This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
File: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft (raw, json)
Hash identifier: hvlG/tzA/l3obW23C2SEjgbja+LLeanJkiMPqVIags8=
Subject key identifier: C5:2A:5D:C1:AC:11:5F:B8:71:03:D8:9F:47:A0:29:3A:50:6D:6A:26
Authority key identifier: A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D
Certificate issuer: /CN=A9164164/serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
Manifest number: E1
Signing time: Sun 25 Jan 2026 04:43:30 +0000
Manifest this update: Sun 25 Jan 2026 04:43:29 +0000
Manifest next update: Sun 01 Feb 2026 04:43:29 +0000
Files and hashes: 1: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl (hash: SWaQg/tPMfLMfNH9oT3dgMx0t6xsJz/d3O8eCzqtioU=)
2: F1487C2AA18211EFA2B7E923C4F9AE02.roa (hash: 2UPUWDlrZ248Wr3wYIIyX701FfOmCl7Va0oPhZdECKg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl
rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164164, serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
Validity
Not Before: Jan 25 04:43:29 2026 GMT
Not After : Feb 1 04:43:29 2026 GMT
Subject: CN=69759f71-d831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:5f:d6:5d:e2:08:4b:6e:e0:0f:38:80:0d:
3d:89:f1:77:aa:4f:79:7b:34:e0:62:0e:d6:01:bc:
62:50:a6:8f:d7:14:15:a5:3f:42:2a:54:28:05:d2:
0f:d1:73:89:30:4a:6e:d0:33:65:2d:2d:78:e8:5d:
35:2e:e6:c8:50:2b:ba:50:f5:56:aa:64:78:53:a7:
54:5c:3e:4c:c1:ad:a6:80:de:72:18:e6:83:9e:11:
9e:55:4b:29:29:90:b0:f3:61:2c:b5:bc:17:c1:89:
ed:8f:3b:3f:17:23:b8:af:ba:f8:af:0d:e3:ec:cf:
24:e2:1a:ce:68:b0:bb:c2:39:34:0b:4d:b0:18:5c:
30:19:82:48:50:e7:15:59:e2:ef:fd:61:0f:51:ee:
43:5b:36:12:8a:ec:1e:21:34:a8:1e:43:49:c6:74:
2a:57:99:be:d9:c1:6b:f8:e7:8d:0e:89:de:12:e7:
d4:bc:2b:ac:a4:6b:77:d7:78:08:46:68:75:07:1d:
94:52:1d:31:9d:0f:b1:52:b2:89:df:a0:ce:d9:f2:
0a:d6:b1:b7:89:70:03:dd:fb:77:69:c2:12:01:14:
40:55:ad:ed:29:22:19:b5:5d:7e:37:9f:ff:ed:e1:
66:da:e2:27:89:36:0c:b0:c5:80:2c:ee:4c:2d:cc:
a6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2A:5D:C1:AC:11:5F:B8:71:03:D8:9F:47:A0:29:3A:50:6D:6A:26
X509v3 Authority Key Identifier:
keyid:A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e1:e1:6d:9c:d4:5f:50:78:9f:10:ae:1a:e2:e8:5c:2a:57:
45:e8:6c:f4:b5:2a:c3:6d:7b:86:c9:d0:33:7b:8e:47:26:5e:
b0:99:dd:6a:6f:a5:af:5f:46:8f:d7:d8:7d:18:35:e1:58:10:
c5:59:b7:4d:53:c4:9e:cf:9f:ac:28:ba:4f:53:22:60:4b:f7:
73:7b:1b:5c:0a:84:55:43:2d:7d:c1:12:b9:e4:30:34:95:6c:
14:63:5e:82:5b:4a:fb:8e:6b:9a:a6:5a:87:2e:d2:95:22:85:
5d:ce:22:c0:44:16:cd:c9:e2:c5:89:8b:aa:18:d7:9b:4b:89:
cc:2b:34:c7:62:62:97:65:2e:7e:a7:3d:31:29:b1:10:c8:17:
82:c5:13:c4:c3:f3:30:5a:37:25:1b:d1:ca:2c:cd:ba:2e:9e:
7b:4a:fc:1f:a0:1c:68:97:6f:e7:10:54:64:c9:23:d5:69:34:
43:f7:10:ad:d3:4b:7c:bd:c1:68:fb:10:d4:fd:c9:7a:bf:77:
4e:9c:2e:e0:54:86:ba:35:5b:0d:12:85:e9:20:74:be:3f:93:
47:fb:36:e9:cd:62:da:15:5e:e6:9f:08:7c:9e:ea:b9:19:1c:
bd:2a:bd:9d:59:4b:63:16:38:d0:89:f3:25:9d:3c:f6:b4:b0:
00:4b:9d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:03:45 2026 by rpki-client