, serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Validity Not Before: Jan 24 17:43:36 2026 GMT Not After : Jan 31 17:43:36 2026 GMT Subject: CN=697504c8-c0f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6c:5b:88:a2:5f:28:19:f8:92:d4:4c:af:26: 2a:39:d2:5e:c2:dc:54:29:2d:d3:57:d4:94:23:a3: 5a:41:80:71:0c:5f:5a:2b:d8:18:15:47:09:4c:61: bd:9c:95:59:95:0b:c8:f7:38:11:23:a6:aa:5b:5f: 76:92:d3:ea:c5:84:75:7e:27:df:b6:7b:02:7c:22: 88:80:c4:4f:2e:8b:2c:83:fb:05:f8:6c:7a:a3:c9: cc:89:e4:9f:79:74:44:52:35:0c:16:cb:96:6b:fd: 27:72:26:e8:1c:f2:ec:c9:8f:e6:ae:ac:e5:03:a0: 67:ab:d9:7d:fa:8f:5d:73:cd:bb:fa:ef:7d:e3:89: 57:50:e2:5a:45:dd:65:7c:9c:87:f8:f3:0b:4c:a5: 39:2f:d9:b2:9f:18:65:43:53:0e:94:dd:6a:6b:b7: 56:87:43:e0:a4:b2:94:c7:7e:98:79:ad:44:5f:91: 17:2a:5c:5f:3b:a5:58:a4:5f:70:38:6b:45:56:ce: 94:aa:65:12:d2:c7:23:c4:d3:63:94:aa:bf:dc:7d: fc:f8:06:1d:62:1e:ed:75:42:34:c1:45:0f:0c:8d: 8d:78:08:6c:dc:ed:b1:10:6c:59:e4:67:52:34:76: ba:de:39:b3:5e:3f:6c:3d:00:c2:84:23:4a:15:c0: 7d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:62:A3:89:F7:C9:62:FC:9A:4F:35:43:2D:CD:91:46:95:A6:8A:BB X509v3 Authority Key Identifier: keyid:AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:db:7d:58:97:b8:a0:24:8b:1d:24:7a:95:b3:9c:a9:67:cc: aa:ae:3d:72:cc:5b:98:c2:7b:e7:43:2b:ae:e9:c6:3b:59:a6: 6b:21:7d:ba:a2:4d:6c:5c:34:08:3d:9a:c4:45:8c:9c:ff:a9: 24:a4:49:63:3c:33:87:16:30:3d:1f:ee:01:6b:d3:3b:1f:e7: 55:dd:11:c2:92:d8:71:88:75:41:a0:96:91:63:dc:07:e8:a4: 21:b7:ea:bd:15:7f:ff:7b:42:d3:6a:a0:48:7c:5b:b5:af:2c: e3:ad:e2:f3:5b:29:c7:d6:72:4f:80:d8:5f:a2:4c:82:37:48: b9:e6:c7:6d:19:26:a5:ca:57:42:35:21:9a:98:8e:fc:6c:7e: bf:64:9d:c2:ef:79:7b:d1:e0:c3:23:cd:27:49:84:33:8a:37: d1:57:95:ca:da:34:37:7f:d2:31:4b:63:98:16:f6:16:c6:11: 28:f9:44:db:44:86:1b:5c:01:68:9c:42:ad:68:c3:5e:6f:f1: 40:83:e1:09:2b:54:cb:b7:5d:17:0f:86:fe:83:a8:e8:61:9c: 7a:69:77:ef:8c:1f:fc:60:3e:71:65:7d:f0:ee:4e:55:89:ef: 68:ed:a7:7b:5b:7e:7d:0b:d7:ad:8f:26:67:ad:6f:2c:eb:2b: 26:ee:8b:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMjYxMTAvBgNVBAUTKEFCMEQ4Nzk3QzU4QTgzQTVCNDlDMDc3QTMyRUY2NzMy ODcyNEU0MTIwHhcNMjYwMTI0MTc0MzM2WhcNMjYwMTMxMTc0MzM2WjAYMRYwFAYD VQQDDA02OTc1MDRjOC1jMGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWxbiKJfKBn4ktRMryYqOdJewtxUKS3TV9SUI6NaQYBxDF9aK9gYFUcJTGG9 nJVZlQvI9zgRI6aqW192ktPqxYR1fifftnsCfCKIgMRPLossg/sF+Gx6o8nMieSf eXREUjUMFsuWa/0nciboHPLsyY/mrqzlA6Bnq9l9+o9dc827+u9944lXUOJaRd1l fJyH+PMLTKU5L9mynxhlQ1MOlN1qa7dWh0PgpLKUx36Yea1EX5EXKlxfO6VYpF9w OGtFVs6UqmUS0scjxNNjlKq/3H38+AYdYh7tdUI0wUUPDI2NeAhs3O2xEGxZ5GdS NHa63jmzXj9sPQDChCNKFcB9DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNio4n3 yWL8mk81Qy3NkUaVpoq7MB8GA1UdIwQYMBaAFKsNh5fFioOltJwHejLvZzKHJOQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAyNi9ENkIyNjMwNEY1 NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2VzBuQWQ2TXU5bk1vY2s1 QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F3MkhsOFdLZzZXMG5BZDZNdTluTW9jazVCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAyNi9ENkIyNjMwNEY1NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2 VzBuQWQ2TXU5bk1vY2s1QkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa231Yl7igJIsdJHqVs5ypZ8yqrj1yzFuYwnvnQyuu6cY7WaZrIX26 ok1sXDQIPZrERYyc/6kkpEljPDOHFjA9H+4Ba9M7H+dV3RHCkthxiHVBoJaRY9wH 6KQht+q9FX//e0LTaqBIfFu1ryzjreLzWynH1nJPgNhfokyCN0i55sdtGSalyldC NSGamI78bH6/ZJ3C73l70eDDI80nSYQzijfRV5XK2jQ3f9IxS2OYFvYWxhEo+UTb RIYbXAFonEKtaMNeb/FAg+EJK1TLt10XD4b+g6joYZx6aXfvjB/8YD5xZX3w7k5V ie9o7ad7W359C9etjyZnrW8s6ysm7ovq -----END CERTIFICATE-----Generated at Sun Jan 25 02:57:32 2026 by rpki-client