This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft File: QGGGPd9D57OxiePJwyF7wSuzXyE.mft (raw, json) Hash identifier: ElBzFlPZPRzkcdaFNYqRPmR6+x7SlNqTPWaFkvSj1Ek= Subject key identifier: 1E:3E:BF:D3:06:63:9A:31:F3:7B:77:D5:DA:4F:07:44:6E:47:58:89 Authority key identifier: 40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21 Certificate issuer: /CN=A919E8DB/serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft Manifest number: DF Signing time: Fri 23 Jan 2026 04:52:29 +0000 Manifest this update: Fri 23 Jan 2026 04:52:29 +0000 Manifest next update: Fri 30 Jan 2026 04:52:29 +0000 Files and hashes: 1: QGGGPd9D57OxiePJwyF7wSuzXyE.crl (hash: SlYZUw6Xff56LxuQu7eNaSEnKfHMf9FVY0j4sVZ386k=) 2: DCAA44D6BF2A11EFBAAF1F16C4F9AE02.roa (hash: Nht97ur+ekDVMahSKVw1nXYEmKhTRBnAIrSGC7Jrda0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.crl rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Jan 2026 04:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E8DB, serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21 Validity Not Before: Jan 23 04:52:29 2026 GMT Not After : Jan 30 04:52:29 2026 GMT Subject: CN=6972fe8d-0a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:93:8e:d5:02:e8:54:72:8a:9b:69:e0:5d:6e: b2:3e:2e:2d:0c:ff:f6:f8:12:77:f3:1e:4d:d7:ef: f1:5a:d0:2b:6b:20:aa:c3:83:fd:15:db:af:0d:ae: 4e:6a:a8:d0:e9:79:f2:97:5d:2d:3d:c2:fc:2f:e8: 3b:82:6f:5d:5d:4a:ce:ff:b0:a9:10:9e:bc:03:f9: 73:26:a0:27:c0:46:d5:c6:e0:80:a0:49:91:94:9d: f8:33:89:b3:47:8b:30:22:fb:fa:79:66:1b:cc:e7: b3:6e:a3:fe:9b:7a:72:0c:02:7c:bc:15:ee:88:c2: 92:9a:bc:7f:4f:7c:91:fd:10:90:05:04:c8:cb:0f: 39:d8:f8:53:9d:7f:3d:79:87:9a:67:d1:52:bb:0d: 8e:04:57:b6:da:f9:05:e0:53:74:e1:39:03:49:55: 33:57:89:b2:83:11:a3:56:05:2b:59:04:62:a6:62: 67:47:8c:7b:a2:e6:aa:b4:88:a4:a6:2e:ce:29:bc: b8:25:28:53:c4:5d:74:a3:e2:d0:7e:c7:cc:3a:da: 71:04:6a:7f:1a:f5:82:d8:83:34:c0:f6:17:46:d3: 90:ea:89:79:1a:3f:ff:48:89:b3:82:ab:91:d5:f7: ee:f3:51:c9:28:54:60:0a:1f:2a:c5:3b:dc:91:c3: b0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3E:BF:D3:06:63:9A:31:F3:7B:77:D5:DA:4F:07:44:6E:47:58:89 X509v3 Authority Key Identifier: keyid:40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f7:14:1c:72:20:e7:1c:d6:ed:92:22:32:bb:4c:e5:d2:80: 7a:11:5b:f3:f4:e7:6b:74:03:0b:f6:8f:4e:92:c2:04:06:a4: 09:73:a9:fe:3b:6a:d3:22:c4:cb:b9:a7:74:7e:06:ec:90:58: 71:85:66:d1:46:2d:a2:0b:01:00:bd:04:f8:8a:18:11:f4:b2: 5e:a8:a0:d1:1b:c8:8e:ab:f9:8d:df:44:50:41:39:4e:0c:10: e8:25:6b:5a:d4:dc:4c:1d:27:2d:56:d5:fb:41:75:f9:1e:42: d8:3b:61:6b:7c:bd:99:0d:33:b1:05:b2:2c:6f:3e:ec:75:31: 9d:f0:75:d1:aa:62:e9:6f:2a:27:80:4b:89:32:8e:d6:b4:0d: 77:22:47:5d:84:3a:b0:56:85:2f:95:35:b8:10:9f:3c:53:22: 5a:0d:f6:07:19:c1:e9:e5:d4:e0:63:f6:5f:7f:c8:f1:77:9b: 8c:09:51:ba:99:0c:10:3a:a7:b0:e8:97:74:95:18:93:3f:0e: a1:26:bc:46:d6:34:22:7b:ab:1d:d5:b3:e3:ee:8b:bb:eb:88: 90:12:d8:5b:4d:86:37:4e:00:b2:73:0f:4f:cf:ff:53:c4:d6: 02:5c:58:8a:a1:70:bb:e6:ac:05:43:a0:f1:3b:53:c5:1d:2b: ba:29:e0:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUU4REIxMTAvBgNVBAUTKDQwNjE4NjNEREY0M0U3QjNCMTg5RTNDOUMzMjE3QkMx MkJCMzVGMjEwHhcNMjYwMTIzMDQ1MjI5WhcNMjYwMTMwMDQ1MjI5WjAYMRYwFAYD VQQDDA02OTcyZmU4ZC0wYTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj5OO1QLoVHKKm2ngXW6yPi4tDP/2+BJ38x5N1+/xWtArayCqw4P9FduvDa5O aqjQ6Xnyl10tPcL8L+g7gm9dXUrO/7CpEJ68A/lzJqAnwEbVxuCAoEmRlJ34M4mz R4swIvv6eWYbzOezbqP+m3pyDAJ8vBXuiMKSmrx/T3yR/RCQBQTIyw852PhTnX89 eYeaZ9FSuw2OBFe22vkF4FN04TkDSVUzV4mygxGjVgUrWQRipmJnR4x7ouaqtIik pi7OKby4JShTxF10o+LQfsfMOtpxBGp/GvWC2IM0wPYXRtOQ6ol5Gj//SImzgquR 1ffu81HJKFRgCh8qxTvckcOwdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4+v9MG Y5ox83t31dpPB0RuR1iJMB8GA1UdIwQYMBaAFEBhhj3fQ+ezsYnjycMhe8Ers18h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RThEQi9CNDhFMjVGNEI3 NjMxMUVGODJERDhGMzNDNEY5QUUwMi9RR0dHUGQ5RDU3T3hpZVBKd3lGN3dTdXpY eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FHR0dQZDlENTdPeGllUEp3eUY3d1N1elh5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RThEQi9CNDhFMjVGNEI3NjMxMUVGODJERDhGMzNDNEY5QUUwMi9RR0dHUGQ5RDU3 T3hpZVBKd3lGN3dTdXpYeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP9xQcciDnHNbtkiIyu0zl0oB6EVvz9OdrdAML9o9OksIEBqQJc6n+ O2rTIsTLuad0fgbskFhxhWbRRi2iCwEAvQT4ihgR9LJeqKDRG8iOq/mN30RQQTlO DBDoJWta1NxMHSctVtX7QXX5HkLYO2FrfL2ZDTOxBbIsbz7sdTGd8HXRqmLpbyon gEuJMo7WtA13IkddhDqwVoUvlTW4EJ88UyJaDfYHGcHp5dTgY/Zff8jxd5uMCVG6 mQwQOqew6Jd0lRiTPw6hJrxG1jQie6sd1bPj7ou764iQEthbTYY3TgCycw9Pz/9T xNYCXFiKoXC75qwFQ6DxO1PFHSu6KeBA -----END CERTIFICATE-----Generated at Sun Jan 25 02:53:27 2026 by rpki-client