This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
File: qrDiti9jQ4lXMMBUiOf8TibFGmw.mft (raw, json)
Hash identifier: ZW/C6d7QVzRqKqea3pCSUNMR6Twpep0CiaqTJqsVs+k=
Subject key identifier: 54:7E:04:CE:FB:1E:D2:4D:F7:43:19:95:A8:B2:DA:AE:55:32:1C:45
Authority key identifier: AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C
Certificate issuer: /CN=A91DCAE8/serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
Certificate serial: 356C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
Manifest number: 3540
Signing time: Sat 24 Jan 2026 14:42:33 +0000
Manifest this update: Sat 24 Jan 2026 14:42:32 +0000
Manifest next update: Sat 31 Jan 2026 14:42:32 +0000
Files and hashes: 1: qrDiti9jQ4lXMMBUiOf8TibFGmw.crl (hash: S4CtUw01bR+jNijkAWGFGCU76w2O7tx8OMoJCh7lFQg=)
2: 006CE5442FBA11ECA05BB46EC4F9AE02.roa (hash: IJhdmy/yaxT+3c7CLBVZdDHqC15tF8wOYJzJ42dHOw4=)
3: 2D89110A9A5311EE9CB13140C4F9AE02.roa (hash: Jj1NVOgg11V9rBHXb/ngLI6yeEIfUQhi8bFPhl/4/hg=)
4: 56F533B4A63011EEA6054D52C4F9AE02.roa (hash: o9KJ5VBvsGr89sjQLF50nP6E17Mg3I1scYJNnsN7baE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl
rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:42:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13676 (0x356c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCAE8, serialNumber=AAB0E2B62F6343895730C05488E7FC4E26C51A6C
Validity
Not Before: Jan 24 14:42:32 2026 GMT
Not After : Jan 31 14:42:32 2026 GMT
Subject: CN=6974da58-63db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:59:1f:c4:02:f2:52:17:c7:85:7e:42:19:3c:
f8:c9:28:57:a7:a0:f8:8e:ba:ce:d9:af:dd:9f:78:
ad:ec:5f:93:53:8c:97:89:0e:07:31:05:8a:c4:d8:
0c:b1:de:76:b8:4d:b4:63:da:50:9e:1d:ec:08:07:
fb:6c:d1:0c:ee:a9:4e:01:38:1a:93:11:1b:0a:91:
32:3c:46:17:c9:f0:bc:7f:be:dd:b5:08:fe:e3:dd:
54:83:aa:5d:27:9a:01:f7:e4:65:8c:4e:eb:c6:92:
a4:da:ba:95:c1:94:e1:80:1b:94:33:c5:a6:4a:09:
e9:41:93:36:fe:0c:91:64:84:25:c5:7f:a6:6a:c7:
48:49:32:4a:4a:2e:29:14:0c:e4:d1:e2:82:05:d6:
6a:16:ec:ef:5f:66:96:f2:ce:16:9f:ea:32:1b:b4:
f7:66:44:21:fe:93:a5:70:83:9e:6e:5c:5d:74:75:
0c:c1:c8:05:30:f7:e1:c4:8d:f8:2d:35:bd:95:99:
a6:0c:d5:42:9a:f0:67:6b:f7:7d:35:da:97:ab:e7:
e7:b0:f8:50:1d:59:8e:f2:1d:62:79:55:81:45:0b:
e6:b2:21:74:da:c5:21:2b:9d:c0:9e:fd:0b:60:55:
4c:07:5b:2a:42:1b:9b:76:bc:dd:b5:66:f8:7c:08:
a0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7E:04:CE:FB:1E:D2:4D:F7:43:19:95:A8:B2:DA:AE:55:32:1C:45
X509v3 Authority Key Identifier:
keyid:AA:B0:E2:B6:2F:63:43:89:57:30:C0:54:88:E7:FC:4E:26:C5:1A:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrDiti9jQ4lXMMBUiOf8TibFGmw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/8B6ADE141D9311E292CB23F708B02CD2/qrDiti9jQ4lXMMBUiOf8TibFGmw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:c3:90:a0:3b:fb:18:00:ea:70:8f:b7:ca:51:06:41:a7:0f:
20:ab:f0:75:46:fe:9e:80:39:bd:54:82:45:c5:9b:f9:1f:04:
7a:0e:15:da:e6:32:84:90:69:08:84:e4:dc:64:93:0e:c9:29:
4a:e6:36:43:dc:64:9d:02:c6:65:28:43:56:a2:c8:a7:22:1b:
8d:ac:c1:a3:9a:58:0b:94:d8:a4:86:87:dc:f7:1d:31:bb:29:
86:ce:fb:68:b2:c4:d6:81:ba:51:b9:87:95:62:bb:b4:af:70:
ef:dd:20:81:3c:be:73:79:fc:28:e7:64:08:40:74:ad:67:62:
96:b9:26:21:fc:63:8e:44:ad:1b:0b:12:94:8e:b7:ca:2b:df:
a5:d7:a5:55:42:d9:e1:7a:37:3a:a9:d6:1e:0f:4b:09:53:1b:
3b:a1:05:a5:44:9e:d6:e9:6d:94:e8:a2:ce:84:53:cb:00:64:
cf:a7:b7:2b:18:41:60:b4:73:72:f2:43:eb:86:42:f6:68:be:
dc:a3:32:cc:e8:d4:ab:fd:8b:c1:86:94:8c:3b:2f:ce:44:42:
60:a0:d2:1e:65:49:12:10:84:00:36:dc:88:8e:17:6e:c8:a6:
d0:27:49:94:dd:3b:8b:cd:77:38:ff:9c:be:a7:2f:f8:4f:8d:
1a:f9:68:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:12:11 2026 by rpki-client