This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft
File: PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft (raw, json)
Hash identifier: YbEPaSreb1EvxZPP8srARCJyQoIXkkOpOFIyW+tKk88=
Subject key identifier: 98:F4:E7:1E:9D:53:0E:CE:EB:E9:12:B3:C1:B8:38:6F:DD:89:FA:59
Authority key identifier: 3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6
Certificate issuer: /CN=A91E4668/serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6
Certificate serial: 0EFB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft
Manifest number: 0EEF
Signing time: Sat 24 Jan 2026 17:18:16 +0000
Manifest this update: Sat 24 Jan 2026 17:18:16 +0000
Manifest next update: Sat 31 Jan 2026 17:18:16 +0000
Files and hashes: 1: PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl (hash: ma/ry8Lc5xsqLWQYOkTrxD6QHOGJkMVJA6YJsXNnn8Y=)
2: A5B7D874091F11EFA6EDE141C4F9AE02.roa (hash: vN4eTkgE+NqzrGCF55MmLQiQ1U4uCoJcvi6VZO9X/KY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl
rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:18:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3835 (0xefb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4668, serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6
Validity
Not Before: Jan 24 17:18:16 2026 GMT
Not After : Jan 31 17:18:16 2026 GMT
Subject: CN=6974fed8-2262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:54:ce:b8:00:1d:9a:bb:c9:d8:c6:87:24:fb:
0f:c1:cd:3c:ae:24:9e:19:4a:71:3a:fc:75:3c:0c:
d7:fb:0a:03:8c:89:b0:c0:72:43:3f:61:ea:8a:bd:
b5:81:69:43:60:c4:ad:20:71:ae:eb:f5:a9:8f:bc:
10:e6:63:c7:3b:52:78:16:e1:21:46:b0:3b:e7:4f:
2f:75:4e:1a:a8:7e:47:4b:92:fc:62:9e:18:74:cb:
be:b9:2e:88:d8:f9:68:59:c5:2e:62:7c:54:53:8e:
2f:c5:d2:b9:ec:d1:95:8c:c2:d5:df:89:f1:9c:86:
c9:dd:e9:6c:8a:1e:88:c1:86:44:c0:40:44:6d:56:
89:20:fe:ac:58:3f:db:b6:f6:68:fb:3f:45:e2:86:
ab:37:69:f5:f4:b0:49:71:84:f4:b7:45:c0:c2:8e:
21:5b:f5:96:f9:0c:c0:b5:fe:9b:3d:b5:17:53:d1:
01:2f:60:32:c0:b7:98:75:37:8b:2a:f8:25:a4:5a:
d0:3e:35:6e:87:03:b7:8c:81:35:d7:c5:54:9b:a3:
7b:43:e8:65:75:0e:c3:1a:c6:85:b8:31:64:ac:65:
26:d9:7a:32:9d:ed:cc:af:14:ef:8a:aa:31:f9:4f:
27:fd:e9:7c:f7:de:c5:9c:16:47:f3:bf:1a:62:70:
df:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F4:E7:1E:9D:53:0E:CE:EB:E9:12:B3:C1:B8:38:6F:DD:89:FA:59
X509v3 Authority Key Identifier:
keyid:3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:6e:a0:5c:14:57:61:3b:cc:a3:c7:1c:17:de:7b:ea:44:5e:
07:a4:88:ea:3e:d5:6d:00:75:f7:0f:2c:d5:3c:34:14:3b:64:
1b:53:7f:28:e8:bf:56:84:be:db:94:32:30:ab:e9:92:a1:08:
db:b6:18:10:36:d7:b2:27:9e:9e:3a:79:a8:d7:6c:6b:a5:fc:
c2:6b:1f:b9:13:88:5a:eb:a3:9e:d1:73:6c:46:79:23:1f:d9:
10:42:4c:6f:3e:81:d2:84:4f:cc:90:f4:95:9c:b8:1a:24:cb:
f4:31:2d:78:80:62:00:28:ba:ee:80:e3:7b:26:a8:ac:b6:4e:
ff:72:69:3a:0d:26:c0:67:5a:32:98:4b:8c:7a:0d:d4:1c:f7:
2f:98:93:65:71:c0:03:89:18:aa:c4:90:4e:d9:29:8c:31:31:
d2:d5:eb:37:b1:12:c6:11:64:ec:86:62:0c:42:c8:05:0d:1b:
7f:24:47:a7:b9:36:4f:8e:64:e6:68:b4:10:dd:05:2d:d0:58:
6c:40:3c:00:9d:e7:13:7d:ae:bb:57:1c:fb:7c:00:f7:0e:f3:
59:72:b0:78:b1:00:d3:2c:7e:02:d1:c3:38:a5:e1:09:6d:89:
be:e0:57:29:fb:fc:4b:9b:4f:65:a8:59:27:72:28:ae:d0:6b:
ef:96:49:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:27:05 2026 by rpki-client