This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft File: QL0p_yZodz0y7qDscGYCir7gy54.mft (raw, json) Hash identifier: 2KlA6ak2P0uCtT2NblvmkSw1Yq+Ma2kf9vdM9EBik2E= Subject key identifier: 02:E7:67:8A:DC:4B:B0:2D:DF:FF:24:9D:7D:CC:9E:7A:A3:B5:5E:ED Authority key identifier: 40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E Certificate issuer: /CN=A91840A8/serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E Certificate serial: 068B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft Manifest number: 068B Signing time: Sat 24 Jan 2026 21:46:05 +0000 Manifest this update: Sat 24 Jan 2026 21:46:05 +0000 Manifest next update: Sat 31 Jan 2026 21:46:05 +0000 Files and hashes: 1: QL0p_yZodz0y7qDscGYCir7gy54.crl (hash: EfphWgrN1tNTsxv5pO8ateqGayfyHSBQ4/eOaGeMRSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1675 (0x68b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91840A8, serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E Validity Not Before: Jan 24 21:46:05 2026 GMT Not After : Jan 31 21:46:05 2026 GMT Subject: CN=69753d9d-75ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5b:00:ac:2d:91:ee:fe:cd:d2:6f:56:55:e8: dc:c2:64:c4:bc:89:cf:19:f8:e1:36:12:34:5f:04: 7d:59:d7:48:4c:19:2e:8a:93:4f:6a:9b:81:dd:5c: af:e3:86:35:8d:b6:6d:14:41:3a:00:4d:6d:c6:e2: 6a:6a:88:c1:1e:58:91:9f:1b:78:34:00:58:e8:72: f3:25:6b:af:21:44:64:36:a8:b4:c1:20:4d:3b:b9: 5c:c7:5a:be:8f:7b:6f:68:e3:63:af:f9:25:6d:f2: 69:d6:5c:1e:6f:02:ba:d5:7f:b9:d6:d5:7e:2e:cf: 4c:89:e0:9f:19:d0:c5:23:ea:3a:4c:c9:36:d8:f1: 5f:93:2e:29:f8:a8:2e:54:30:b6:b8:47:a3:b8:5a: 6a:27:e6:1f:ce:d5:6a:54:06:62:47:61:7f:04:ca: 27:e2:44:b9:3c:aa:25:08:86:5e:eb:07:60:bd:d5: 35:d6:fd:16:0e:8f:fa:a3:27:f0:02:a4:04:ba:63: cb:d8:10:d0:5f:f1:d5:9a:d4:ea:7a:41:0b:0f:d7: 7c:66:25:e1:c6:bd:c6:70:33:21:17:b1:47:2e:a7: 80:7f:82:64:6a:3f:17:ce:9d:d5:54:c7:6b:4f:22: c2:b7:a2:c5:26:a8:93:20:77:47:9d:11:8d:7b:e9: fc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E7:67:8A:DC:4B:B0:2D:DF:FF:24:9D:7D:CC:9E:7A:A3:B5:5E:ED X509v3 Authority Key Identifier: keyid:40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:20:b3:3d:73:85:9d:e7:81:f4:75:43:8e:6e:5e:d3:16:bc: e2:6a:47:27:83:19:55:fb:01:53:11:26:fb:a1:14:45:eb:fd: e5:bc:57:e9:d6:4a:5a:f5:61:53:0f:11:9a:68:04:bd:9a:98: bc:b5:84:e6:96:da:74:7a:0b:5a:39:0e:d1:51:67:78:e3:c9: 6b:1c:80:fa:da:7e:b0:a6:a8:1d:7b:9b:d7:b4:a7:81:94:1d: be:61:a4:8f:f9:e6:2c:95:c5:a3:ff:24:26:78:88:52:43:f6: 47:26:34:09:37:f0:05:71:f4:2c:23:65:cc:f7:28:d0:06:2d: 61:43:ce:bf:bb:20:2d:65:03:88:5a:b1:53:c3:68:82:b5:95: 81:51:84:7c:ab:8a:7e:74:fe:0f:ce:6b:1d:89:32:1d:6a:3f: ba:0d:c4:92:8f:66:19:1f:14:44:9f:35:94:93:4e:d3:24:82: 3b:88:35:e4:77:91:0a:ec:80:b8:aa:9c:44:6a:02:0d:3f:e3: 02:69:1a:2a:1d:e4:39:08:28:4a:1d:a3:51:72:a3:8e:9d:f8: 63:46:22:06:d0:8c:5b:f1:b2:d0:80:cc:7a:1d:7b:fc:5c:ca: 06:b1:82:4e:48:1b:06:7f:42:cf:20:1a:0a:80:24:1d:18:37: c7:5d:c0:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwQTgxMTAvBgNVBAUTKDQwQkQyOUZGMjY2ODc3M0QzMkVFQTBFQzcwNjYwMjhB QkVFMENCOUUwHhcNMjYwMTI0MjE0NjA1WhcNMjYwMTMxMjE0NjA1WjAYMRYwFAYD VQQDDA02OTc1M2Q5ZC03NWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFsArC2R7v7N0m9WVejcwmTEvInPGfjhNhI0XwR9WddITBkuipNPapuB3Vyv 44Y1jbZtFEE6AE1txuJqaojBHliRnxt4NABY6HLzJWuvIURkNqi0wSBNO7lcx1q+ j3tvaONjr/klbfJp1lwebwK61X+51tV+Ls9MieCfGdDFI+o6TMk22PFfky4p+Kgu VDC2uEejuFpqJ+YfztVqVAZiR2F/BMon4kS5PKolCIZe6wdgvdU11v0WDo/6oyfw AqQEumPL2BDQX/HVmtTqekELD9d8ZiXhxr3GcDMhF7FHLqeAf4Jkaj8Xzp3VVMdr TyLCt6LFJqiTIHdHnRGNe+n8AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALnZ4rc S7At3/8knX3MnnqjtV7tMB8GA1UdIwQYMBaAFEC9Kf8maHc9Mu6g7HBmAoq+4Mue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC82NzkwNzczNEEx OTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6MHk3cURzY0dZQ2lyN2d5 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FMMHBfeVpvZHoweTdxRHNjR1lDaXI3Z3k1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDBBOC82NzkwNzczNEExOTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6 MHk3cURzY0dZQ2lyN2d5NTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+ILM9c4Wd54H0dUOObl7TFrziakcngxlV+wFTESb7oRRF6/3lvFfp 1kpa9WFTDxGaaAS9mpi8tYTmltp0egtaOQ7RUWd448lrHID62n6wpqgde5vXtKeB lB2+YaSP+eYslcWj/yQmeIhSQ/ZHJjQJN/AFcfQsI2XM9yjQBi1hQ86/uyAtZQOI WrFTw2iCtZWBUYR8q4p+dP4PzmsdiTIdaj+6DcSSj2YZHxREnzWUk07TJII7iDXk d5EK7IC4qpxEagINP+MCaRoqHeQ5CChKHaNRcqOOnfhjRiIG0Ixb8bLQgMx6HXv8 XMoGsYJOSBsGf0LPIBoKgCQdGDfHXcCE -----END CERTIFICATE-----Generated at Sun Jan 25 20:39:55 2026 by rpki-client