This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft
File: qVBr_Nym0SxcNyUDFHD30eBncFI.mft (raw, json)
Hash identifier: CRxResSmVkYYGE4HMmmbMOsN3ZkNg+B5Ae1JsQyLDvQ=
Subject key identifier: 2F:93:DA:A7:DE:C4:8B:E4:2A:0A:FE:85:B4:95:17:77:50:38:94:1F
Authority key identifier: A9:50:6B:FC:DC:A6:D1:2C:5C:37:25:03:14:70:F7:D1:E0:67:70:52
Certificate issuer: /CN=A91C5ED0/serialNumber=A9506BFCDCA6D12C5C3725031470F7D1E0677052
Certificate serial: 13FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft
Manifest number: 2B23
Signing time: Sat 24 Jan 2026 16:39:29 +0000
Manifest this update: Sat 24 Jan 2026 16:39:29 +0000
Manifest next update: Sat 31 Jan 2026 16:39:29 +0000
Files and hashes: 1: qVBr_Nym0SxcNyUDFHD30eBncFI.crl (hash: 0gDvTsxMejTN7+1Kgtbg8sBhtE4bKZTlU/9hgwpms0I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.crl
rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5114 (0x13fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5ED0, serialNumber=A9506BFCDCA6D12C5C3725031470F7D1E0677052
Validity
Not Before: Jan 24 16:39:29 2026 GMT
Not After : Jan 31 16:39:29 2026 GMT
Subject: CN=6974f5c1-6078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:52:d1:53:10:43:a1:b5:c6:f0:59:78:15:
80:18:a0:0d:7e:c5:fb:04:2e:5b:a8:68:a5:25:48:
de:9c:d7:74:ac:b9:18:c3:e9:a8:1a:a7:65:a6:6c:
7b:76:27:84:a3:8e:18:e5:a2:a2:e2:70:fd:d6:da:
09:39:59:e0:69:2f:94:03:00:5a:21:2c:35:c4:c5:
0a:e8:65:c7:a0:e6:a6:36:61:95:42:15:39:75:c9:
55:3c:9b:40:54:de:b7:48:10:25:b3:33:b8:aa:65:
3a:24:6b:14:4f:b1:7a:f5:81:d1:2c:2e:d3:8a:39:
b8:44:db:1b:43:4d:a7:28:38:f4:08:bc:4a:f0:09:
87:4d:e3:05:13:29:81:4c:d1:24:ad:e6:98:12:f6:
5d:d3:a8:99:3a:59:2f:66:6a:f2:bf:3e:db:2f:c3:
ea:4b:29:f5:bd:b4:3d:72:73:3e:60:78:72:ed:a5:
48:31:c1:0e:90:0e:b0:98:be:01:86:4c:01:ab:66:
bf:01:6e:94:f0:b9:d5:b4:0d:d1:54:22:0d:31:cc:
d2:12:a9:cb:4f:43:1d:96:ce:9f:11:f7:b4:37:4d:
d2:67:5e:a4:a9:ed:f2:d9:b7:78:2d:8e:31:cb:c4:
ca:fd:2e:43:fb:90:51:53:01:3d:6b:14:44:10:65:
02:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:93:DA:A7:DE:C4:8B:E4:2A:0A:FE:85:B4:95:17:77:50:38:94:1F
X509v3 Authority Key Identifier:
keyid:A9:50:6B:FC:DC:A6:D1:2C:5C:37:25:03:14:70:F7:D1:E0:67:70:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:83:18:fa:08:63:b3:8d:f3:09:8c:fe:2d:79:cc:c6:78:c0:
5a:95:7f:45:2d:23:27:7c:ee:04:8c:37:ef:df:df:4c:16:de:
d3:91:73:02:f8:80:fd:bd:67:9b:62:d1:6b:18:ef:fd:ba:8c:
62:f9:8e:78:47:a4:e2:39:c5:0e:3e:26:03:4b:04:36:bf:16:
88:f2:3a:fe:de:0d:35:ae:77:70:d1:7d:c5:6c:1a:05:b2:11:
42:14:82:e3:b1:32:07:cf:e5:a9:c5:08:da:f9:8f:49:3e:23:
e9:52:36:d1:1c:e9:cd:22:27:dc:9d:4b:77:75:fb:8c:76:e8:
b6:b6:22:44:78:16:69:46:ce:be:7a:62:d5:cf:1e:6d:e5:93:
b3:6a:6a:b8:f8:19:d6:20:2a:c0:70:6a:fa:9d:99:1e:66:68:
33:cb:f7:9a:5d:9d:14:4b:75:1a:84:2b:87:f3:c3:89:53:a2:
f7:81:a1:ba:f8:63:25:ad:60:92:64:51:e9:0e:6b:93:9a:b0:
85:9c:64:3d:22:f7:5b:91:df:65:e5:5a:d0:2b:67:65:ed:9a:
97:97:68:e5:26:7e:0f:1f:6f:ff:b7:57:87:76:3b:94:57:c9:
c4:2d:33:83:73:94:7a:03:17:52:bd:ab:21:36:e4:70:cb:45:
03:2f:42:b7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICE/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzVFRDAxMTAvBgNVBAUTKEE5NTA2QkZDRENBNkQxMkM1QzM3MjUwMzE0NzBGN0Qx
RTA2NzcwNTIwHhcNMjYwMTI0MTYzOTI5WhcNMjYwMTMxMTYzOTI5WjAYMRYwFAYD
VQQDDA02OTc0ZjVjMS02MDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvcNS0VMQQ6G1xvBZeBWAGKANfsX7BC5bqGilJUjenNd0rLkYw+moGqdlpmx7
dieEo44Y5aKi4nD91toJOVngaS+UAwBaISw1xMUK6GXHoOamNmGVQhU5dclVPJtA
VN63SBAlszO4qmU6JGsUT7F69YHRLC7Tijm4RNsbQ02nKDj0CLxK8AmHTeMFEymB
TNEkreaYEvZd06iZOlkvZmryvz7bL8PqSyn1vbQ9cnM+YHhy7aVIMcEOkA6wmL4B
hkwBq2a/AW6U8LnVtA3RVCINMczSEqnLT0Mdls6fEfe0N03SZ16kqe3y2bd4LY4x
y8TK/S5D+5BRUwE9axREEGUCYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+T2qfe
xIvkKgr+hbSVF3dQOJQfMB8GA1UdIwQYMBaAFKlQa/zcptEsXDclAxRw99HgZ3BS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5
NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9xVkJyX055bTBTeGNOeVVERkhEMzBlQm5j
RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FWQnJfTnltMFN4Y055VURGSEQzMGVCbmNGSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9xVkJyX055bTBT
eGNOeVVERkhEMzBlQm5jRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAHgxj6CGOzjfMJjP4teczGeMBalX9FLSMnfO4EjDfv399MFt7TkXMC
+ID9vWebYtFrGO/9uoxi+Y54R6TiOcUOPiYDSwQ2vxaI8jr+3g01rndw0X3FbBoF
shFCFILjsTIHz+WpxQja+Y9JPiPpUjbRHOnNIifcnUt3dfuMdui2tiJEeBZpRs6+
emLVzx5t5ZOzamq4+BnWICrAcGr6nZkeZmgzy/eaXZ0US3UahCuH88OJU6L3gaG6
+GMlrWCSZFHpDmuTmrCFnGQ9Ivdbkd9l5VrQK2dl7ZqXl2jlJn4PH2//t1eHdjuU
V8nELTODc5R6AxdSvashNuRwy0UDL0K3
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:50 2026 by rpki-client