This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
File: qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json)
Hash identifier: t7qKgmoGg1T+zvGooRkrAliiMn3w/LsJGvghZqYX8Lc=
Subject key identifier: F1:7A:BD:3E:B1:98:1E:76:1F:65:F1:35:C7:95:A1:1D:49:8F:4F:C7
Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
Certificate issuer: /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Certificate serial: 0279
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
Manifest number: 0270
Signing time: Sat 24 Jan 2026 21:24:14 +0000
Manifest this update: Sat 24 Jan 2026 21:24:13 +0000
Manifest next update: Sat 31 Jan 2026 21:24:13 +0000
Files and hashes: 1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: v0ZvmZEjddBiNhE+S9G4rgkO7vrMkBFToO6koV/vabM=)
2: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: 0ZDkLkZaaQfnmuzBjz0ljr58b+EeHu6qJ0K1k0tRYzo=)
3: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: xsRGj9an13o+ozRk8T0R12ysRESN2vJXv8XQcYafKCU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:24:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 633 (0x279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Validity
Not Before: Jan 24 21:24:13 2026 GMT
Not After : Jan 31 21:24:13 2026 GMT
Subject: CN=6975387e-7723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f2:84:9e:27:b3:dc:8f:2a:8e:61:32:5f:92:
41:52:0d:13:ba:19:e7:8f:22:ac:71:57:27:b5:c4:
e9:e8:ca:16:6c:28:b5:a9:4c:c7:65:24:ab:6d:99:
6b:98:4c:9b:44:86:7d:d9:c7:80:62:61:30:a5:0d:
18:31:02:b2:0d:40:22:63:8e:86:4b:9e:b1:fa:be:
29:ef:3b:13:e2:30:68:32:55:30:6d:db:15:2d:c5:
e2:02:c6:9e:12:6a:62:d7:83:a8:eb:de:3a:c8:41:
b9:2a:6c:f3:5e:e6:70:41:4d:92:fd:a2:da:ca:64:
e5:aa:33:ba:44:68:05:5f:c3:df:b6:e3:d4:aa:34:
85:9e:03:cf:05:61:55:60:09:8b:51:eb:b3:27:a0:
bf:d5:6f:3b:27:0f:d3:4d:28:38:54:fb:d5:bf:3a:
e7:5d:2b:bf:d0:0d:6f:af:80:fc:f2:23:47:e5:ca:
4e:40:4e:02:c2:b5:86:91:b3:f3:bd:c6:4e:bd:53:
fb:bb:e3:a1:ed:eb:cb:6e:76:6e:fa:ae:e2:1a:c7:
8c:b5:d8:65:2b:5e:28:07:93:1a:b8:fd:43:b3:10:
21:5e:ea:e0:47:b8:04:20:ee:90:16:de:26:e2:ed:
27:24:1b:83:09:2a:94:07:b9:d8:44:5e:d8:c6:4f:
7c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7A:BD:3E:B1:98:1E:76:1F:65:F1:35:C7:95:A1:1D:49:8F:4F:C7
X509v3 Authority Key Identifier:
keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:6b:1e:14:9d:8f:2a:04:9c:26:46:e3:36:89:3c:44:e6:0b:
51:03:14:99:69:d7:f0:36:70:04:ea:b2:b6:4d:2c:e7:5d:59:
5e:81:d1:9e:05:5c:c4:b6:b7:8d:07:85:c2:48:bd:6a:1e:47:
b9:7b:04:e2:31:40:4f:b4:9e:3a:a0:3a:3c:bb:c0:16:5e:79:
55:7b:85:93:af:f0:56:c9:31:d4:d2:e6:b8:e6:6d:12:5d:2e:
64:dd:91:58:4d:60:d7:90:f7:bc:33:2c:66:8f:33:35:bd:21:
9e:be:da:54:a6:88:49:dc:97:f5:21:d3:7c:a8:dc:b1:16:4d:
61:75:d8:49:47:cd:b5:96:21:67:8e:6f:5b:28:6e:7f:10:57:
bf:76:43:94:bb:c1:24:78:e2:43:91:32:0c:59:d1:ec:a6:4f:
4b:37:38:11:f3:d9:e3:a6:7c:ec:ae:a0:98:5d:e1:90:4e:0e:
7a:bc:df:82:7d:a7:4d:f9:fb:e0:57:1f:33:71:2f:b7:04:7a:
41:71:26:5f:0b:03:9d:28:e4:de:da:ac:f4:c2:43:85:09:8a:
e9:24:1b:e1:7a:25:62:57:2e:df:33:dd:d5:2c:3c:4a:49:d9:
f9:be:b1:6a:2a:7f:8a:2f:33:a0:99:47:5a:5f:ac:27:52:10:
5e:07:02:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:48:53 2026 by rpki-client