This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft
File: QrsPPBhH5li75BQYSUzonOjjRIg.mft (raw, json)
Hash identifier: dqzaCUG40Y7Bqi6yWWvkzDr8VoPWHEEGY/1iL5PAgyo=
Subject key identifier: EA:BB:FE:A4:38:86:5D:62:DE:81:D4:24:D7:EA:CA:E3:EA:E6:33:5C
Authority key identifier: 42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88
Certificate issuer: /CN=A9172506/serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft
Manifest number: 0102
Signing time: Fri 23 Jan 2026 04:17:03 +0000
Manifest this update: Fri 23 Jan 2026 04:17:03 +0000
Manifest next update: Fri 30 Jan 2026 04:17:03 +0000
Files and hashes: 1: QrsPPBhH5li75BQYSUzonOjjRIg.crl (hash: RlzeTNnZPiIU7VRxLodu4BstZ35XCTwboHIEwzAqMyU=)
2: DD75C9BC6EDF11EF90C49A5FC4F9AE02.roa (hash: ribPo1yuX+hIqHtl1PCEzGGO/yQznd+mDINBcQhxFF0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.crl
rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 04:17:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172506, serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488
Validity
Not Before: Jan 23 04:17:03 2026 GMT
Not After : Jan 30 04:17:03 2026 GMT
Subject: CN=6972f63f-87b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b1:1e:f0:97:7f:50:44:7a:1c:8f:46:c1:b4:
b7:47:3f:c5:42:15:3c:fd:48:31:0f:a5:38:c1:02:
55:0a:40:fd:a1:8f:6d:ee:f3:06:61:17:54:14:ee:
9b:0d:9f:e5:39:a0:bb:96:0b:49:aa:cd:6a:63:7d:
58:cc:4a:75:11:d0:2a:ef:23:05:69:50:0b:ac:b4:
0e:4a:07:97:da:75:57:bf:4a:5d:b4:07:1c:3a:b0:
fb:67:07:ef:b4:95:05:2e:90:1c:e2:cc:51:cd:1d:
5a:85:f3:e6:d4:4a:c0:cf:51:e9:24:cf:fd:9a:22:
14:d7:50:38:31:af:21:48:32:80:83:a6:a4:a9:1f:
5c:14:fd:6e:23:12:23:ed:5b:1d:2f:af:9a:26:50:
44:0c:c2:5e:47:b8:4a:8f:95:3e:2b:c5:5d:46:0d:
ab:44:65:f9:0f:18:cf:36:3f:9f:11:16:b3:a3:ad:
bd:5c:94:11:06:79:9e:55:8f:53:c1:00:4f:b8:52:
aa:d8:53:33:2a:87:3d:08:07:c3:cd:14:5d:b1:5a:
f7:ea:69:55:fb:42:0c:84:4e:d8:38:4c:e9:9a:67:
f3:1d:f3:0e:fa:94:7e:17:ad:14:fe:89:4e:db:36:
27:0e:13:60:74:eb:b9:8c:69:be:e4:9e:3c:42:04:
49:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BB:FE:A4:38:86:5D:62:DE:81:D4:24:D7:EA:CA:E3:EA:E6:33:5C
X509v3 Authority Key Identifier:
keyid:42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c3:c8:46:a2:80:c7:65:dd:ef:2c:33:1f:9d:b1:88:f1:79:
a5:18:f5:13:95:80:e6:40:4d:a8:8d:b6:a6:f9:b7:6a:e2:3a:
34:af:28:cb:da:dc:38:e1:84:9e:2d:56:cf:6a:e6:94:90:41:
58:b5:06:72:da:e1:52:21:df:13:7f:09:a1:45:93:02:f7:8b:
7a:e7:50:4c:06:67:9d:64:b0:08:c0:db:92:a5:50:be:5c:f9:
91:3b:e3:5b:91:45:81:06:6f:dd:07:7c:61:7e:26:c8:ba:da:
85:d8:cc:14:6d:99:9d:af:c2:8b:b0:e8:f0:61:5e:77:ed:a6:
0f:a7:e9:08:ec:6c:36:fe:4a:bb:c6:47:2e:9b:24:26:90:f6:
16:c0:f4:23:95:a1:31:f8:38:2b:b8:4d:cd:20:aa:1c:5b:1f:
af:7d:eb:f1:25:1a:80:46:67:ad:71:8c:55:fe:af:5b:5e:a8:
41:d0:66:3e:50:77:cf:ff:42:8c:ef:21:3e:e2:a9:e6:2f:c2:
e6:3a:89:92:4a:aa:bd:ef:37:11:98:92:9e:b4:f8:34:fe:16:
9f:cb:a8:9e:e4:89:5f:ff:7b:9d:19:ed:4c:56:64:6e:56:6b:
78:66:be:c8:f2:3c:3f:14:50:47:3f:ef:52:35:4a:47:1f:2d:
ad:e9:61:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:20:12 2026 by rpki-client