This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft File: Qe0RfxoN1CRX1JR491zcsoZTpx8.mft (raw, json) Hash identifier: AUTk3MaVihAKQfJnNuY0f9uACfGM7yDAIfoKaw133fE= Subject key identifier: 9B:50:C9:DF:CE:62:43:85:1E:79:EE:51:38:95:45:19:1B:F0:F0:DD Authority key identifier: 41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F Certificate issuer: /CN=A917C09A/serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft Manifest number: 0C Signing time: Sun 25 Jan 2026 07:05:26 +0000 Manifest this update: Sun 25 Jan 2026 07:05:26 +0000 Manifest next update: Sun 01 Feb 2026 07:05:26 +0000 Files and hashes: 1: Qe0RfxoN1CRX1JR491zcsoZTpx8.crl (hash: zOjp8+Ejc3DxScDpvlOMaWLpD4HwNm7eVyLzLoASR0o=) 2: 0C544A5EEAD811F0B5BDA80D656F56BC.roa (hash: 5Q0WBVLw+AXUIyH8ywYoKJyU6uay7s/bBtZ6b3V7Saw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C09A, serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F Validity Not Before: Jan 25 07:05:26 2026 GMT Not After : Feb 1 07:05:26 2026 GMT Subject: CN=6975c0b6-1d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a7:07:f1:08:fc:13:ee:79:2b:44:a7:45:4f: 06:7c:bc:8d:f5:fb:2e:c6:c0:95:9d:f2:6e:6f:35: b1:85:a9:85:ec:0a:98:12:f2:30:fd:37:6f:ea:b9: 8c:93:75:6b:26:dd:2b:e4:2e:6d:11:fe:1b:c1:5b: d6:4e:87:16:ef:78:57:2c:6e:e2:0e:c2:7c:98:8c: 9e:dd:cc:68:04:c4:16:02:4f:52:80:bb:45:82:c2: fb:9a:8e:23:1a:36:ab:c6:f0:e6:0b:6c:ae:b3:9a: 98:82:ec:06:84:ac:fe:d1:3b:db:82:77:74:fe:7a: 55:03:a3:2c:49:b3:f7:92:0d:e7:5c:75:06:5d:f1: f0:8d:0d:19:9d:20:e9:c3:99:af:37:5f:7b:6e:c2: ad:4d:31:01:de:4d:2a:24:12:8b:81:70:71:a2:90: 44:ce:df:ed:c6:25:ae:dd:2d:a3:d8:a8:2c:60:bb: 01:4f:b3:11:67:a7:63:5f:4c:31:66:50:a8:0b:df: 69:a7:4c:b4:c8:55:a5:7a:6a:db:f4:dc:d4:05:d9: 93:5d:aa:50:78:04:7b:03:04:a7:d2:81:df:1d:d7: d6:7d:bb:8b:2c:12:af:76:50:97:8a:6e:ed:fe:69: 4b:78:ac:e5:0d:d7:4e:63:81:a8:5c:7c:c9:57:23: 7c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:50:C9:DF:CE:62:43:85:1E:79:EE:51:38:95:45:19:1B:F0:F0:DD X509v3 Authority Key Identifier: keyid:41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:e3:b7:f0:02:f4:c5:d4:8d:91:c4:88:eb:a0:a0:73:d5:ec: 6c:a6:42:44:84:60:70:16:2e:d6:3f:19:a4:01:9d:b0:42:c2: 14:90:16:20:92:fa:de:65:16:6c:09:65:a3:5a:57:12:c7:d8: 76:a1:ee:ff:1a:d2:82:2d:5a:ea:3d:46:1f:68:68:d9:77:03: 62:60:36:40:5c:85:c2:9e:d0:69:e0:2d:30:57:34:1e:a6:d8: c1:5f:19:b6:af:ed:ba:7d:49:72:10:d4:e8:39:5e:3c:81:9d: ea:0d:35:e1:77:97:c0:67:d8:bb:d7:04:6d:1f:49:0e:6f:98: 7f:20:a0:db:5e:e5:48:2f:96:66:34:dc:28:26:1c:e6:a3:87: 6f:6c:c6:84:9d:62:dd:b1:b0:12:71:3f:4b:41:6c:b6:11:26: f2:69:a6:a4:15:60:45:7f:38:36:94:3b:66:3e:20:93:27:30: 7d:17:b9:f1:36:78:78:a4:d3:b2:de:12:ee:aa:63:8e:bc:7b: c0:66:2f:1f:bf:2d:b4:b9:48:40:37:6a:ef:ac:4b:e0:94:7d: d6:8c:f4:e1:6b:c0:c2:86:de:51:d5:88:24:13:1a:a3:42:cd: 08:da:db:6d:22:9e:84:83:0e:dd:75:62:66:e8:b6:b2:dd:7f: 88:f5:e8:8e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE3 QzA5QTExMC8GA1UEBRMoNDFFRDExN0YxQTBERDQyNDU3RDQ5NDc4Rjc1Q0RDQjI4 NjUzQTcxRjAeFw0yNjAxMjUwNzA1MjZaFw0yNjAyMDEwNzA1MjZaMBgxFjAUBgNV BAMMDTY5NzVjMGI2LTFkNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0pwfxCPwT7nkrRKdFTwZ8vI31+y7GwJWd8m5vNbGFqYXsCpgS8jD9N2/quYyT dWsm3SvkLm0R/hvBW9ZOhxbveFcsbuIOwnyYjJ7dzGgExBYCT1KAu0WCwvuajiMa NqvG8OYLbK6zmpiC7AaErP7RO9uCd3T+elUDoyxJs/eSDedcdQZd8fCNDRmdIOnD ma83X3tuwq1NMQHeTSokEouBcHGikETO3+3GJa7dLaPYqCxguwFPsxFnp2NfTDFm UKgL32mnTLTIVaV6atv03NQF2ZNdqlB4BHsDBKfSgd8d19Z9u4ssEq92UJeKbu3+ aUt4rOUN105jgahcfMlXI3yvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUm1DJ385i Q4Ueee5ROJVFGRvw8N0wHwYDVR0jBBgwFoAUQe0RfxoN1CRX1JR491zcsoZTpx8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMDlBL0IyOTY2RDlFRUFE NzExRjBCOUNCRkJFNjY0NkY1NkJDL1FlMFJmeG9OMUNSWDFKUjQ5MXpjc29aVHB4 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUWUwUmZ4b04xQ1JYMUpSNDkxemNzb1pUcHg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD MDlBL0IyOTY2RDlFRUFENzExRjBCOUNCRkJFNjY0NkY1NkJDL1FlMFJmeG9OMUNS WDFKUjQ5MXpjc29aVHB4OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACDjt/AC9MXUjZHEiOugoHPV7GymQkSEYHAWLtY/GaQBnbBCwhSQFiCS +t5lFmwJZaNaVxLH2Hah7v8a0oItWuo9Rh9oaNl3A2JgNkBchcKe0GngLTBXNB6m 2MFfGbav7bp9SXIQ1Og5XjyBneoNNeF3l8Bn2LvXBG0fSQ5vmH8goNte5UgvlmY0 3CgmHOajh29sxoSdYt2xsBJxP0tBbLYRJvJppqQVYEV/ODaUO2Y+IJMnMH0XufE2 eHik07LeEu6qY468e8BmLx+/LbS5SEA3au+sS+CUfdaM9OFrwMKG3lHViCQTGqNC zQja220inoSDDt11YmbotrLdf4j16I4= -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:10 2026 by rpki-client