This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft
File: QSPpAOai7I_ptdcDt5KA7yFAfIE.mft (raw, json)
Hash identifier: M5oNwxnrKPyNXTYZpCyiFHCkytq9mr2PLukQ81pisu4=
Subject key identifier: 75:99:16:6F:BE:4D:65:8D:E0:EF:0D:20:D0:9D:6E:62:51:F7:BF:29
Authority key identifier: 41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81
Certificate issuer: /CN=A91F3B2E/serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81
Certificate serial: 0239
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft
Manifest number: 0225
Signing time: Sun 25 Jan 2026 01:38:05 +0000
Manifest this update: Sun 25 Jan 2026 01:38:04 +0000
Manifest next update: Sun 01 Feb 2026 01:38:04 +0000
Files and hashes: 1: QSPpAOai7I_ptdcDt5KA7yFAfIE.crl (hash: cPExNacNEshtpEpoGg5qvZy+33s+pne8EmTP+vAVSos=)
2: A91AF6A8CE7811EF89FA3944C4F9AE02.roa (hash: xYipp+ZcmQFz/ogxlth1vHSd96eYxW/drt1nbOwk66E=)
3: 2B8EF9AA083911F0A051CE72C4F9AE02.roa (hash: NUJLc0QRL6TCVIjI3d7tAKvp2NahPW0NGI52wQUI1t4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl
rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:38:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 569 (0x239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3B2E, serialNumber=4123E900E6A2EC8FE9B5D703B79280EF21407C81
Validity
Not Before: Jan 25 01:38:04 2026 GMT
Not After : Feb 1 01:38:04 2026 GMT
Subject: CN=697573fd-ba37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:49:0f:fd:e3:b2:27:c4:ee:39:58:76:b8:
d8:c5:9d:9c:bb:46:30:b4:9b:81:10:3a:6b:eb:2a:
0d:1e:d9:cd:0a:20:96:48:9f:db:9c:9c:8e:1c:cf:
7c:c7:a3:f6:8e:8b:e2:c0:71:65:66:32:d0:3a:92:
8a:db:2a:3f:54:bf:a4:5a:d7:aa:66:57:da:4d:30:
43:a5:1c:b3:c1:8e:72:e2:e6:4c:33:f4:8c:d7:38:
5b:d1:48:71:7e:56:5b:f2:9f:76:3f:bb:c0:69:bd:
63:3e:a0:4d:79:fe:16:5d:85:30:f8:c5:6a:db:34:
5a:b8:e5:72:17:29:ab:87:3e:82:d7:54:f9:cf:b7:
1a:69:dc:37:8d:b4:cf:08:07:a4:ec:e7:64:c9:f4:
67:77:5f:6f:86:b9:b6:c8:36:54:83:8b:aa:1f:fa:
22:30:12:f7:52:69:7c:64:fe:2e:7b:9b:d3:57:7c:
9d:c6:46:ae:ac:11:56:23:ba:0f:ba:64:83:30:89:
f0:b2:69:03:46:c7:b7:1c:22:f0:74:ad:28:f4:44:
b1:6f:d9:2c:a5:8f:23:da:7d:69:10:16:2b:7f:aa:
e6:d0:1d:f1:6f:ef:67:ba:01:17:34:4f:45:00:d0:
74:ff:75:7b:42:82:06:c7:d1:f0:5e:51:c8:2b:5c:
f9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:99:16:6F:BE:4D:65:8D:E0:EF:0D:20:D0:9D:6E:62:51:F7:BF:29
X509v3 Authority Key Identifier:
keyid:41:23:E9:00:E6:A2:EC:8F:E9:B5:D7:03:B7:92:80:EF:21:40:7C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSPpAOai7I_ptdcDt5KA7yFAfIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B2E/0F55C696D67D11ED86D33750C4F9AE02/QSPpAOai7I_ptdcDt5KA7yFAfIE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:3f:66:e2:c0:e1:0f:bf:88:c5:fc:03:ac:65:f3:2f:d7:be:
e6:1f:8d:f8:f5:c0:a0:6f:e2:88:b3:7a:60:79:c1:4b:44:4f:
ca:60:34:f5:f2:bb:fb:88:b6:b7:9f:c5:eb:3a:4c:b9:6d:47:
50:a1:de:5c:61:b8:9d:15:cf:4d:a4:f6:a7:4e:44:93:81:b6:
64:cc:4b:11:84:49:d6:e1:97:3b:d6:25:1a:31:46:3c:cb:d9:
62:31:d9:38:60:3f:be:83:bd:57:e6:4a:19:a8:ac:ba:95:32:
49:e2:39:9b:34:b4:31:6f:36:66:e2:dc:00:92:b4:00:a6:54:
50:82:1d:20:54:aa:c8:3c:a6:2b:9e:28:a0:4f:c8:a9:d6:01:
57:ec:58:d0:02:f4:dc:28:45:60:7b:67:0e:61:89:3e:3b:8c:
45:74:63:74:87:24:11:de:d1:6c:a4:1c:26:74:7a:18:f2:d1:
74:2c:92:88:ef:40:2f:37:42:28:cb:42:10:c9:14:f8:d0:65:
55:49:a8:bf:5b:6a:0e:ba:53:5d:01:2c:38:a4:bb:da:9a:88:
45:5d:22:9e:42:88:cf:74:0c:8a:c7:5d:7a:91:be:47:4b:07:
86:d5:ba:8e:ee:0b:33:b0:5f:0b:42:98:95:8e:b2:26:de:39:
ee:de:a4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:49:35 2026 by rpki-client