This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
File: QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft (raw, json)
Hash identifier: pfxWO7V+6NQsK2BLzEblTZ9WkmUB5eF+nBzyqdNXKIM=
Subject key identifier: C0:DD:69:AA:DB:71:0F:25:2E:87:8A:50:76:CF:CD:26:AA:31:FC:49
Authority key identifier: 40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
Certificate issuer: /CN=A91ADD64/serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Certificate serial: 0160
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
Manifest number: 0150
Signing time: Sun 25 Jan 2026 03:39:04 +0000
Manifest this update: Sun 25 Jan 2026 03:39:04 +0000
Manifest next update: Sun 01 Feb 2026 03:39:04 +0000
Files and hashes: 1: QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl (hash: zUjKfkIwOjn0lIEtuhS15go+yrexdp0SOZS4ouesOmw=)
2: B1F23610923B11F084052A57C4F9AE02.roa (hash: 6wBIunqzVP5IVwrNYuKOIIoGdjbUyMvHMZGflDhF2Wc=)
3: 47E37F2AAB1A11F096B0EC5FC4F9AE02.roa (hash: f31wkh4SmRezq8K+eaS7YGeeme+WhDVB3FqGjZlLVDI=)
4: 8B0E94087E7711F0825F7E6BC4F9AE02.roa (hash: VGNr+wy397+x+eo2u5nezP4JupOw3/BZyZCNhIT48y4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl
rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:39:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADD64, serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Validity
Not Before: Jan 25 03:39:04 2026 GMT
Not After : Feb 1 03:39:04 2026 GMT
Subject: CN=69759058-761a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ce:6f:03:1f:a1:de:93:52:43:b2:a7:f3:30:
47:89:9b:08:66:35:40:bd:89:44:c0:76:4b:56:b8:
b3:dd:05:39:b0:d1:52:15:c5:c0:b9:43:da:d6:d4:
18:92:02:3e:30:17:44:2f:de:b8:2e:3d:ab:29:57:
27:2a:28:43:71:6c:fb:e2:3c:b9:66:8b:d2:73:98:
84:a9:9e:fb:5a:d9:e0:b5:e3:97:34:d3:6d:de:1f:
0e:67:98:48:f3:b9:cb:b5:48:e5:24:20:0a:94:33:
bb:ac:46:21:e2:1f:0c:47:da:3d:62:55:a6:27:5d:
8f:05:5c:c3:e4:07:9f:62:08:cb:98:12:d1:65:23:
b8:ca:db:10:0e:e3:36:64:4f:b2:e4:8c:ff:5d:9c:
5a:58:89:ca:e7:f5:c2:80:61:aa:1e:8a:a1:e9:ed:
e9:ec:0e:65:04:e2:f5:51:0f:4d:c8:12:56:c6:c8:
01:f4:0c:aa:a2:46:16:46:a0:b6:ae:8f:e6:e4:1b:
f1:26:9c:6c:75:ba:c8:d2:c3:c1:71:3e:29:d5:7e:
69:de:14:7d:48:52:9e:77:b6:69:83:5f:9d:d0:a5:
d2:d3:61:6e:bf:64:06:c2:64:0a:c6:cb:be:09:b6:
67:3d:21:7b:b2:17:b8:b2:36:5f:55:bb:7b:75:4b:
4e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DD:69:AA:DB:71:0F:25:2E:87:8A:50:76:CF:CD:26:AA:31:FC:49
X509v3 Authority Key Identifier:
keyid:40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:7d:87:1f:96:97:2c:44:fa:92:64:fd:ce:04:f3:fd:07:30:
5e:f9:b8:33:68:8b:96:66:b0:5f:b9:1a:1e:1a:c5:1a:a5:d9:
3d:c4:9c:12:aa:2c:14:f5:03:f2:52:a4:d3:26:a9:47:af:59:
1a:36:78:1f:5f:ba:14:90:90:9f:6f:73:f2:77:f8:7e:0f:17:
82:78:56:14:be:97:70:06:70:ab:6a:42:2e:37:e4:43:6c:41:
b8:93:95:df:96:14:9b:8f:7a:04:91:f8:90:2a:50:f3:79:63:
8c:f3:1a:23:1b:f9:b6:41:e1:96:b4:9c:26:b0:7e:e3:60:d2:
fb:79:e6:ae:a2:1b:a2:27:06:d4:64:fc:88:51:31:0c:f0:5a:
47:56:98:8e:0d:f2:ca:eb:a1:e9:f4:c2:f4:91:14:9b:9b:83:
d5:80:ef:c8:64:2c:05:d7:66:38:bb:50:df:69:c8:53:a1:8e:
23:60:35:f1:ef:54:01:db:98:57:39:02:7c:c4:55:00:56:3c:
a2:7c:4e:cb:93:b9:79:96:45:0e:21:38:20:5e:40:a5:b2:41:
3a:92:ef:5a:5e:1e:b8:cd:9f:55:19:b5:0b:9c:f7:2d:d8:18:
49:a5:c9:c7:16:73:58:23:aa:27:4a:75:3d:e7:28:1c:c8:f1:
2f:95:17:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:22:44 2026 by rpki-client