This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft
File: Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft (raw, json)
Hash identifier: rxb0TUaPwZM0DEQUx5B1MHVmII/+5+Ve195DI4IZZTA=
Subject key identifier: D6:D7:1F:90:E7:7E:C9:9A:2E:11:91:67:A1:EF:D8:FE:8E:6C:4F:4C
Authority key identifier: 43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53
Certificate issuer: /CN=A91DF1D9/serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653
Certificate serial: 053D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft
Manifest number: 0537
Signing time: Sat 24 Jan 2026 22:42:47 +0000
Manifest this update: Sat 24 Jan 2026 22:42:46 +0000
Manifest next update: Sat 31 Jan 2026 22:42:46 +0000
Files and hashes: 1: Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl (hash: BqqW46uNttcZvcGLLqnS4X2M6WItim/EUnqXtiCfbZk=)
2: 083000C22A6F11EC9AD38840C4F9AE02.roa (hash: /P52dIbBCuZBok0CgnukmD2RJdXy7244gcQDCyE7vYQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl
rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1341 (0x53d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF1D9, serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653
Validity
Not Before: Jan 24 22:42:46 2026 GMT
Not After : Jan 31 22:42:46 2026 GMT
Subject: CN=69754ae6-c81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:1e:2c:7c:2a:5c:63:a5:89:ed:91:86:9f:
db:5b:45:30:83:89:e0:50:8b:83:45:96:e7:4c:1a:
a1:e9:fb:bf:47:a9:31:38:ad:d8:56:e7:94:0b:d4:
1f:b3:02:3b:99:c7:94:22:54:70:c1:64:69:40:fc:
29:07:74:03:56:92:c2:1f:75:9c:88:51:10:6d:29:
c0:e1:45:ef:99:b1:95:63:da:19:f4:7f:c8:98:9d:
74:49:7c:a2:50:c8:20:66:21:6d:3e:7d:c6:9f:75:
a9:df:3b:e5:23:4c:6b:9c:0a:d8:ee:a2:80:88:78:
7d:1c:02:60:09:44:14:75:a0:30:a5:24:10:33:8e:
24:29:fe:53:35:ad:65:2a:7d:6d:fa:0c:7d:88:51:
0e:22:15:53:b4:68:98:c2:82:91:a4:70:63:41:86:
ed:89:88:98:d4:93:11:26:8d:ba:f7:c1:93:dd:0e:
b6:c4:ae:94:a2:45:c0:ee:3d:93:3e:e3:be:8e:a0:
6f:83:c2:36:50:04:f3:da:f6:77:46:06:74:56:32:
8b:08:6e:50:82:e9:21:8f:95:c4:ff:c7:45:68:08:
82:aa:25:8a:cc:e4:b2:ef:39:48:05:8c:b8:fa:b8:
d8:9b:89:ab:8b:54:87:a9:c7:31:7c:80:59:5c:08:
1e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D7:1F:90:E7:7E:C9:9A:2E:11:91:67:A1:EF:D8:FE:8E:6C:4F:4C
X509v3 Authority Key Identifier:
keyid:43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:2d:f3:12:a6:24:7d:90:6d:1f:91:a0:e7:5c:68:ed:cb:e8:
fc:e4:15:2a:81:67:46:97:a0:f5:dc:e7:36:f9:b0:8f:d3:6f:
df:ca:46:bc:ae:a3:63:6c:e5:71:b4:b2:53:c7:53:cb:e3:c4:
d4:c6:16:26:98:98:a6:8d:f9:ba:1e:5c:22:a7:30:e4:96:22:
3c:0a:91:e9:74:b2:f2:17:90:01:93:27:f4:8c:aa:a3:c8:f2:
c4:9e:be:23:0e:18:95:5b:32:7b:40:35:dc:6f:8f:bc:b3:3b:
34:02:30:4e:08:c1:32:5a:e5:6a:b3:c4:4e:b1:ee:76:ae:cd:
08:0e:40:6e:24:68:78:ab:f9:e8:e9:78:2a:88:63:4a:55:5d:
25:ae:9c:dd:70:a1:88:78:82:f3:9a:d0:3d:17:41:1b:e5:ee:
92:dc:7b:f2:8a:c9:9e:71:2d:e1:4b:67:67:26:1c:d8:06:ea:
07:1a:e8:27:ab:a0:57:bf:29:17:2d:92:32:fe:83:fb:3d:aa:
b2:0e:63:22:67:81:ef:5d:d4:ce:8f:fd:f9:17:cb:39:a0:d4:
6f:12:64:60:6f:27:f1:d6:87:4f:19:22:75:62:62:88:ae:94:
00:e1:22:19:f7:50:5c:21:fb:41:46:83:39:73:ec:4a:a9:68:
15:b8:5b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:21:05 2026 by rpki-client