This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft File: QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft (raw, json) Hash identifier: AiU9B53a+nFkts8KAufqM8O3KbM7us6bj5m9r1BHpVU= Subject key identifier: 68:B5:E8:37:BE:28:B8:22:C9:7B:05:4D:3F:14:30:DE:77:43:34:A8 Authority key identifier: 42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC Certificate issuer: /CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC Certificate serial: 0CEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft Manifest number: 0CC4 Signing time: Sat 24 Jan 2026 18:05:32 +0000 Manifest this update: Sat 24 Jan 2026 18:05:31 +0000 Manifest next update: Sat 31 Jan 2026 18:05:31 +0000 Files and hashes: 1: QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl (hash: s3Rocn2l558+kEZikAhAXN+YbPf5LXKU2UQ0JbJAduI=) 2: CF3CF4A2DECD11EFA34A7C66C4F9AE02.roa (hash: F380vpOPofocBjRftATvo9zddeY6Bmha6wqzogd2g+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 18:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3308 (0xcec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DB4E, serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC Validity Not Before: Jan 24 18:05:31 2026 GMT Not After : Jan 31 18:05:31 2026 GMT Subject: CN=697509ec-46fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ec:a2:87:72:6f:58:4d:45:95:07:62:cf:c8: 94:24:9d:4a:e3:ec:e9:d3:57:b4:c7:bf:a3:a9:82: 5e:4a:9c:76:3a:ed:0a:72:4d:a3:00:cb:f7:c6:d7: 4e:2e:61:92:96:63:a9:47:bc:67:6d:ff:6b:ce:a2: a8:6c:86:a7:2a:c3:b5:12:21:3f:fd:89:41:d2:34: df:fa:3f:9b:c2:86:11:fc:2a:2d:fc:ea:ec:fb:ea: a6:5d:45:f2:c1:00:d5:91:77:f6:16:d2:b1:54:cd: f2:fd:c1:66:12:69:ee:b7:c3:06:3d:46:fb:c1:e5: 29:4c:9d:c5:e2:07:26:d1:3e:00:cc:d7:f3:e0:c3: 39:5f:6f:e2:55:22:0b:4c:4e:ff:51:c3:39:ad:8a: 61:3a:36:b8:20:ac:05:be:03:51:89:66:df:c0:e5: 16:e5:45:23:e9:09:00:5a:fd:4d:12:f0:cc:c5:ef: b6:2f:45:85:f6:62:80:49:0d:62:18:c2:14:10:d2: 4d:97:e0:62:22:d3:74:d2:fe:a6:e8:88:a8:31:b9: 5a:10:81:9f:f4:ee:8c:f4:e1:ea:c7:90:de:c8:44: 7c:10:f2:8b:e2:48:84:86:b0:cc:bb:33:b5:f6:cf: 23:68:da:87:2a:0a:04:71:cd:02:11:9a:c1:a0:2d: 4b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B5:E8:37:BE:28:B8:22:C9:7B:05:4D:3F:14:30:DE:77:43:34:A8 X509v3 Authority Key Identifier: keyid:42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:86:a9:14:6b:be:7e:de:9c:c4:2f:e9:90:5c:92:60:d2:72: d5:6f:70:52:54:6b:f9:17:4e:bf:20:44:80:75:f5:82:ce:55: 91:fc:71:1f:10:b2:74:90:49:a8:cb:a1:07:41:7b:fe:51:04: 30:f4:28:ad:ef:d6:31:9f:b5:d9:d0:23:5a:51:08:07:03:82: 38:bf:68:f1:3d:3d:17:ab:3d:9b:8a:64:90:bc:3e:f5:ce:03: 1c:07:b1:66:2c:c5:0f:39:d5:51:61:73:3e:7a:66:6f:08:f5: 83:9d:1d:3c:a2:b5:f8:9f:05:9b:78:d0:e8:a1:15:dc:d2:03: 7e:ef:39:78:57:7d:00:58:c2:a1:d8:67:c0:d6:9b:1f:01:33: a5:28:23:dc:bd:94:f3:d6:cd:c6:44:68:cc:1d:a8:8f:03:ba: 79:3f:f4:67:c7:89:fd:30:59:b6:68:dd:71:75:a4:8f:e4:9d: 69:74:ae:f9:f7:6b:67:fb:96:65:89:07:42:b0:c3:70:43:c4: 16:d4:4a:ab:ba:d6:ac:92:db:48:ee:e4:1a:66:fd:9e:db:a5: 31:08:fb:42:4f:e0:c4:ac:fb:56:70:67:f9:0e:02:9f:52:62: 8a:04:9a:dc:9b:c6:12:7f:d4:d7:dc:43:85:62:99:84:f8:9d: 33:d2:56:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERCNEUxMTAvBgNVBAUTKDQyNzU4REUwQ0MwQ0Y2MkMyQUVFRTkzRTBFRUU2Nzkw M0E1MDJDQ0MwHhcNMjYwMTI0MTgwNTMxWhcNMjYwMTMxMTgwNTMxWjAYMRYwFAYD VQQDDA02OTc1MDllYy00NmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlOyih3JvWE1FlQdiz8iUJJ1K4+zp01e0x7+jqYJeSpx2Ou0Kck2jAMv3xtdO LmGSlmOpR7xnbf9rzqKobIanKsO1EiE//YlB0jTf+j+bwoYR/Cot/Ors++qmXUXy wQDVkXf2FtKxVM3y/cFmEmnut8MGPUb7weUpTJ3F4gcm0T4AzNfz4MM5X2/iVSIL TE7/UcM5rYphOja4IKwFvgNRiWbfwOUW5UUj6QkAWv1NEvDMxe+2L0WF9mKASQ1i GMIUENJNl+BiItN00v6m6IioMblaEIGf9O6M9OHqx5DeyER8EPKL4kiEhrDMuzO1 9s8jaNqHKgoEcc0CEZrBoC1L5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGi16De+ KLgiyXsFTT8UMN53QzSoMB8GA1UdIwQYMBaAFEJ1jeDMDPYsKu7pPg7uZ5A6UCzM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REI0RS83N0U3RjlBMDBD RTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlpd3E3dWstRHU1bmtEcFFM TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FuV040TXdNOWl3cTd1ay1EdTVua0RwUUxNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REI0RS83N0U3RjlBMDBDRTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlp d3E3dWstRHU1bmtEcFFMTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHhqkUa75+3pzEL+mQXJJg0nLVb3BSVGv5F06/IESAdfWCzlWR/HEf ELJ0kEmoy6EHQXv+UQQw9Cit79Yxn7XZ0CNaUQgHA4I4v2jxPT0Xqz2bimSQvD71 zgMcB7FmLMUPOdVRYXM+emZvCPWDnR08orX4nwWbeNDooRXc0gN+7zl4V30AWMKh 2GfA1psfATOlKCPcvZTz1s3GRGjMHaiPA7p5P/Rnx4n9MFm2aN1xdaSP5J1pdK75 92tn+5ZliQdCsMNwQ8QW1EqrutaskttI7uQaZv2e26UxCPtCT+DErPtWcGf5DgKf UmKKBJrcm8YSf9TX3EOFYpmE+J0z0lZx -----END CERTIFICATE-----Generated at Sun Jan 25 07:58:49 2026 by rpki-client