This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft File: q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft (raw, json) Hash identifier: cthOgRAkviK79OPekomRAj+s69d3n3ufzu12ObUPUqE= Subject key identifier: ED:FB:EF:5D:AA:32:03:35:C5:F0:F3:75:E0:53:FC:60:7E:B7:4F:F7 Authority key identifier: AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4 Certificate issuer: /CN=A9172989/serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft Manifest number: 18 Signing time: Fri 23 Jan 2026 06:57:02 +0000 Manifest this update: Fri 23 Jan 2026 06:57:02 +0000 Manifest next update: Fri 30 Jan 2026 06:57:02 +0000 Files and hashes: 1: q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl (hash: v/0EWZKpJi79tEvAd3OO8AhQL3z1kkeWTXrZXeTorSA=) 2: 0FB60AEED6D711F085B1D0E884D3641D.roa (hash: OQ9vc68P9a8kEML8WxvcO6y/ABGhLAWink2psJnWsk4=) 3: 3CBCF5BED6D911F0B064CD5C85D3641D.roa (hash: dyqXFCcUaP0MyJCMf/CgPJbAs32ejMPFahUoO/mRaLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 06:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172989, serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4 Validity Not Before: Jan 23 06:57:02 2026 GMT Not After : Jan 30 06:57:02 2026 GMT Subject: CN=69731bbe-8030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9a:4c:66:e0:82:be:51:60:13:fa:06:4c:e8: 2a:02:7f:78:41:48:05:37:29:22:14:9e:67:e2:50: 63:a9:56:f8:1e:f9:3a:0c:1d:06:34:73:1d:a5:f8: 9e:24:25:ed:54:d0:9a:3b:6a:89:8b:5c:d3:13:cb: cf:42:b0:87:e6:20:f1:82:13:a7:e5:f7:be:67:99: ce:61:52:bf:07:27:af:9b:20:4a:bf:8b:e2:14:0d: 8e:1c:6f:72:3a:6d:84:b2:ce:fb:ab:b8:69:ba:d7: 2e:b1:fc:a6:e9:80:48:18:44:3e:65:00:fa:60:4d: 28:5a:b6:83:68:7a:98:24:fb:84:4f:18:0c:b6:d8: 3e:d7:a1:f2:a1:82:77:c4:c2:68:bc:32:09:eb:46: ea:7d:ca:d6:eb:b3:75:a1:06:9f:b3:4b:eb:e4:33: 7e:47:55:28:3d:04:e5:37:76:fa:69:4f:f7:ac:5e: 39:87:41:10:5b:bf:1c:ac:48:33:5f:51:5d:e6:26: 8a:0a:1f:aa:01:ae:f9:b9:d7:de:42:e8:4f:10:ae: d9:0a:7c:06:81:f0:62:31:e4:d4:81:a2:4f:de:e7: b7:b7:88:3c:4c:24:2c:4b:ae:6b:34:19:8c:70:12: 22:cd:13:d6:98:d5:fd:96:e4:44:62:28:ad:99:81: c6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:FB:EF:5D:AA:32:03:35:C5:F0:F3:75:E0:53:FC:60:7E:B7:4F:F7 X509v3 Authority Key Identifier: keyid:AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:c9:6b:f0:19:b6:02:b3:7b:cb:6f:14:1f:14:7c:30:57:63: b2:94:0c:64:e0:f0:97:58:21:11:42:d3:01:a9:2d:f4:ef:4a: 4d:07:a0:2c:fe:9a:67:38:63:e5:af:72:95:b5:72:7c:06:c3: cb:56:fa:d3:77:59:aa:50:c5:7d:97:b6:d8:a3:1e:65:5d:b7: eb:a3:4a:c4:8a:1b:41:4a:10:34:ce:ad:52:ab:7c:ac:81:48: af:b7:c3:69:3e:73:9f:d2:8d:4f:43:0e:9d:7d:b8:c7:dd:c1: a7:16:10:45:21:8f:99:28:0e:75:e5:10:ad:4c:d1:f7:fe:05: 12:25:8e:8e:47:ac:8c:db:5f:e5:ce:f6:ff:f8:9f:2e:1f:5e: 7d:24:69:63:42:f8:4b:3e:73:6b:b3:a7:cc:27:12:6f:5f:77: 48:7e:65:aa:3a:50:9c:5a:46:2b:e5:72:03:49:96:55:8c:fd: 05:93:c3:80:35:0c:d4:bb:d5:12:fd:34:ce:9e:b5:55:f0:cb: b7:bd:99:96:22:e1:24:24:94:31:a8:76:00:f1:a8:2e:75:8b: 33:0e:95:ed:4b:53:87:ec:58:33:77:cd:44:21:7c:af:08:35: a6:6b:eb:81:e8:32:6d:b8:a0:04:f0:02:05:8a:6c:50:b9:36: c3:01:fc:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Mjk4OTExMC8GA1UEBRMoQUI2OUM3NDAyNTQ4OUFGRDYxNzQ3RkY5MzM1QjE0N0Uy MEJCMjVENDAeFw0yNjAxMjMwNjU3MDJaFw0yNjAxMzAwNjU3MDJaMBgxFjAUBgNV BAMMDTY5NzMxYmJlLTgwMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5mkxm4IK+UWAT+gZM6CoCf3hBSAU3KSIUnmfiUGOpVvge+ToMHQY0cx2l+J4k Je1U0Jo7aomLXNMTy89CsIfmIPGCE6fl975nmc5hUr8HJ6+bIEq/i+IUDY4cb3I6 bYSyzvuruGm61y6x/KbpgEgYRD5lAPpgTShatoNoepgk+4RPGAy22D7XofKhgnfE wmi8MgnrRup9ytbrs3WhBp+zS+vkM35HVSg9BOU3dvppT/esXjmHQRBbvxysSDNf UV3mJooKH6oBrvm5195C6E8QrtkKfAaB8GIx5NSBok/e57e3iDxMJCxLrms0GYxw EiLNE9aY1f2W5ERiKK2ZgcZrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7fvvXaoy AzXF8PN14FP8YH63T/cwHwYDVR0jBBgwFoAUq2nHQCVImv1hdH/5M1sUfiC7JdQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyOTg5L0VGRkRENzE0RDZE NTExRjBCMDYzODRCNTgxRDM2NDFEL3EybkhRQ1ZJbXYxaGRIXzVNMXNVZmlDN0pk US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcTJuSFFDVkltdjFoZEhfNU0xc1VmaUM3SmRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy OTg5L0VGRkRENzE0RDZENTExRjBCMDYzODRCNTgxRDM2NDFEL3EybkhRQ1ZJbXYx aGRIXzVNMXNVZmlDN0pkUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGbJa/AZtgKze8tvFB8UfDBXY7KUDGTg8JdYIRFC0wGpLfTvSk0HoCz+ mmc4Y+WvcpW1cnwGw8tW+tN3WapQxX2XttijHmVdt+ujSsSKG0FKEDTOrVKrfKyB SK+3w2k+c5/SjU9DDp19uMfdwacWEEUhj5koDnXlEK1M0ff+BRIljo5HrIzbX+XO 9v/4ny4fXn0kaWNC+Es+c2uzp8wnEm9fd0h+Zao6UJxaRivlcgNJllWM/QWTw4A1 DNS71RL9NM6etVXwy7e9mZYi4SQklDGodgDxqC51izMOle1LU4fsWDN3zUQhfK8I NaZr64HoMm24oATwAgWKbFC5NsMB/Bc= -----END CERTIFICATE-----Generated at Sun Jan 25 05:54:56 2026 by rpki-client