This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft File: 1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft (raw, json) Hash identifier: xvwFJxSwKYOLf0KbMrOab1uhqZsuB0GFzhRDCOKtYpk= Subject key identifier: 3D:5C:8D:B9:F3:9E:2F:07:9D:E8:3F:9E:BC:AC:89:25:38:5A:E6:6E Authority key identifier: D5:08:7E:B7:1F:B8:12:F1:00:2F:F8:84:B2:F9:D5:6E:3B:DD:4C:F2 Certificate issuer: /CN=A91CB6E8/serialNumber=D5087EB71FB812F1002FF884B2F9D56E3BDD4CF2 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft Manifest number: 34 Signing time: Sun 25 Jan 2026 06:36:45 +0000 Manifest this update: Sun 25 Jan 2026 06:36:45 +0000 Manifest next update: Sun 01 Feb 2026 06:36:45 +0000 Files and hashes: 1: 1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl (hash: KOkIywd2Y0ZagFtTd02ZBKTitlA21Ok7lcLjz7SrIQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB6E8, serialNumber=D5087EB71FB812F1002FF884B2F9D56E3BDD4CF2 Validity Not Before: Jan 25 06:36:45 2026 GMT Not After : Feb 1 06:36:45 2026 GMT Subject: CN=6975b9fd-69a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:63:80:bd:e6:61:38:10:79:82:83:2d:90:da: b1:2d:3d:f2:94:d5:bf:b6:9c:72:da:fe:96:95:86: a9:25:50:eb:89:b8:a0:77:c6:18:06:48:d6:9d:56: c4:92:6c:40:0a:db:c4:4a:a6:50:62:db:e9:21:47: c0:a6:ba:d1:7c:4d:58:6f:1d:d8:d8:e6:03:ba:8d: 9a:30:63:54:7e:b5:23:e4:20:f1:a8:ee:8e:6d:11: ff:b6:0c:d1:29:35:db:9b:eb:c1:99:3f:ce:99:f2: e1:0f:09:5e:cf:a0:11:60:90:af:74:6f:8c:df:01: 3b:60:bc:31:ce:51:ce:68:5f:df:67:99:b7:4f:e0: 72:af:40:b9:03:02:5b:e6:03:55:d5:fe:17:8c:ac: 77:08:bc:e6:bb:2c:7c:c0:46:9e:da:90:be:06:ad: e2:6c:c8:51:1b:2a:f5:f4:e4:b0:ed:9e:21:db:19: 2e:0c:c3:c7:84:5f:1d:16:39:4c:4a:c6:34:9d:16: a2:70:de:ad:87:c0:00:e9:b3:64:94:44:79:1b:d5: 28:e1:9c:fb:0e:e4:be:56:55:0d:ed:ed:dd:ae:2b: 71:f5:ce:3d:83:5d:ff:5d:be:0a:c4:17:57:79:c6: 7b:17:04:9c:be:64:16:44:97:23:6a:ed:90:19:e5: 21:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5C:8D:B9:F3:9E:2F:07:9D:E8:3F:9E:BC:AC:89:25:38:5A:E6:6E X509v3 Authority Key Identifier: keyid:D5:08:7E:B7:1F:B8:12:F1:00:2F:F8:84:B2:F9:D5:6E:3B:DD:4C:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:57:17:cf:8b:6b:fe:9c:90:ff:bd:ff:51:d6:48:5e:83:0b: 4b:f8:f0:0a:8d:36:7a:ca:e2:a9:8a:85:af:28:f6:0b:74:a1: 9f:d1:d1:91:de:0b:6e:25:7a:f6:30:d8:af:f2:fc:87:a9:b8: 84:f3:eb:95:18:df:34:66:27:b3:52:51:7a:d9:3b:65:22:a8: b7:2d:f6:1a:1a:15:29:a0:0d:ba:60:4f:01:59:d0:93:c9:c9: 85:2d:e0:cf:7a:82:9c:df:be:1f:d6:31:08:a5:8f:e4:93:8b: b8:c4:34:60:93:e2:29:19:9e:5a:60:57:dc:2e:55:5c:8f:ec: 29:43:63:36:8a:2f:e9:32:31:fb:af:de:e0:7d:8d:ba:b3:bd: 12:79:41:e3:d0:35:95:54:76:87:70:e0:96:af:6e:5c:f1:3f: bb:61:18:ef:01:eb:10:f6:55:49:6e:6d:d1:37:ba:0f:d8:fc: 75:f5:ec:77:08:c4:ab:d1:8f:24:27:b9:69:16:2b:a7:79:23: 5e:b2:2d:e4:a4:f7:32:cc:ab:91:b3:05:07:eb:87:51:77:75: ce:b3:29:db:e2:70:cb:70:3b:fb:46:6a:f1:0c:92:86:38:ed: 24:3d:a7:83:90:81:1a:30:ba:02:63:e6:31:c3:76:5d:7b:7a: 3a:d7:3a:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjZFODExMC8GA1UEBRMoRDUwODdFQjcxRkI4MTJGMTAwMkZGODg0QjJGOUQ1NkUz QkRENENGMjAeFw0yNjAxMjUwNjM2NDVaFw0yNjAyMDEwNjM2NDVaMBgxFjAUBgNV BAMMDTY5NzViOWZkLTY5YTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/Y4C95mE4EHmCgy2Q2rEtPfKU1b+2nHLa/paVhqklUOuJuKB3xhgGSNadVsSS bEAK28RKplBi2+khR8CmutF8TVhvHdjY5gO6jZowY1R+tSPkIPGo7o5tEf+2DNEp Ndub68GZP86Z8uEPCV7PoBFgkK90b4zfATtgvDHOUc5oX99nmbdP4HKvQLkDAlvm A1XV/heMrHcIvOa7LHzARp7akL4GreJsyFEbKvX05LDtniHbGS4Mw8eEXx0WOUxK xjSdFqJw3q2HwADps2SURHkb1SjhnPsO5L5WVQ3t7d2uK3H1zj2DXf9dvgrEF1d5 xnsXBJy+ZBZElyNq7ZAZ5SETAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPVyNufOe Lwed6D+evKyJJTha5m4wHwYDVR0jBBgwFoAU1Qh+tx+4EvEAL/iEsvnVbjvdTPIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCNkU4LzMyRTM0REVFQUUy QjExRjA5OEVBMkU4NUM0RjlBRTAyLzFRaC10eC00RXZFQUxfaUVzdm5WYmp2ZFRQ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMVFoLXR4LTRFdkVBTF9pRXN2blZianZkVFBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC NkU4LzMyRTM0REVFQUUyQjExRjA5OEVBMkU4NUM0RjlBRTAyLzFRaC10eC00RXZF QUxfaUVzdm5WYmp2ZFRQSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACZXF8+La/6ckP+9/1HWSF6DC0v48AqNNnrK4qmKha8o9gt0oZ/R0ZHe C24levYw2K/y/IepuITz65UY3zRmJ7NSUXrZO2UiqLct9hoaFSmgDbpgTwFZ0JPJ yYUt4M96gpzfvh/WMQilj+STi7jENGCT4ikZnlpgV9wuVVyP7ClDYzaKL+kyMfuv 3uB9jbqzvRJ5QePQNZVUdodw4JavblzxP7thGO8B6xD2VUlubdE3ug/Y/HX17HcI xKvRjyQnuWkWK6d5I16yLeSk9zLMq5GzBQfrh1F3dc6zKdvicMtwO/tGavEMkoY4 7SQ9p4OQgRowugJj5jHDdl17ejrXOps= -----END CERTIFICATE-----Generated at Sun Jan 25 09:36:27 2026 by rpki-client