This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
File: rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft (raw, json)
Hash identifier: xinvt+il8htrS0POQwmre5nODKwaCnU7kFKk/soz0io=
Subject key identifier: 04:88:E7:8C:6C:41:6E:52:A2:98:12:F7:04:71:BC:DB:76:B6:18:FC
Authority key identifier: AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8
Certificate issuer: /CN=A91A97D0/serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8
Certificate serial: 02AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
Manifest number: 029F
Signing time: Sun 25 Jan 2026 00:40:47 +0000
Manifest this update: Sun 25 Jan 2026 00:40:47 +0000
Manifest next update: Sun 01 Feb 2026 00:40:47 +0000
Files and hashes: 1: rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl (hash: AFXJZpKhmy60VLwSkvuvVaGFg3FoE3xhrszv8DB4Cg0=)
2: 28BD1EFC3B4311EDAB5E6382C4F9AE02.roa (hash: uhIrsP1ipJFX3Ct1IhnIwZmCjEIkpTywt0iwOfj/NzQ=)
3: C31A6BFA717D11EE90B95137C4F9AE02.roa (hash: 7cBmRSUB3GK5yJL7yaxAGg0XDgWGErxNw0g36JGOJzQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl
rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:40:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 683 (0x2ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A97D0, serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8
Validity
Not Before: Jan 25 00:40:47 2026 GMT
Not After : Feb 1 00:40:47 2026 GMT
Subject: CN=6975668f-1d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:a5:da:e6:bf:dd:3d:6a:9e:e1:c7:2f:ce:
d1:ad:ac:4a:33:d5:d4:fc:d3:a7:cb:13:d9:00:6c:
f9:12:86:01:79:91:a1:d4:99:e8:26:bc:10:66:4c:
d0:af:62:ff:6e:50:0a:af:fc:61:9e:c9:fe:40:3a:
76:76:db:5e:3c:ae:67:49:6c:c1:53:20:f8:a9:c8:
c1:4b:55:00:8c:4a:6a:cf:cc:48:60:20:42:26:ef:
c6:0d:30:db:c7:7e:7a:88:48:3b:ff:e1:10:d1:f0:
98:7f:80:6c:3f:45:58:dd:8a:69:f2:ba:9d:a5:b7:
77:65:59:82:72:23:28:27:f2:f4:24:0c:74:13:4a:
51:24:dd:95:1e:ec:9b:26:ca:8f:8d:a7:5f:e7:5d:
87:4a:5c:b0:87:a7:15:5e:21:0f:74:f1:73:7f:ed:
3e:23:63:89:53:25:e8:95:e3:a6:b1:56:26:22:49:
f0:81:41:df:39:fe:83:c5:be:01:27:7f:19:82:9b:
39:34:b5:4e:85:b6:af:53:73:f9:2c:a8:bd:65:6e:
88:90:d6:cc:03:6b:2c:2f:4b:4b:6e:de:48:8a:cb:
55:8f:6e:71:d2:27:fc:da:0d:c8:91:67:a0:cb:3e:
d8:89:6f:5b:ae:2f:95:d2:fc:10:81:f7:67:65:48:
f6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:88:E7:8C:6C:41:6E:52:A2:98:12:F7:04:71:BC:DB:76:B6:18:FC
X509v3 Authority Key Identifier:
keyid:AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:9e:eb:8b:9f:25:7d:82:8a:1c:43:d5:a8:23:63:16:e3:5b:
cb:95:61:d5:9a:4d:c8:d8:a5:8b:07:16:91:0d:61:b4:ab:f3:
f7:7a:58:d8:b0:ac:c1:0c:5f:9f:23:86:0b:56:28:e3:67:e0:
15:c7:1d:37:5d:6c:d5:7a:c3:89:8c:bc:09:42:1f:04:81:83:
96:2d:ff:35:38:a0:44:08:06:27:79:af:3e:f9:c5:42:76:84:
ea:6a:d3:f9:1e:e4:3a:18:71:9e:04:99:c6:f4:22:93:67:7a:
86:ab:34:10:4f:1a:2d:e9:4e:a3:cd:bc:72:8d:22:d2:dd:28:
05:fb:b9:23:1f:d3:29:04:88:a0:59:b5:0b:f3:c6:67:1d:36:
3e:9f:3d:b0:87:4d:0a:1b:3e:de:f1:a0:9f:1c:23:8c:21:b2:
1a:0a:01:f9:eb:ae:d7:c1:fe:e8:97:f2:00:7a:44:c9:e0:7d:
17:71:05:51:4e:d6:34:52:3f:e4:c5:5c:01:11:0c:26:d9:01:
c8:4d:3f:a0:ff:f4:86:69:bc:53:fd:50:0d:df:59:6f:3d:ed:
bf:bd:a4:0b:13:03:00:32:5a:55:5e:d1:9d:4d:91:02:0d:e6:
65:ce:6e:07:7a:57:12:50:ee:78:fc:bf:0c:71:0b:57:a5:11:
e9:cb:60:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:49 2026 by rpki-client