This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft File: Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft (raw, json) Hash identifier: lX9DrE1Rb9/4lKn2Kft95s4eHGrtjRrzeQKgcqaTIyY= Subject key identifier: 01:BC:CD:B4:85:E7:74:5B:CC:34:15:CE:D0:38:1D:05:CF:7F:81:65 Authority key identifier: 43:EA:F3:0C:23:0C:6E:EE:6E:35:4D:C0:37:72:A6:EE:53:D5:06:85 Certificate issuer: /CN=A91988EB/serialNumber=43EAF30C230C6EEE6E354DC03772A6EE53D50685 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft Manifest number: 0F Signing time: Fri 23 Jan 2026 07:03:07 +0000 Manifest this update: Fri 23 Jan 2026 07:03:06 +0000 Manifest next update: Fri 30 Jan 2026 07:03:06 +0000 Files and hashes: 1: Q-rzDCMMbu5uNU3AN3Km7lPVBoU.crl (hash: XGgcIuUV/Ddv0U9uZUPXaZHSEWP2igxbKRNcloMs148=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.crl rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 07:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91988EB, serialNumber=43EAF30C230C6EEE6E354DC03772A6EE53D50685 Validity Not Before: Jan 23 07:03:06 2026 GMT Not After : Jan 30 07:03:06 2026 GMT Subject: CN=69731d2b-58be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:24:48:34:5a:59:bc:5d:d1:7c:6b:7d:db:14: ec:b3:dd:a0:6e:5e:76:a9:3a:c1:c5:6a:d0:28:00: 5c:ad:ab:10:c8:a9:98:0e:2c:41:cb:08:d0:84:94: 6b:6f:1f:e2:8c:73:c8:25:b8:2a:b0:ae:14:73:3c: 21:86:79:5e:53:44:73:f9:b8:4f:8d:a9:d5:0e:3b: f7:7b:a8:5d:1c:f9:57:fd:03:fa:48:ac:39:d4:41: 1d:2d:1f:00:ca:17:f0:b9:0f:2f:fd:00:ca:9a:75: dc:83:b2:95:f6:d7:25:0b:23:18:c9:3b:fe:8e:5c: c8:56:d7:1d:42:91:78:b6:0b:e3:a6:52:6d:92:1e: 20:df:1f:68:8a:80:00:19:d2:70:81:41:4a:5c:59: d9:a9:08:1b:f1:6c:70:a5:25:1d:17:22:7b:50:17: 4c:47:44:7b:d0:7f:7b:43:ee:3d:1d:3b:cc:e3:77: 7b:43:3f:9d:8d:08:04:80:69:a6:59:45:44:eb:5f: 3d:17:d5:c2:1f:91:04:5e:eb:56:50:6f:9b:b3:19: ea:75:c7:f2:59:ed:7f:3e:5d:ac:19:39:84:85:3c: f1:e3:2a:5c:05:47:5d:3c:18:43:d3:4f:ae:f4:17: 89:0b:8a:f9:e2:d1:ec:34:77:68:76:e6:49:eb:e9: a3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BC:CD:B4:85:E7:74:5B:CC:34:15:CE:D0:38:1D:05:CF:7F:81:65 X509v3 Authority Key Identifier: keyid:43:EA:F3:0C:23:0C:6E:EE:6E:35:4D:C0:37:72:A6:EE:53:D5:06:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:10:73:dc:4a:33:cf:de:8c:b3:20:54:28:b4:24:80:6b:02: 4a:3d:38:60:c9:f8:e8:8d:d8:2b:d5:b5:a5:5a:67:60:7c:42: fc:c5:60:ff:84:31:49:aa:09:97:fa:07:05:50:a9:bf:44:a2: 8c:e4:4d:30:82:a3:3a:39:ea:95:70:17:8b:39:ba:79:bf:d5: 87:a9:e4:f8:93:42:03:dd:c9:87:6f:d4:e3:92:aa:8b:1a:e3: 84:c1:2f:bf:64:83:f3:9b:ba:22:35:3a:1b:f9:0d:49:c1:be: 5c:90:11:1f:60:78:c5:a3:7b:b6:d1:dd:60:ef:8c:83:9a:92: 33:d3:95:af:a1:8f:ff:dc:be:a5:4b:ac:a6:b7:69:95:ab:8a: 26:a4:ee:6b:fb:c8:d1:cf:ed:9b:30:7d:16:7c:df:96:c3:65: 23:b3:c5:83:19:a6:7c:6e:ec:89:8e:e4:f4:54:2f:ca:39:f2: 4d:e9:7d:4d:7e:bc:18:5a:54:b6:93:09:bb:f8:d0:7b:d1:ef: 17:a4:e9:2d:85:d2:33:0e:6f:74:82:cd:36:27:78:53:62:c0: 81:6a:cf:32:14:bc:c0:c7:ff:f4:7f:d2:0f:2c:59:d2:d6:81: 14:84:53:96:4f:6b:69:0c:33:68:1d:0b:4c:f7:aa:57:97:ac: 7f:bf:68:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE5 ODhFQjExMC8GA1UEBRMoNDNFQUYzMEMyMzBDNkVFRTZFMzU0REMwMzc3MkE2RUU1 M0Q1MDY4NTAeFw0yNjAxMjMwNzAzMDZaFw0yNjAxMzAwNzAzMDZaMBgxFjAUBgNV BAMMDTY5NzMxZDJiLTU4YmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiJEg0Wlm8XdF8a33bFOyz3aBuXnapOsHFatAoAFytqxDIqZgOLEHLCNCElGtv H+KMc8gluCqwrhRzPCGGeV5TRHP5uE+NqdUOO/d7qF0c+Vf9A/pIrDnUQR0tHwDK F/C5Dy/9AMqaddyDspX21yULIxjJO/6OXMhW1x1CkXi2C+OmUm2SHiDfH2iKgAAZ 0nCBQUpcWdmpCBvxbHClJR0XIntQF0xHRHvQf3tD7j0dO8zjd3tDP52NCASAaaZZ RUTrXz0X1cIfkQRe61ZQb5uzGep1x/JZ7X8+XawZOYSFPPHjKlwFR108GEPTT670 F4kLivni0ew0d2h25knr6aNZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAbzNtIXn dFvMNBXO0DgdBc9/gWUwHwYDVR0jBBgwFoAUQ+rzDCMMbu5uNU3AN3Km7lPVBoUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4OEVCLzAxOEUxRjZDRTQ4 QjExRjA4M0QxMUU2QjQ0NkY1NkJDL1EtcnpEQ01NYnU1dU5VM0FOM0ttN2xQVkJv VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUS1yekRDTU1idTV1TlUzQU4zS203bFBWQm9VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 OEVCLzAxOEUxRjZDRTQ4QjExRjA4M0QxMUU2QjQ0NkY1NkJDL1EtcnpEQ01NYnU1 dU5VM0FOM0ttN2xQVkJvVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIMQc9xKM8/ejLMgVCi0JIBrAko9OGDJ+OiN2CvVtaVaZ2B8QvzFYP+E MUmqCZf6BwVQqb9EoozkTTCCozo56pVwF4s5unm/1Yep5PiTQgPdyYdv1OOSqosa 44TBL79kg/ObuiI1Ohv5DUnBvlyQER9geMWje7bR3WDvjIOakjPTla+hj//cvqVL rKa3aZWriiak7mv7yNHP7ZswfRZ835bDZSOzxYMZpnxu7ImO5PRUL8o58k3pfU1+ vBhaVLaTCbv40HvR7xek6S2F0jMOb3SCzTYneFNiwIFqzzIUvMDH//R/0g8sWdLW gRSEU5ZPa2kMM2gdC0z3qleXrH+/aGw= -----END CERTIFICATE-----Generated at Sun Jan 25 02:48:11 2026 by rpki-client