This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft
File: QQmhbhhypDGvWRhmVbtg1TN8pIU.mft (raw, json)
Hash identifier: rVGzyKSq7gvC12KDU5oWm7HRmWByWeJSvGD1R3r3irs=
Subject key identifier: 2E:31:B8:F6:10:D8:A9:47:9F:F8:FC:74:F3:69:1C:56:76:62:5F:20
Authority key identifier: 41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85
Certificate issuer: /CN=A91AE309/serialNumber=4109A16E1872A431AF59186655BB60D5337CA485
Certificate serial: 070A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft
Manifest number: 0704
Signing time: Sat 24 Jan 2026 21:13:34 +0000
Manifest this update: Sat 24 Jan 2026 21:13:33 +0000
Manifest next update: Sat 31 Jan 2026 21:13:33 +0000
Files and hashes: 1: QQmhbhhypDGvWRhmVbtg1TN8pIU.crl (hash: 3DgjBPCdb0QP3WA/ElIyi2SJ8JI4wo2A0g95ooVkMe0=)
2: E036A33A724711EBAC3F0059C4F9AE02.roa (hash: 13smEXxrx9J8FfXsUtzorOgdvJa8iZ3quk2fsse4QXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl
rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1802 (0x70a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE309, serialNumber=4109A16E1872A431AF59186655BB60D5337CA485
Validity
Not Before: Jan 24 21:13:33 2026 GMT
Not After : Jan 31 21:13:33 2026 GMT
Subject: CN=697535fe-ba5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b3:91:b4:ce:2c:ce:6c:1d:69:a1:a5:74:30:
57:82:d6:8b:9c:df:67:8f:a4:ad:cc:37:1f:b7:ca:
ec:16:68:52:1d:62:7c:72:45:f3:2a:8c:fc:f4:05:
cc:81:c1:79:32:92:29:05:45:0b:39:aa:5c:f5:3f:
a4:40:a5:59:88:b2:de:2c:f7:64:6e:59:64:8a:8c:
8f:c6:cb:c3:ff:19:e0:81:96:18:dd:c8:6e:30:b1:
32:29:92:d2:d7:bd:c6:53:bd:9d:82:94:12:9a:e9:
67:d1:a6:45:ca:89:d4:5b:c7:28:d7:00:16:5f:33:
f1:8c:04:1f:78:42:22:f3:fa:cf:48:8c:07:1b:9f:
e7:a2:21:57:f7:70:76:80:48:b3:86:51:ca:24:98:
22:4c:29:96:62:a3:9a:04:74:ac:0e:b0:0b:f3:ec:
bd:88:01:c3:98:cd:3c:01:bc:46:fd:25:75:bf:a5:
3f:6a:47:20:d8:cc:16:10:eb:1e:57:13:87:ea:2c:
b1:59:20:b4:a6:92:f3:4e:76:b2:ed:b2:22:db:6f:
b2:2c:ee:ce:e5:a7:7d:d1:f9:4f:11:ee:f0:7f:de:
3a:b7:11:a2:96:9d:7c:d2:e4:e3:de:37:a0:9f:1a:
a2:56:3f:58:ac:81:af:ea:d2:14:1b:60:e9:ed:ff:
1a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:31:B8:F6:10:D8:A9:47:9F:F8:FC:74:F3:69:1C:56:76:62:5F:20
X509v3 Authority Key Identifier:
keyid:41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:02:d7:ed:d5:d2:11:a7:42:fc:d2:9b:89:fc:d0:4a:62:da:
41:c8:81:b6:df:c5:94:d4:ba:17:d5:e7:26:b4:3e:01:8a:28:
59:8b:0d:0f:61:e4:ea:e0:6e:49:a2:e9:6e:a6:f7:88:f4:e9:
e7:88:b8:76:e1:65:d1:f3:11:ad:67:97:49:9e:ac:36:cd:d2:
24:a7:77:b1:9d:97:5d:7a:bd:be:33:31:65:7a:d5:35:58:31:
63:b9:37:89:ae:1d:76:80:0a:18:4a:eb:6f:3b:51:d2:b4:52:
15:61:da:e5:3a:30:07:1b:2f:d6:86:70:28:60:e1:07:d4:c7:
19:be:ff:05:da:05:b8:1f:95:7a:ce:5a:0b:b4:a5:35:42:34:
3f:df:c9:36:68:49:94:0a:52:c8:0d:db:15:2b:f2:ec:50:00:
5f:18:ee:8f:7e:6f:76:29:85:8a:d1:de:c5:05:24:ee:cb:30:
8e:a6:70:30:94:33:68:b7:4b:32:9e:da:2c:87:1b:f1:78:f9:
b1:ad:f8:ae:d6:d0:58:36:3c:6c:79:d8:3a:17:ba:95:96:19:
fb:64:9e:cd:51:cf:66:6b:9f:df:ee:fd:42:e7:a3:17:f7:c1:
02:05:24:20:bb:d4:52:a0:c1:e3:85:aa:63:54:c2:80:31:af:
cd:14:7e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:28:09 2026 by rpki-client