This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft File: QL0lotYDGHPlXfzdrTpI97z4jIs.mft (raw, json) Hash identifier: b9Kt5Rt0rhEGzhafu87+oC1Pg65SqEp+ebvmegat5To= Subject key identifier: 57:4A:A1:72:3B:77:09:A1:63:25:37:77:A9:D9:DE:64:23:36:6D:82 Authority key identifier: 40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B Certificate issuer: /CN=A9194A58/serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B Certificate serial: 18BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft Manifest number: 18AF Signing time: Sat 24 Jan 2026 16:14:56 +0000 Manifest this update: Sat 24 Jan 2026 16:14:55 +0000 Manifest next update: Sat 31 Jan 2026 16:14:55 +0000 Files and hashes: 1: QL0lotYDGHPlXfzdrTpI97z4jIs.crl (hash: oE/MoVsYeT3toiP8hona7GFCHLRHBAllUW752Epz9Lk=) 2: 42D0E9A4AFD911E7B8A7E96CC4F9AE02.roa (hash: p9zhGKCO2BBzL3wnYhT/qvWZC/Mb1+QSPyP9kvTHJK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 16:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6331 (0x18bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A58, serialNumber=40BD25A2D6031873E55DFCDDAD3A48F7BCF88C8B Validity Not Before: Jan 24 16:14:55 2026 GMT Not After : Jan 31 16:14:55 2026 GMT Subject: CN=6974efff-cc8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:85:98:ba:ee:5a:44:98:88:87:3f:b7:fe:9a: d0:15:c1:48:ca:14:c3:cc:5a:bb:41:5c:5e:64:0c: 24:9f:72:7c:8a:38:6e:12:f2:f7:d5:6e:75:7d:4a: 38:a9:91:6d:f7:c9:c3:98:0b:6f:e8:ae:91:9d:4f: ae:97:3c:a8:fc:a2:ef:82:48:fe:a4:b5:f2:d4:61: 04:6a:f3:f0:7a:8c:48:f4:f9:97:3d:7a:81:c4:58: c9:cb:0b:7b:54:d0:bc:fb:db:a5:43:7d:43:2b:3d: 22:c6:ef:5e:33:01:c0:a6:f1:d6:95:e2:5d:18:08: e5:4d:69:e4:b9:39:c2:44:62:90:21:d5:f7:5e:49: fb:b4:9c:3f:3f:d5:ce:5a:04:3a:03:20:37:84:56: 87:03:2e:47:16:ee:34:a6:99:4e:9d:73:5c:27:d4: 51:12:ee:3c:16:d1:d7:69:d5:fc:89:a7:e1:52:8b: 67:61:7a:ac:d8:2d:ad:4e:35:fe:99:8f:63:8d:23: 1c:51:3b:b7:16:ce:36:8b:99:ce:dc:c3:c5:c8:93: e9:12:a0:b2:93:46:68:b1:9f:75:e4:f8:39:83:b9: ab:b0:3e:58:60:11:c7:f8:e2:59:26:87:e9:c5:a8: 5b:91:24:2e:06:83:ba:56:89:97:84:33:59:6c:54: 9a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4A:A1:72:3B:77:09:A1:63:25:37:77:A9:D9:DE:64:23:36:6D:82 X509v3 Authority Key Identifier: keyid:40:BD:25:A2:D6:03:18:73:E5:5D:FC:DD:AD:3A:48:F7:BC:F8:8C:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QL0lotYDGHPlXfzdrTpI97z4jIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A58/4EACE490AE4311E7881C6416C4F9AE02/QL0lotYDGHPlXfzdrTpI97z4jIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:f0:74:c1:cb:f5:d1:ad:3c:7a:a2:5c:92:81:f9:db:b1:58: 02:53:a6:03:be:86:2d:f2:3a:5b:0b:4a:5c:de:67:a8:1c:0b: a3:d3:53:ab:88:b9:98:a7:1f:4a:89:8e:f9:b9:ca:d7:e4:8d: df:8a:0f:f8:93:f4:ae:c4:24:40:a7:7b:03:88:38:69:9a:7d: b6:48:4a:56:6c:4f:10:23:56:f7:db:40:50:80:97:2a:dc:9e: 58:77:a8:c1:37:c9:5a:28:33:ab:73:46:9d:71:95:28:52:3f: dd:85:db:a8:5e:a4:87:01:70:cc:ea:17:3e:81:4a:b9:18:f7: 0b:8d:7a:e5:95:15:ce:9d:63:8f:32:cc:09:25:1b:68:77:23: 1f:d8:74:14:5d:8f:6e:e3:db:f6:4f:1f:92:42:d6:b7:2a:07: cf:be:66:90:5f:74:cd:08:4b:e7:e2:5a:59:3e:9b:b3:e4:8c: c8:31:0a:43:bc:2e:4f:be:d5:d8:2b:11:7f:10:b6:f4:b5:87: 0c:73:d5:12:48:47:74:9a:10:9e:1f:0a:08:ed:55:41:01:a2: a0:6b:1e:1a:5b:93:e2:e8:0b:23:a6:f3:32:be:0b:81:85:5d: 3a:1a:43:9e:55:83:ba:50:92:21:0c:04:74:df:0b:dd:65:c8: ab:2c:d1:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBNTgxMTAvBgNVBAUTKDQwQkQyNUEyRDYwMzE4NzNFNTVERkNEREFEM0E0OEY3 QkNGODhDOEIwHhcNMjYwMTI0MTYxNDU1WhcNMjYwMTMxMTYxNDU1WjAYMRYwFAYD VQQDDA02OTc0ZWZmZi1jYzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlYWYuu5aRJiIhz+3/prQFcFIyhTDzFq7QVxeZAwkn3J8ijhuEvL31W51fUo4 qZFt98nDmAtv6K6RnU+ulzyo/KLvgkj+pLXy1GEEavPweoxI9PmXPXqBxFjJywt7 VNC8+9ulQ31DKz0ixu9eMwHApvHWleJdGAjlTWnkuTnCRGKQIdX3Xkn7tJw/P9XO WgQ6AyA3hFaHAy5HFu40pplOnXNcJ9RREu48FtHXadX8iafhUotnYXqs2C2tTjX+ mY9jjSMcUTu3Fs42i5nO3MPFyJPpEqCyk0ZosZ915Pg5g7mrsD5YYBHH+OJZJofp xahbkSQuBoO6VomXhDNZbFSapQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFdKoXI7 dwmhYyU3d6nZ3mQjNm2CMB8GA1UdIwQYMBaAFEC9JaLWAxhz5V383a06SPe8+IyL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE1OC80RUFDRTQ5MEFF NDMxMUU3ODgxQzY0MTZDNEY5QUUwMi9RTDBsb3RZREdIUGxYZnpkclRwSTk3ejRq SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FMMGxvdFlER0hQbFhmemRyVHBJOTd6NGpJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE1OC80RUFDRTQ5MEFFNDMxMUU3ODgxQzY0MTZDNEY5QUUwMi9RTDBsb3RZREdI UGxYZnpkclRwSTk3ejRqSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu8HTBy/XRrTx6olySgfnbsVgCU6YDvoYt8jpbC0pc3meoHAuj01Or iLmYpx9KiY75ucrX5I3fig/4k/SuxCRAp3sDiDhpmn22SEpWbE8QI1b320BQgJcq 3J5Yd6jBN8laKDOrc0adcZUoUj/dhduoXqSHAXDM6hc+gUq5GPcLjXrllRXOnWOP MswJJRtodyMf2HQUXY9u49v2Tx+SQta3KgfPvmaQX3TNCEvn4lpZPpuz5IzIMQpD vC5PvtXYKxF/ELb0tYcMc9USSEd0mhCeHwoI7VVBAaKgax4aW5Pi6AsjpvMyvguB hV06GkOeVYO6UJIhDAR03wvdZcirLNHI -----END CERTIFICATE-----Generated at Sun Jan 25 10:47:23 2026 by rpki-client