This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
File: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft (raw, json)
Hash identifier: XZBGwDLuOvTtaqr67lappOQzjlk/rKSS0udNpxIqB+M=
Subject key identifier: 8F:0A:3F:93:CB:7A:3D:F6:40:E0:3E:BF:12:3D:E9:E8:D4:74:E8:93
Authority key identifier: 43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7
Certificate issuer: /CN=A9192A47/serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7
Certificate serial: D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
Manifest number: D3
Signing time: Sun 25 Jan 2026 04:56:22 +0000
Manifest this update: Sun 25 Jan 2026 04:56:22 +0000
Manifest next update: Sun 01 Feb 2026 04:56:22 +0000
Files and hashes: 1: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl (hash: Ac6dGeZUea/fB1fB84TU1o/ZeDQN3K3Vb5pJBF3JBrQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl
rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:56:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A47, serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7
Validity
Not Before: Jan 25 04:56:22 2026 GMT
Not After : Feb 1 04:56:22 2026 GMT
Subject: CN=6975a276-a1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:6b:ec:7e:e6:c9:d5:95:47:35:4c:ff:db:
e5:b5:a7:6e:3f:9b:aa:49:50:2a:56:d1:62:9d:b4:
11:76:d7:e5:69:a9:b4:76:0b:45:9c:09:8a:4e:cf:
54:39:d8:84:6a:24:0b:b8:14:31:c6:5d:82:ae:c9:
e2:d7:84:31:77:58:9d:66:46:34:38:41:e0:40:64:
63:98:ef:bd:0d:27:ca:8b:29:ad:2e:a7:38:a1:c8:
4e:2e:17:b8:c1:bc:d9:22:e0:7c:92:e4:9f:be:45:
cf:89:19:f4:c4:17:cb:9b:01:6a:68:8e:54:95:1d:
8f:5c:56:db:86:93:c5:b3:7d:34:fd:9c:19:12:78:
54:3d:a7:f0:09:83:cd:88:da:ab:7b:61:aa:7d:af:
c2:5c:4b:a5:1f:c7:f7:72:6e:bb:01:c9:7c:ef:30:
e3:9d:b9:6f:df:80:f6:5d:d1:6a:b0:c8:af:0f:61:
ee:5b:69:ea:7b:cf:f4:aa:dc:15:37:5b:b9:b0:dc:
02:c7:a0:63:fc:ea:46:a4:3c:df:d5:f9:95:73:ef:
3b:28:8e:9a:8d:f1:eb:52:e0:03:db:ef:9b:c7:1d:
62:fc:2c:da:d7:a0:18:43:78:83:a0:41:97:3d:2e:
24:21:de:0b:a3:38:e1:6c:17:91:be:b6:c8:df:6f:
eb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0A:3F:93:CB:7A:3D:F6:40:E0:3E:BF:12:3D:E9:E8:D4:74:E8:93
X509v3 Authority Key Identifier:
keyid:43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:b3:88:c3:65:ee:bf:a9:91:ec:ca:3b:f9:6d:e4:9c:10:93:
be:1f:da:02:92:48:4f:e8:84:a1:39:2b:21:de:1a:f5:8a:6c:
9d:9e:0d:01:da:4e:c1:7b:61:30:b3:63:41:df:f6:2f:1c:d0:
80:9e:05:c5:8d:cc:06:b6:66:35:1f:b5:1d:69:b5:cf:64:e9:
4a:66:60:92:15:b5:00:36:8f:60:b4:32:ae:63:d7:45:42:0f:
63:ec:19:47:e8:a6:b3:12:8d:52:45:c1:1c:e5:57:e7:fb:c4:
b2:b8:68:fe:14:0f:df:15:15:a2:27:a6:2f:bc:6b:cf:b6:9a:
a4:46:e9:a8:16:a7:2a:8d:77:c9:fc:29:25:2c:a0:bb:ac:07:
f4:47:cc:d0:d7:a2:5d:2f:10:b8:fa:3e:1e:50:b5:0a:e5:ce:
6c:1a:20:0f:fe:8c:3c:ca:ab:ae:fe:a2:9c:a7:d6:22:76:06:
b0:dc:8a:cb:aa:5e:80:07:72:5f:f8:45:01:a3:a2:40:ef:32:
3a:a0:8f:e4:99:15:7e:31:1b:86:2e:1f:0c:1e:90:91:93:03:
1f:81:1a:36:76:c2:49:87:24:d3:c5:9f:87:6d:a3:2e:ff:6c:
ef:34:a2:7b:88:83:98:0e:ee:58:19:4e:86:11:f7:e3:93:1e:
9f:b4:c1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:57:43 2026 by rpki-client