This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
File: QqwYh98sn_RowA68BlWa4XkLfUE.mft (raw, json)
Hash identifier: DZzkCFxqo+Cezf0jzuUcBgy1dl95epvru+DlXrkRbkM=
Subject key identifier: 83:63:CE:23:F3:A1:CE:77:E6:8B:16:2D:93:B0:D2:46:2D:83:E4:0C
Authority key identifier: 42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41
Certificate issuer: /CN=A919EA3B/serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41
Certificate serial: 01DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
Manifest number: 01D8
Signing time: Sun 25 Jan 2026 02:04:15 +0000
Manifest this update: Sun 25 Jan 2026 02:04:14 +0000
Manifest next update: Sun 01 Feb 2026 02:04:14 +0000
Files and hashes: 1: QqwYh98sn_RowA68BlWa4XkLfUE.crl (hash: t7iIr+zqC2KWYPUml24MYhKplzGboswA6+VLx+reZWw=)
2: 2E7C802A261711EEB93AAC74C4F9AE02.roa (hash: GNgH54VuveRBqhIirbO5+23rkV4blzguEnK1jVi0hnU=)
3: 0218C21E261711EE9AEA7674C4F9AE02.roa (hash: uhmsph/UZ+El90Yxy7WpECGs3tuN2cOfnCiiAfNg+oE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl
rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478 (0x1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EA3B, serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41
Validity
Not Before: Jan 25 02:04:14 2026 GMT
Not After : Feb 1 02:04:14 2026 GMT
Subject: CN=69757a1f-f236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:35:ab:32:8b:c8:1d:b7:77:ce:0f:3b:da:
22:af:48:7f:58:18:23:b5:0c:9a:60:73:c0:e2:77:
62:3e:95:c0:d4:fa:56:07:80:53:b1:29:fc:15:f8:
7a:c7:39:f7:8c:ab:b3:bc:e5:e3:bc:01:af:58:ff:
fa:ea:94:8d:f6:e1:32:7d:6e:17:61:9a:53:7d:33:
74:eb:0b:1f:1c:21:2b:1e:81:95:90:41:3c:10:01:
4e:68:3a:da:16:a6:24:fe:01:3e:dd:5b:9e:61:45:
58:35:82:23:a6:5e:50:a3:1a:f5:3a:a0:ea:91:ce:
c1:c5:59:30:99:5a:16:cb:71:8b:73:b3:d2:ad:da:
1e:40:2f:a4:c0:57:a3:63:d5:08:eb:84:3a:a2:8f:
ad:80:a7:7d:c0:1c:e4:0c:17:3f:87:e0:c8:67:00:
fc:a5:ab:70:bb:2c:e1:7a:93:fc:0c:e8:fb:e8:0a:
f0:24:5b:56:ae:50:67:b3:09:37:8b:cf:66:21:89:
e8:90:fa:0f:74:6b:b1:65:ab:b7:76:2a:0e:16:1e:
8d:d0:c4:9e:10:d7:ed:e3:df:b1:13:3c:e8:7c:95:
c2:64:f3:82:e1:66:31:60:96:db:d2:7c:9a:0d:a4:
6f:3e:f8:92:f1:74:03:68:6c:4c:f8:37:8c:73:a5:
7c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:63:CE:23:F3:A1:CE:77:E6:8B:16:2D:93:B0:D2:46:2D:83:E4:0C
X509v3 Authority Key Identifier:
keyid:42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f8:23:b2:1a:0d:63:90:09:35:da:f1:17:2f:36:85:b6:e2:
d6:d6:1b:d4:b3:8b:df:0d:5a:af:26:14:3e:df:82:b4:49:ab:
ef:3c:bf:03:8e:80:6a:e4:5b:79:c5:27:e2:53:d0:a0:6a:bc:
b1:ef:31:ba:8d:de:0e:a4:c0:a4:88:c9:09:7c:9c:a0:90:cb:
96:e1:96:0b:3c:b3:1f:28:95:77:ba:ab:62:86:d2:6f:d8:cc:
06:c1:db:5a:09:f6:96:95:16:87:5c:ba:41:d0:e1:04:b9:89:
48:8b:96:26:bd:a1:8a:10:37:d8:6c:aa:9b:2b:b9:28:d3:bd:
7d:50:0b:d5:79:50:7d:36:38:5a:af:7a:bd:31:ed:96:4f:b1:
78:bb:31:0e:bb:a4:da:e7:62:64:38:de:35:54:5e:80:01:1f:
99:9e:ed:eb:4c:49:54:a8:d0:5d:66:b9:89:bd:3c:89:68:30:
06:52:45:58:e7:e4:01:c5:0b:eb:d4:69:97:7c:6f:20:41:55:
b2:eb:7e:24:f4:34:68:36:26:4e:f1:07:35:a6:b2:c4:89:71:
73:b5:e0:0f:1e:00:25:e7:19:01:f2:b6:ee:fe:a0:77:37:2e:
8e:f6:c5:b5:ae:22:dd:21:98:4f:ea:09:ed:b4:26:52:29:87:
63:72:64:dd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVBM0IxMTAvBgNVBAUTKDQyQUMxODg3REYyQzlGRjQ2OEMwMEVCQzA2NTU5QUUx
NzkwQjdENDEwHhcNMjYwMTI1MDIwNDE0WhcNMjYwMjAxMDIwNDE0WjAYMRYwFAYD
VQQDDA02OTc1N2ExZi1mMjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmdE1qzKLyB23d84PO9oir0h/WBgjtQyaYHPA4ndiPpXA1PpWB4BTsSn8Ffh6
xzn3jKuzvOXjvAGvWP/66pSN9uEyfW4XYZpTfTN06wsfHCErHoGVkEE8EAFOaDra
FqYk/gE+3VueYUVYNYIjpl5Qoxr1OqDqkc7BxVkwmVoWy3GLc7PSrdoeQC+kwFej
Y9UI64Q6oo+tgKd9wBzkDBc/h+DIZwD8patwuyzhepP8DOj76ArwJFtWrlBnswk3
i89mIYnokPoPdGuxZau3dioOFh6N0MSeENft49+xEzzofJXCZPOC4WYxYJbb0nya
DaRvPviS8XQDaGxM+DeMc6V83wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINjziPz
oc535osWLZOw0kYtg+QMMB8GA1UdIwQYMBaAFEKsGIffLJ/0aMAOvAZVmuF5C31B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUEzQi84OUQwMDYwQTI2
MTYxMUVFQkU3NjEwNUNDNEY5QUUwMi9RcXdZaDk4c25fUm93QTY4QmxXYTRYa0xm
VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Fxd1loOThzbl9Sb3dBNjhCbFdhNFhrTGZVRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUEzQi84OUQwMDYwQTI2MTYxMUVFQkU3NjEwNUNDNEY5QUUwMi9RcXdZaDk4c25f
Um93QTY4QmxXYTRYa0xmVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA6+COyGg1jkAk12vEXLzaFtuLW1hvUs4vfDVqvJhQ+34K0SavvPL8D
joBq5Ft5xSfiU9Cgaryx7zG6jd4OpMCkiMkJfJygkMuW4ZYLPLMfKJV3uqtihtJv
2MwGwdtaCfaWlRaHXLpB0OEEuYlIi5YmvaGKEDfYbKqbK7ko0719UAvVeVB9Njha
r3q9Me2WT7F4uzEOu6Ta52JkON41VF6AAR+Znu3rTElUqNBdZrmJvTyJaDAGUkVY
5+QBxQvr1GmXfG8gQVWy634k9DRoNiZO8Qc1prLEiXFzteAPHgAl5xkB8rbu/qB3
Ny6O9sW1riLdIZhP6gnttCZSKYdjcmTd
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:48:41 2026 by rpki-client