This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft
File: qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft (raw, json)
Hash identifier: dinI4Dt/U/F1yYEAGlnLolKSVCEX5bLo2Z0Hn+hK/zc=
Subject key identifier: C4:89:DB:6C:26:B4:92:C0:8E:B4:C9:71:D5:AA:F8:52:DF:49:32:4F
Authority key identifier: A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3
Certificate issuer: /CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3
Certificate serial: 356D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft
Manifest number: 352E
Signing time: Sat 24 Jan 2026 14:24:20 +0000
Manifest this update: Sat 24 Jan 2026 14:24:19 +0000
Manifest next update: Sat 31 Jan 2026 14:24:19 +0000
Files and hashes: 1: qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl (hash: bCEaB8J3eTZHiFIaDCjBGz33KlqpBs/YsZ4m9fASOJc=)
2: 2CDDCAB868AC11EDAA6C8F2AC4F9AE02.roa (hash: snUS5Nz9OXbIohiNncX/rLVlHKKNwvL/WKysUwbCRFM=)
3: 0D0AE5040AE711E89D0C5071C4F9AE02.roa (hash: 1QH0WR9EAexZONoxgrkCIP2BPHtzOEA7LLO//ildFDE=)
4: 3F0948F82D1011ECB745DB85C4F9AE02.roa (hash: 9JsagnY9rpoPlsVMt4iVRdULuA/96P9hw1zuWPkbXY4=)
5: D93EA75AEE5C11E995881B1BC4F9AE02.roa (hash: yyuVGHEHdjgOJV3OL5d2WHtm2S0Tu6t1QPxDqH/At3U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl
rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13677 (0x356d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7363, serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3
Validity
Not Before: Jan 24 14:24:19 2026 GMT
Not After : Jan 31 14:24:19 2026 GMT
Subject: CN=6974d614-338b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b3:cd:fc:fd:68:d1:5f:c6:4c:a0:f5:a4:fb:
65:cd:4a:b3:a2:be:98:3d:d8:52:fb:9f:4e:94:9c:
1d:60:cb:bf:49:c2:29:a4:f7:89:01:ac:26:53:80:
5c:83:57:64:40:bc:6f:59:89:02:92:39:09:8e:03:
0b:1c:d7:df:18:e0:fb:d0:c4:f7:c2:86:89:a0:6b:
0d:e2:c6:8b:7e:b7:6c:4a:b6:34:ae:bd:5c:75:4b:
1c:c3:78:e3:10:41:4a:a9:34:99:d3:0b:6e:21:f3:
53:37:b4:29:18:cc:30:b2:ed:ff:74:6c:5f:f9:79:
e7:a6:81:38:b3:bc:c6:10:7c:a0:d3:19:49:dd:7e:
09:4e:08:0e:89:76:b1:84:4d:5f:a5:c6:d6:de:35:
f5:b3:7d:77:b9:12:43:07:43:65:38:57:f6:18:e6:
c7:a4:ae:ec:35:20:9e:ba:77:fa:94:4b:e9:b7:66:
f0:56:92:b2:42:ee:e7:56:84:3e:8a:5c:a9:41:0c:
af:6f:8c:20:64:ee:ce:7d:50:40:5a:bf:fa:75:fd:
5d:ad:53:3f:d2:cf:b5:7d:0d:a6:ac:85:f5:74:6c:
a7:11:4a:44:ab:eb:3a:74:e8:a2:5e:bd:53:f9:f8:
5a:8e:ef:62:8e:55:57:19:30:0c:9b:29:e9:b0:ed:
59:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:89:DB:6C:26:B4:92:C0:8E:B4:C9:71:D5:AA:F8:52:DF:49:32:4F
X509v3 Authority Key Identifier:
keyid:A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:3a:8d:46:f8:19:30:83:6e:48:e1:ad:e1:5c:6e:cf:be:42:
d7:4d:9c:dd:7e:de:7c:f6:34:56:7f:f9:1b:fb:87:f8:b0:2e:
73:7e:ee:b2:c2:c1:28:b8:d3:99:e7:53:18:f6:4c:9e:d1:9a:
da:c6:fc:7b:17:c5:21:93:fc:c0:70:ab:61:8e:1a:61:e4:26:
81:91:75:bc:f7:9e:c1:77:ae:66:d3:9d:6c:68:2c:01:96:82:
7c:ef:a6:1e:2a:fd:3d:0c:24:6b:30:c7:d7:7c:a4:96:3f:b6:
a0:62:25:2d:9a:ea:86:4b:63:d4:42:35:46:43:1e:f3:6b:1b:
86:a1:26:08:f5:55:1e:d6:09:59:b4:fb:89:1b:18:ba:ad:d9:
ec:5d:80:31:88:fd:8f:66:fa:0f:5e:55:47:d4:0b:09:e7:fc:
b5:86:ad:1d:52:83:94:3a:14:c4:24:10:ca:63:20:df:73:c2:
d5:36:dd:45:3f:e2:94:8e:a2:e6:30:0b:fe:e4:3b:02:b2:f6:
7b:a6:01:3a:e2:19:1e:74:3a:01:e2:8e:d5:58:11:77:b7:14:
fa:61:c1:59:88:cd:83:2c:4a:c4:d0:62:fc:f7:c3:ea:5b:ae:
66:d3:8d:bf:0d:d3:61:19:64:d1:53:c6:63:78:9d:b3:5c:15:
fb:2a:e5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:05:57 2026 by rpki-client