This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft
File: BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft (raw, json)
Hash identifier: DkAktlz2zPLsLb2UstOjastZHHsg19wnktAXyVTT5Us=
Subject key identifier: B6:90:03:23:14:99:D5:82:BA:37:C0:64:86:A0:4A:D6:01:25:48:98
Authority key identifier: 05:03:7E:4C:DE:44:EC:66:42:C4:16:9F:A8:51:37:2D:78:FB:FC:AB
Certificate issuer: /CN=A915E77C/serialNumber=05037E4CDE44EC6642C4169FA851372D78FBFCAB
Certificate serial: 0250
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft
Manifest number: 024C
Signing time: Sun 25 Jan 2026 01:03:39 +0000
Manifest this update: Sun 25 Jan 2026 01:03:39 +0000
Manifest next update: Sun 01 Feb 2026 01:03:39 +0000
Files and hashes: 1: BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl (hash: QO5sMLtJzh4rYLz/ldRs54o5Fq6/naUAdwH6rpY5N80=)
2: A20DDFE2725911ED8CB4D763C4F9AE02.roa (hash: 1rx0JLbKoH5J997GcDJA9iOnUSimYhQYe3L8RaCpiFs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl
rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 592 (0x250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E77C, serialNumber=05037E4CDE44EC6642C4169FA851372D78FBFCAB
Validity
Not Before: Jan 25 01:03:39 2026 GMT
Not After : Feb 1 01:03:39 2026 GMT
Subject: CN=69756beb-c5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b3:11:56:c5:27:df:13:36:e5:fc:35:22:fa:
52:86:ad:11:18:7d:38:d2:ba:8a:43:0f:87:b1:c4:
dc:37:5c:7a:a4:a8:ac:a6:1d:4d:f4:70:80:96:0f:
b7:13:b6:78:2e:16:aa:f0:16:64:4d:e4:19:8e:35:
55:b4:90:43:bd:4f:c6:0b:fc:8b:8d:81:55:fa:2d:
e3:fa:fc:03:e3:33:7d:d5:41:9f:9d:83:73:a9:b6:
1b:d4:74:32:62:4e:a3:eb:94:26:9f:0a:12:91:2e:
92:2b:9f:d0:8e:3c:0e:ba:f2:d9:42:48:ac:57:4d:
58:8f:17:f4:d2:0d:8f:a0:68:6f:a4:25:32:74:98:
e1:62:a2:b7:4b:7a:12:7e:a3:e5:bb:04:f7:60:c1:
c6:8f:cf:55:55:83:42:37:ca:f0:1b:8c:cd:74:80:
86:d0:54:12:95:46:34:e1:2a:23:68:f5:45:1a:8c:
7a:c4:eb:fd:b4:66:8a:33:f6:cb:00:83:f7:d4:e3:
e4:cf:85:0a:56:e8:75:ad:7e:f9:ed:8a:b8:78:18:
2e:d7:8b:a0:1c:66:9b:69:f5:bd:e9:cf:8c:40:3c:
74:80:0d:e3:fe:e5:42:26:a7:b1:d2:db:b5:91:b5:
ce:5c:28:1b:b9:a0:b5:e3:22:ae:94:bc:cd:27:70:
8b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:90:03:23:14:99:D5:82:BA:37:C0:64:86:A0:4A:D6:01:25:48:98
X509v3 Authority Key Identifier:
keyid:05:03:7E:4C:DE:44:EC:66:42:C4:16:9F:A8:51:37:2D:78:FB:FC:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:c9:bf:8d:4f:45:78:8e:93:4d:3b:4e:c8:d4:24:ba:d9:a8:
38:3e:e5:85:8a:b0:6f:32:91:77:9b:c0:6f:8a:d1:5e:61:8b:
09:1f:aa:c0:a6:de:49:ab:c4:80:7b:4f:0b:ea:81:5f:de:46:
83:e1:2d:e1:33:21:e7:d4:96:86:61:a2:08:6e:c5:0d:61:56:
e8:81:8f:14:a1:7d:64:98:d9:40:33:e3:7d:12:a4:33:ac:bf:
4b:2a:0c:00:14:47:04:60:df:50:e8:3f:e2:70:44:84:b3:38:
80:12:2d:40:a4:f5:51:14:a1:28:9e:c2:85:1b:20:e6:37:01:
bf:fa:d2:cc:6c:c9:1a:f0:b3:8f:d0:ba:78:74:94:a2:69:7d:
db:3c:f5:42:09:63:54:4a:07:d4:54:1e:59:88:4a:62:df:c9:
43:f4:90:7b:5c:8d:66:b6:84:40:95:15:22:cd:07:69:db:a6:
87:40:e7:fe:ae:10:49:b0:f6:5d:95:f4:45:ef:90:6d:23:d4:
88:5b:4f:08:8d:69:3c:fe:c4:f5:bf:52:95:44:48:fe:1b:78:
51:d1:fe:ca:bc:2e:1c:36:2c:ef:86:a7:aa:53:2d:28:25:fb:
16:94:cc:d7:3a:77:a5:11:b3:8b:ff:bd:41:01:e8:f8:89:ef:
a2:70:67:35
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NUU3N0MxMTAvBgNVBAUTKDA1MDM3RTRDREU0NEVDNjY0MkM0MTY5RkE4NTEzNzJE
NzhGQkZDQUIwHhcNMjYwMTI1MDEwMzM5WhcNMjYwMjAxMDEwMzM5WjAYMRYwFAYD
VQQDDA02OTc1NmJlYi1jNWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA57MRVsUn3xM25fw1IvpShq0RGH040rqKQw+HscTcN1x6pKisph1N9HCAlg+3
E7Z4Lhaq8BZkTeQZjjVVtJBDvU/GC/yLjYFV+i3j+vwD4zN91UGfnYNzqbYb1HQy
Yk6j65QmnwoSkS6SK5/QjjwOuvLZQkisV01Yjxf00g2PoGhvpCUydJjhYqK3S3oS
fqPluwT3YMHGj89VVYNCN8rwG4zNdICG0FQSlUY04SojaPVFGox6xOv9tGaKM/bL
AIP31OPkz4UKVuh1rX757Yq4eBgu14ugHGabafW96c+MQDx0gA3j/uVCJqex0tu1
kbXOXCgbuaC14yKulLzNJ3CL6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLaQAyMU
mdWCujfAZIagStYBJUiYMB8GA1UdIwQYMBaAFAUDfkzeROxmQsQWn6hRNy14+/yr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTc3Qy9GNzAwQTlFQzcy
NTYxMUVEOTAyMTE1NjJDNEY5QUUwMi9CUU4tVE41RTdHWkN4QmFmcUZFM0xYajdf
S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JRTi1UTjVFN0daQ3hCYWZxRkUzTFhqN19Lcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RTc3Qy9GNzAwQTlFQzcyNTYxMUVEOTAyMTE1NjJDNEY5QUUwMi9CUU4tVE41RTdH
WkN4QmFmcUZFM0xYajdfS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAwyb+NT0V4jpNNO07I1CS62ag4PuWFirBvMpF3m8BvitFeYYsJH6rA
pt5Jq8SAe08L6oFf3kaD4S3hMyHn1JaGYaIIbsUNYVbogY8UoX1kmNlAM+N9EqQz
rL9LKgwAFEcEYN9Q6D/icESEsziAEi1ApPVRFKEonsKFGyDmNwG/+tLMbMka8LOP
0Lp4dJSiaX3bPPVCCWNUSgfUVB5ZiEpi38lD9JB7XI1mtoRAlRUizQdp26aHQOf+
rhBJsPZdlfRF75BtI9SIW08IjWk8/sT1v1KVREj+G3hR0f7KvC4cNizvhqeqUy0o
JfsWlMzXOnelEbOL/71BAej4ie+icGc1
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:36:03 2026 by rpki-client