This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
File: Q2NMcBuh8e_Oj1aqatHbKUWh258.mft (raw, json)
Hash identifier: 6/o3vZCn7Iyj1FoY/5jtjhR05LiUwaLvImTAfAQM9kM=
Subject key identifier: 27:9B:3F:11:8E:AB:8C:1F:10:2D:F6:A8:B5:F2:F8:81:B2:B6:F8:1E
Authority key identifier: 43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F
Certificate issuer: /CN=A918549C/serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F
Certificate serial: 011E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
Manifest number: 011B
Signing time: Sun 25 Jan 2026 04:03:51 +0000
Manifest this update: Sun 25 Jan 2026 04:03:51 +0000
Manifest next update: Sun 01 Feb 2026 04:03:51 +0000
Files and hashes: 1: Q2NMcBuh8e_Oj1aqatHbKUWh258.crl (hash: HOCx6MUeRSjFfmve1AV8kkbflbdm4FoJqWgRpXqS/as=)
2: 9C6F77784A3211EFBDBCEB2FC4F9AE02.roa (hash: VtLgFQFuvZQFqc3/1iLIm4m/GkaEOorvnwwczfuLsfc=)
3: ABA45B1A740611F0B304387CC4F9AE02.roa (hash: 6m3OrJ+Nr9fWhODWggrIoilybpGVkuQ4teq6GCx+Hw0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl
rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918549C, serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F
Validity
Not Before: Jan 25 04:03:51 2026 GMT
Not After : Feb 1 04:03:51 2026 GMT
Subject: CN=69759627-67fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ae:3b:66:89:55:62:64:1c:7e:d4:c9:9c:aa:
c5:e7:4f:e2:2b:05:9b:ef:ce:f2:42:95:46:01:3f:
2e:94:84:6d:a5:ae:f9:87:a6:3a:d9:8b:60:44:ff:
80:60:89:23:8f:2b:a3:26:d9:90:a0:5a:e2:40:4a:
e6:2d:92:cd:aa:dd:d3:8a:79:8d:89:4f:b2:87:6a:
24:53:15:e6:3d:d6:6a:60:00:23:47:11:e2:0c:fb:
09:bb:7e:ba:8b:22:a1:45:b4:ac:2e:82:ce:5f:3c:
9d:51:d5:73:3c:e7:aa:aa:5d:8b:8e:ca:12:e1:44:
39:60:36:ca:bf:14:f7:ea:f5:ad:7f:62:49:50:89:
6f:f7:fe:50:8c:8c:00:f5:29:db:da:84:ca:7e:68:
d9:12:73:41:90:d1:57:e2:e6:7c:ae:50:ef:20:00:
62:43:a1:d5:27:4b:6d:ff:d5:cf:f7:a5:c7:83:89:
88:0b:a0:3f:de:ac:64:96:bf:23:46:aa:87:ae:9d:
f2:cf:f5:27:96:f8:fa:10:b5:65:d6:27:51:0e:5f:
d9:f0:27:25:fd:5e:20:0d:6c:91:64:75:8c:12:40:
51:24:a3:6f:18:d2:d5:01:1f:d7:49:82:08:5b:4d:
48:09:24:13:64:2f:25:58:2b:27:fc:82:54:64:20:
a5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9B:3F:11:8E:AB:8C:1F:10:2D:F6:A8:B5:F2:F8:81:B2:B6:F8:1E
X509v3 Authority Key Identifier:
keyid:43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:75:3c:fc:02:db:dd:9d:50:ec:1f:30:74:21:41:31:80:c6:
bc:44:6e:b1:51:06:b8:b9:9e:94:92:22:bf:d3:e9:ae:31:e2:
77:9d:d4:6c:f0:04:b4:41:89:7a:f2:a0:37:e4:2b:81:e5:13:
e6:16:3a:3f:2e:14:2e:af:94:0a:31:aa:8f:47:73:4a:61:6c:
50:88:44:27:39:dc:09:35:73:44:a1:ae:b4:94:cb:0d:2d:79:
bf:64:2a:3d:9b:61:8c:63:35:dc:0a:02:64:f5:a5:e7:7d:88:
37:c7:10:0d:67:97:dc:2b:87:12:92:2f:26:55:93:44:7b:ee:
39:7e:8d:1b:8c:8c:6e:28:6b:ce:46:cf:ff:fd:e7:fc:0e:c3:
be:96:bb:2d:b2:36:f4:39:d4:54:08:44:c2:3b:fb:63:b4:4b:
ac:87:75:61:de:a2:19:98:4d:71:63:96:d7:de:07:fc:f7:50:
77:a0:38:20:2d:8f:bc:f4:7f:0d:bd:d0:97:00:93:3d:62:e4:
d4:69:13:a7:7f:8e:c7:68:f1:a5:0e:c8:38:f6:2f:6d:d4:fa:
5c:5b:46:e3:ee:2e:ee:08:f7:ba:6d:d7:66:10:11:34:e1:97:
bf:c5:42:de:d3:ed:97:aa:c4:af:3c:2c:fd:ac:a2:55:4d:2d:
d1:28:26:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:04:14 2026 by rpki-client