This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
File: QJ0BHok_2Mjws-isFGkqp7udAlk.mft (raw, json)
Hash identifier: lVpe42yR0bus4fZ1aq0p79o25Sr6AUyCzXMXzaRXsyk=
Subject key identifier: 1B:E5:D3:13:8E:7E:C1:AB:79:0B:33:7E:B2:36:0D:B8:FD:2C:91:EA
Authority key identifier: 40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59
Certificate issuer: /CN=A91808E1/serialNumber=409D011E893FD8C8F0B3E8AC14692AA7BB9D0259
Certificate serial: 046B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
Manifest number: 0464
Signing time: Sat 24 Jan 2026 23:21:08 +0000
Manifest this update: Sat 24 Jan 2026 23:21:07 +0000
Manifest next update: Sat 31 Jan 2026 23:21:07 +0000
Files and hashes: 1: QJ0BHok_2Mjws-isFGkqp7udAlk.crl (hash: MxhWcrU+m2UR9fLB0pCaVku/ICpLEIUbCfI1nB8TGxc=)
2: E7FE45667E8311ECA552B67FC4F9AE02.roa (hash: nH/LwYYai4yyYtR5+FsgF3NxGTHmzQuh60VcXhlakk0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.crl
rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1131 (0x46b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91808E1, serialNumber=409D011E893FD8C8F0B3E8AC14692AA7BB9D0259
Validity
Not Before: Jan 24 23:21:07 2026 GMT
Not After : Jan 31 23:21:07 2026 GMT
Subject: CN=697553e3-e6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f1:61:f0:d8:88:9e:f4:4f:d9:d6:04:64:1f:
50:03:71:87:76:18:34:01:f7:d6:2f:41:19:80:f0:
24:94:13:fb:63:5b:95:73:a1:f5:7c:8f:e7:f6:80:
9b:84:77:2b:27:36:6b:3f:d1:53:aa:b1:a5:7f:53:
d6:0a:b3:fd:96:21:3c:3d:02:1d:a6:06:c2:32:51:
fd:da:1c:18:32:1b:07:d8:aa:9c:00:08:f3:1d:d6:
49:39:b5:37:47:93:73:ee:b7:cf:bf:a4:96:be:16:
87:0e:71:0f:7d:c3:e0:bf:74:de:ff:4d:bd:a9:3b:
02:04:f6:64:95:49:3b:9f:b1:25:0b:0a:81:b1:1c:
a1:16:04:c8:b5:b8:13:6c:82:1a:1f:52:35:99:40:
c8:41:72:44:8c:07:ae:58:a7:10:07:fd:a8:d5:93:
bf:b2:92:a0:b3:97:14:4b:c6:4e:bc:35:15:04:75:
ad:61:f4:f7:6d:02:f8:a5:4d:83:96:94:8d:98:3c:
58:8c:33:3b:00:94:9c:1e:6e:6b:10:3c:5c:d4:54:
f9:59:f7:a9:6e:49:e2:8b:bd:78:56:49:86:9a:53:
8e:99:cf:98:95:d5:43:54:5e:bf:a2:98:93:75:37:
4f:3c:16:b4:28:cc:c5:4c:6a:17:f9:3d:de:b9:1c:
0e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E5:D3:13:8E:7E:C1:AB:79:0B:33:7E:B2:36:0D:B8:FD:2C:91:EA
X509v3 Authority Key Identifier:
keyid:40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:49:02:c2:92:4f:09:29:88:69:53:12:f7:85:56:c1:41:02:
36:2d:16:d2:ba:60:6a:bf:16:ec:f6:0c:52:56:a0:ef:83:c4:
9c:0b:6e:a7:57:ac:25:f1:a2:f4:1c:15:12:ee:e4:33:dc:4d:
74:8e:4c:ea:36:b9:70:9c:9a:07:0a:46:49:72:ee:bd:54:1b:
ac:f1:3f:ab:ba:41:0e:e3:16:1d:b7:69:c2:f8:44:ef:91:e9:
b4:34:50:ce:d7:85:8b:13:73:ca:89:b5:f5:2e:3b:c0:69:c0:
3c:51:3e:7b:3d:65:47:18:d5:c2:de:33:d0:9a:c7:59:5e:38:
b2:16:f1:cf:94:65:1c:30:ec:38:9a:17:9a:dc:09:dd:9d:59:
40:48:09:1b:2e:2a:c9:00:cc:99:ed:a1:2d:c4:ca:f8:5b:82:
92:ab:57:d3:ae:38:aa:f6:a6:2d:b6:40:05:b2:37:b3:a7:a0:
fd:75:07:44:64:f1:75:d8:59:1f:d5:76:0d:d3:89:0f:af:91:
f8:5f:d9:8d:98:80:ed:4f:99:c0:29:fb:7b:fd:a8:47:e1:4c:
ed:fa:fc:c4:d9:06:95:9a:4d:e6:ee:6b:36:9d:40:fd:5b:df:
c2:65:54:03:5e:6b:a7:46:73:b0:0f:1f:b5:80:7d:2c:23:e7:
c7:ab:2f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:34 2026 by rpki-client