This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft File: QRX9yGsnZiNgOztkXUcIQLgDm8g.mft (raw, json) Hash identifier: T0hktRcbJBtAw7VEAxsX8vmdMX9oA5+Vl7dx2rWkNx4= Subject key identifier: B9:A3:3B:51:C5:51:9D:8D:92:2D:C2:A9:09:B0:87:FA:41:48:6D:3E Authority key identifier: 41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8 Certificate issuer: /CN=A916E9E3/serialNumber=4115FDC86B276623603B3B645D470840B8039BC8 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft Manifest number: 39 Signing time: Sun 25 Jan 2026 06:32:45 +0000 Manifest this update: Sun 25 Jan 2026 06:32:44 +0000 Manifest next update: Sun 01 Feb 2026 06:32:44 +0000 Files and hashes: 1: QRX9yGsnZiNgOztkXUcIQLgDm8g.crl (hash: WXxAjLIoufuBlbRreQMX0K9mEoAE9fbLy1ZUXFKYj1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.crl rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 06:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9E3, serialNumber=4115FDC86B276623603B3B645D470840B8039BC8 Validity Not Before: Jan 25 06:32:44 2026 GMT Not After : Feb 1 06:32:44 2026 GMT Subject: CN=6975b90d-cd60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fd:dd:35:ac:86:cc:23:de:ff:c3:72:58:fb: 26:4f:7c:1c:9a:14:14:88:8a:39:02:86:59:db:13: 5f:0e:b8:2b:74:b9:ca:2d:2b:5e:58:44:33:5a:5c: eb:3d:e3:4a:f0:a9:7a:02:2e:31:cb:e2:20:ca:17: 14:93:66:f5:a0:13:01:e1:7d:0e:53:96:33:45:2c: 77:18:6f:76:23:44:e2:24:bc:aa:ae:b6:ca:9c:e6: 68:84:1a:05:b6:40:d8:0a:dd:5d:a0:90:93:e6:ac: f6:9f:e6:0d:3e:0d:8d:fe:c1:cb:bd:41:94:54:c0: 37:a8:09:c6:34:24:31:3e:1c:69:74:52:09:ca:1f: 89:72:3e:d7:20:a4:7b:ca:bd:db:49:1d:e9:31:ae: 4a:fc:70:c8:a7:51:81:25:23:f2:06:2c:bb:56:e2: e9:37:b0:20:75:8d:ce:8d:0c:d1:98:da:2d:d8:d5: b4:ce:48:82:05:65:11:8b:7f:85:70:ff:f1:55:15: 2d:3a:df:0c:d1:ba:33:33:d6:38:64:e2:7a:b9:d5: 2a:00:16:6a:76:b2:ef:b0:92:6d:22:6f:a0:3a:66: 0d:9b:46:88:e3:4a:79:43:7b:fe:62:c7:de:aa:aa: 69:e9:76:cd:e2:31:30:9c:59:1b:19:f0:31:a2:74: df:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A3:3B:51:C5:51:9D:8D:92:2D:C2:A9:09:B0:87:FA:41:48:6D:3E X509v3 Authority Key Identifier: keyid:41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:1a:be:b5:16:70:42:87:73:49:a9:b3:35:01:21:97:8f:01: c9:c6:7a:44:d1:21:a1:78:d0:e9:62:a0:fc:a7:eb:7c:39:4c: 7a:c9:88:a0:d7:b2:52:b2:d6:ca:62:94:95:2c:b4:12:85:48: ac:61:60:64:dd:1b:f2:76:f1:94:e8:0c:4b:5e:69:42:37:1e: da:66:d8:85:fc:f9:71:b7:80:08:8a:e8:bb:6b:56:76:75:e6: 58:fa:59:60:1f:b6:f9:78:53:a8:a4:d6:cf:bd:8b:0f:fa:86: cb:aa:ff:d4:32:36:1e:b1:67:50:23:bb:3f:06:ae:a9:c3:00: 47:cb:c4:8c:5e:c9:fd:c2:c7:49:e4:97:ad:3b:8a:90:30:e5: 4d:bb:aa:3e:73:b8:f0:63:4a:cd:b2:5c:26:69:c6:5e:10:cc: d1:3f:5a:85:e0:db:6a:30:9d:b7:e7:4c:89:e1:e9:59:7a:fb: 4f:55:84:ce:1b:e2:12:86:00:a9:71:ad:05:59:c1:54:81:eb: 5c:9c:35:80:ca:90:0d:5a:f9:b0:26:b3:21:2f:7a:1e:80:79: ef:3b:f9:5a:1f:df:05:b7:e4:b2:0e:68:52:53:b7:27:da:c8: f6:89:cc:bc:5b:8e:7e:4b:90:6f:64:e4:e1:6b:b4:ca:20:6c: 5a:22:e1:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RTlFMzExMC8GA1UEBRMoNDExNUZEQzg2QjI3NjYyMzYwM0IzQjY0NUQ0NzA4NDBC ODAzOUJDODAeFw0yNjAxMjUwNjMyNDRaFw0yNjAyMDEwNjMyNDRaMBgxFjAUBgNV BAMMDTY5NzViOTBkLWNkNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF/d01rIbMI97/w3JY+yZPfByaFBSIijkChlnbE18OuCt0ucotK15YRDNaXOs9 40rwqXoCLjHL4iDKFxSTZvWgEwHhfQ5TljNFLHcYb3YjROIkvKqutsqc5miEGgW2 QNgK3V2gkJPmrPaf5g0+DY3+wcu9QZRUwDeoCcY0JDE+HGl0UgnKH4lyPtcgpHvK vdtJHekxrkr8cMinUYElI/IGLLtW4uk3sCB1jc6NDNGY2i3Y1bTOSIIFZRGLf4Vw //FVFS063wzRujMz1jhk4nq51SoAFmp2su+wkm0ib6A6Zg2bRojjSnlDe/5ix96q qmnpds3iMTCcWRsZ8DGidN+RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuaM7UcVR nY2SLcKpCbCH+kFIbT4wHwYDVR0jBBgwFoAUQRX9yGsnZiNgOztkXUcIQLgDm8gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFOUUzLzRFMEUzNzE0QTNB NDExRjA5MjAxM0UyOUM0RjlBRTAyL1FSWDl5R3NuWmlOZ096dGtYVWNJUUxnRG04 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUVJYOXlHc25aaU5nT3p0a1hVY0lRTGdEbThnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZF OUUzLzRFMEUzNzE0QTNBNDExRjA5MjAxM0UyOUM0RjlBRTAyL1FSWDl5R3NuWmlO Z096dGtYVWNJUUxnRG04Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIwavrUWcEKHc0mpszUBIZePAcnGekTRIaF40OlioPyn63w5THrJiKDX slKy1spilJUstBKFSKxhYGTdG/J28ZToDEteaUI3Htpm2IX8+XG3gAiK6LtrVnZ1 5lj6WWAftvl4U6ik1s+9iw/6hsuq/9QyNh6xZ1Ajuz8GrqnDAEfLxIxeyf3Cx0nk l607ipAw5U27qj5zuPBjSs2yXCZpxl4QzNE/WoXg22ownbfnTInh6Vl6+09VhM4b 4hKGAKlxrQVZwVSB61ycNYDKkA1a+bAmsyEveh6Aee87+Vof3wW35LIOaFJTtyfa yPaJzLxbjn5LkG9k5OFrtMogbFoi4cQ= -----END CERTIFICATE-----Generated at Sun Jan 25 12:21:11 2026 by rpki-client