This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
File: q2JivH0C7BrUi3HamLc9IqNi2vA.mft (raw, json)
Hash identifier: Mrh4k6O25Z61rofeS2N1A9BZzF87RzZ78IaQHEPMtYA=
Subject key identifier: 6F:AB:FF:0F:1A:44:5E:63:F6:C8:70:2E:DB:94:8E:1E:9D:82:C1:C7
Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Certificate serial: 3683
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
Manifest number: 35AB
Signing time: Sat 24 Jan 2026 14:27:49 +0000
Manifest this update: Sat 24 Jan 2026 14:27:49 +0000
Manifest next update: Sat 31 Jan 2026 14:27:49 +0000
Files and hashes: 1: q2JivH0C7BrUi3HamLc9IqNi2vA.crl (hash: w7rPtT6WFoUwaBkZksoJJ8kfeuRPMgADXPmdXpatuOM=)
2: 7B938024B0CD11E58B55FC73C4F9AE02.roa (hash: 1K5D/YGkb4vaB5fYueEaz915gxnQJAISZWApLFWpf04=)
3: F1F087928C6B11F0B1A50E82C4F9AE02.roa (hash: sAQbMZEcMczj5RHqmOv2OaiDpZIXaUFx3oE34rVPeYo=)
4: 4C9925F2A4C911E782854F50C4F9AE02.roa (hash: rKeTKoMj7TYIpspiwdUo3fnXHo6IEREq4lIaF9E8hIA=)
5: 4D5247EEA4C911E782854F50C4F9AE02.roa (hash: Q4QnXloRUzx2A7Tu4hex2E+VF8wZbHiTAEA4RdwhS1w=)
6: 9C193BAC08C511EDBC862E48C4F9AE02.roa (hash: duKdaSAy3lZyijWEMsDKsNMUdFH6paWRdLfwaKH4jqk=)
7: 8207CCA0906C11EC86E8B711C4F9AE02.roa (hash: 9mT7qPe0jtXzHyfYPGvCu4areC+be6JvN+bMcwo+UAE=)
8: 4BF67550A4C911E782854F50C4F9AE02.roa (hash: 9sCJlpZ+MZm9Y8fMj5geVr74KyJJassWJH9YXhrkVAQ=)
9: 7F4D30ACB0CD11E58B55FC73C4F9AE02.roa (hash: 4X/9XTCj8Tn5wmoatIqa/M1mn+d3I1LzqCMAdWjEEKo=)
10: 7D920C1AB0CD11E58B55FC73C4F9AE02.roa (hash: qDmF4kH3QlbY4Zqg12dB1C1trP96qj3Fl98NZEEVYjQ=)
11: D4B25B928C6B11F09545B981C4F9AE02.roa (hash: NcbrIjjwUgYHdCTODgZkq15jqvFAdToiBXgMc60L8i0=)
12: 78123422B0CD11E58B55FC73C4F9AE02.roa (hash: mNtwPjnCIz/fPyYT4pHp2y4OsV0nrnCLOsALXcX5nBI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13955 (0x3683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Validity
Not Before: Jan 24 14:27:49 2026 GMT
Not After : Jan 31 14:27:49 2026 GMT
Subject: CN=6974d6e5-c1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:85:40:4f:dc:cd:3a:13:52:9d:2b:0d:d8:
fa:af:84:04:cd:ed:e4:f8:c4:85:e2:c8:25:d3:e4:
cf:02:32:aa:41:c7:50:3e:86:7a:0d:3f:54:40:42:
5e:72:b5:f4:a3:66:df:f5:5e:a4:d1:0b:22:1c:a0:
2a:cb:4d:42:c5:92:d9:7f:34:98:dd:9e:0b:bd:69:
03:cd:88:9b:6d:a3:2b:f6:37:42:c5:53:d6:e9:70:
a5:fd:70:4d:89:4f:44:9c:9b:92:0d:4b:3e:00:6d:
f6:f2:44:23:56:c4:40:f0:41:b4:87:1f:17:b9:8e:
ea:fc:56:96:37:90:ae:0e:70:44:4b:ec:4f:2d:86:
58:31:1a:5d:73:b4:26:f6:8d:d8:dd:3b:03:b7:d4:
59:02:13:35:1c:63:d5:aa:40:2e:91:7c:ad:56:dd:
08:71:cd:c8:a2:d5:8f:6a:8d:d8:3f:48:fc:2a:af:
4d:28:c7:23:85:2a:12:72:74:0a:54:87:60:8d:cd:
d3:7a:a9:e1:56:38:98:cf:5e:18:0a:cd:4d:0e:9a:
0c:b3:5a:c1:99:8f:71:72:75:cb:d5:85:86:73:1f:
bd:ac:9c:ff:6e:3a:19:0b:9b:e9:48:95:6e:db:a4:
40:ad:7e:91:a1:62:62:9b:66:1a:09:e4:ab:ae:52:
4e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AB:FF:0F:1A:44:5E:63:F6:C8:70:2E:DB:94:8E:1E:9D:82:C1:C7
X509v3 Authority Key Identifier:
keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9c:3e:50:77:6c:b6:9d:66:f3:39:06:cf:1e:99:9f:cb:df:
68:e3:30:cf:e3:73:73:63:11:99:05:80:ac:4e:a2:f1:88:a8:
97:53:39:36:0f:68:a9:cd:85:fa:d3:09:c6:dc:65:19:83:5f:
21:bb:e8:7d:a1:60:d3:3b:22:8f:c5:3a:e5:cb:82:d6:b1:24:
c9:af:5a:70:20:fb:a3:d2:b6:dc:c8:47:f0:49:bf:c7:70:c7:
5b:30:50:89:e2:4b:7d:57:5c:f1:6a:68:ff:c2:69:f9:9a:f3:
a6:7f:6a:65:38:17:52:65:83:4e:73:36:dc:d7:f8:5a:40:f1:
61:e1:0b:4c:4c:9e:cf:e3:42:c3:f4:39:1c:f4:f3:84:13:c2:
16:ba:ca:88:d8:33:05:ba:7c:55:63:05:a9:e5:c6:6e:3a:28:
80:90:e5:15:47:65:6f:d0:b2:a6:76:89:6a:bd:7e:29:e2:35:
47:73:53:19:6e:be:84:27:11:20:97:c0:c0:16:a4:b2:d5:90:
93:34:da:6e:4c:af:e1:f2:a8:a0:ed:c8:b2:8f:fc:76:c5:c0:
75:eb:ba:09:7b:92:4d:a9:2a:1a:44:8c:ee:66:8d:f2:b5:bc:
79:77:60:55:8a:16:bc:9a:2a:8f:fc:ed:5d:d2:41:65:5e:77:
77:b5:31:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:40:13 2026 by rpki-client