This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft File: Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft (raw, json) Hash identifier: uaj1TJL4G5LhtNjp8bz9axwUh7Nge+SwcMelskxIax4= Subject key identifier: 32:AF:18:9E:53:48:39:55:54:9B:D4:0D:81:EF:0D:C1:D0:5A:33:DA Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Certificate serial: 0671 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft Manifest number: 0657 Signing time: Sat 24 Jan 2026 21:57:49 +0000 Manifest this update: Sat 24 Jan 2026 21:57:49 +0000 Manifest next update: Sat 31 Jan 2026 21:57:49 +0000 Files and hashes: 1: Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl (hash: 6+2zHa55a6iEK5UQIYtFK7xNxynZclkiIRPF906l2mg=) 2: 87BF5BF6BD3411EB99D25F26C4F9AE02.roa (hash: FrN9o1lFg/xEbU5z0+woTSKpRYhEXE4ng2cT+urUy+w=) 3: 49FAAD72591211EDA743880DC4F9AE02.roa (hash: p2SDVbwBZwxr3yJ4yGh7aCxA4CeficP3aVklyI/yKDc=) 4: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (hash: WL1wjvavlZNBJVifGm25dsfKzlKEpfNQuM2fEKaPYkY=) 5: 0E0DBEA4327411ED80554E32C4F9AE02.roa (hash: LIJfkhB+FEnFSom6qGXtkQF2GYNSzLyM4CrNqHpDKAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 21:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1649 (0x671) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Validity Not Before: Jan 24 21:57:49 2026 GMT Not After : Jan 31 21:57:49 2026 GMT Subject: CN=6975405d-ade9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0c:66:13:d4:77:93:d2:86:bb:64:23:dd:9f: 80:79:88:a4:c1:9f:5b:d2:ba:01:0b:16:7b:ee:03: d2:32:3c:f8:b0:0e:01:22:38:3b:a9:ba:5e:01:9e: 05:a2:0d:d6:7f:33:ce:ad:bb:80:f6:87:3a:5c:c1: 29:9b:01:d1:e2:1d:40:a3:d3:8f:07:18:5e:fe:41: 2d:dd:3c:7f:76:57:1a:94:2a:a1:a2:11:c3:cc:b6: 15:5e:5c:49:cc:bf:c4:b0:42:ca:fb:dd:18:02:a4: 6c:4f:5e:02:56:73:ee:0a:fd:30:70:af:27:6a:fd: 67:09:89:02:2f:eb:d9:24:03:45:8c:97:04:6f:cc: 79:8a:b1:f9:ed:86:d2:fb:e7:b4:d8:c6:50:12:c2: cf:9f:18:1c:80:47:0a:6f:db:4b:17:79:78:21:76: 6c:fd:f2:20:2b:a5:37:df:1f:19:2d:dc:4a:b7:4f: 28:1d:05:cb:f7:61:3c:ab:07:cf:d3:c8:58:7c:db: d1:b3:36:70:e7:c9:ed:9f:da:8e:ae:92:ca:60:c5: e7:0e:76:2d:54:48:9d:9e:9b:4f:f1:ca:c6:56:a0: 59:81:cd:ee:38:ee:49:07:f4:9b:e6:59:03:d1:2b: 41:dd:5c:6d:08:3b:ac:2e:62:09:74:42:e9:5e:c9: ab:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AF:18:9E:53:48:39:55:54:9B:D4:0D:81:EF:0D:C1:D0:5A:33:DA X509v3 Authority Key Identifier: keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:40:4b:2e:1c:bf:d2:2a:31:42:ff:2a:32:f0:a4:a6:d1:ed: 14:61:35:44:a1:64:c0:7e:66:63:da:89:b3:fd:d2:bc:4f:c5: af:ea:2e:7b:54:b1:d9:dd:31:18:d0:86:42:ea:9a:90:d0:b9: 16:cf:a5:14:cc:f7:76:e8:59:2e:41:27:2e:73:cb:c2:cd:ec: 51:03:86:d5:63:dc:94:ad:b9:58:90:16:88:0a:cb:0f:f0:d2: fb:45:01:f8:2e:48:8d:2f:01:cf:12:09:4e:52:9f:7d:23:a0: a1:cd:1f:da:1f:d2:7e:fd:5b:5b:9e:a8:66:74:28:5f:63:d1: 75:76:0a:e3:98:db:a8:6e:f9:98:31:81:a1:98:17:e7:66:7d: 51:47:00:c9:85:a1:7c:e2:64:c8:cd:9b:c7:e4:29:1f:fb:ab: 15:1e:dd:e4:90:af:74:62:9f:31:0d:f2:f0:80:d7:94:f8:26: e2:57:ab:43:df:f9:68:a9:d9:98:a8:b0:f0:23:bf:f8:47:0c: d4:96:b4:35:2f:e9:67:8f:ff:76:17:d7:a8:2b:b8:b0:c8:c1: 08:54:5e:81:48:19:46:de:66:4b:be:28:62:cb:2d:51:ba:53: c9:f5:e9:51:65:27:50:c5:61:bf:12:d9:da:0f:7a:cc:b4:d1: 12:e6:01:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUxNDYxMTAvBgNVBAUTKDQzRUEzQTJEQzA4QzVFMUYyQ0Q2ODQxMTY0NEEwNUMw NzZFODhDMDgwHhcNMjYwMTI0MjE1NzQ5WhcNMjYwMTMxMjE1NzQ5WjAYMRYwFAYD VQQDDA02OTc1NDA1ZC1hZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQxmE9R3k9KGu2Qj3Z+AeYikwZ9b0roBCxZ77gPSMjz4sA4BIjg7qbpeAZ4F og3WfzPOrbuA9oc6XMEpmwHR4h1Ao9OPBxhe/kEt3Tx/dlcalCqhohHDzLYVXlxJ zL/EsELK+90YAqRsT14CVnPuCv0wcK8nav1nCYkCL+vZJANFjJcEb8x5irH57YbS ++e02MZQEsLPnxgcgEcKb9tLF3l4IXZs/fIgK6U33x8ZLdxKt08oHQXL92E8qwfP 08hYfNvRszZw58ntn9qOrpLKYMXnDnYtVEidnptP8crGVqBZgc3uOO5JB/Sb5lkD 0StB3VxtCDusLmIJdELpXsmrXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKvGJ5T SDlVVJvUDYHvDcHQWjPaMB8GA1UdIwQYMBaAFEPqOi3AjF4fLNaEEWRKBcB26IwI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTE0Ni9FNDFBQjQyQUJE MzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVhoOHMxb1FSWkVvRndIYm9q QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtbzZMY0NNWGg4czFvUVJaRW9Gd0hib2pBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTE0Ni9FNDFBQjQyQUJEMzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVho OHMxb1FSWkVvRndIYm9qQWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqQEsuHL/SKjFC/yoy8KSm0e0UYTVEoWTAfmZj2omz/dK8T8Wv6i57 VLHZ3TEY0IZC6pqQ0LkWz6UUzPd26FkuQScuc8vCzexRA4bVY9yUrblYkBaICssP 8NL7RQH4LkiNLwHPEglOUp99I6ChzR/aH9J+/VtbnqhmdChfY9F1dgrjmNuobvmY MYGhmBfnZn1RRwDJhaF84mTIzZvH5Ckf+6sVHt3kkK90Yp8xDfLwgNeU+CbiV6tD 3/loqdmYqLDwI7/4RwzUlrQ1L+lnj/92F9eoK7iwyMEIVF6BSBlG3mZLvihiyy1R ulPJ9elRZSdQxWG/EtnaD3rMtNES5gGd -----END CERTIFICATE-----Generated at Mon Jan 26 06:08:26 2026 by rpki-client