This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
File: qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json)
Hash identifier: t/cZ4/+17mxhahwUp3OfH+9m+gTqghXQIze57GwvSRo=
Subject key identifier: 5F:84:D0:2C:45:20:8E:89:31:99:84:3A:60:5D:3D:5C:97:C2:36:3E
Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F
Certificate issuer: /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
Certificate serial: 0658
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
Manifest number: 064C
Signing time: Sat 24 Jan 2026 21:58:41 +0000
Manifest this update: Sat 24 Jan 2026 21:58:40 +0000
Manifest next update: Sat 31 Jan 2026 21:58:40 +0000
Files and hashes: 1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: DbHR0JyeoGCDmxs1f3wK15LmN1KhNcrDn06WSup0lXw=)
2: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (hash: taOVx7nk0yJP7nOzPIUbOsf7C8xITqEbR1CM6ndaNjQ=)
3: 7E859EFEE60411EF89467057C4F9AE02.roa (hash: aPH84FEP6ZN7kMoON0X2LyO7xuFcySH9Oy6iOBdgxYk=)
4: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: QV6x7t1GNDY1enVK8NGqWm1qI1rxu4buJOSstDWJdT0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl
rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:58:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1624 (0x658)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4EDE, serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
Validity
Not Before: Jan 24 21:58:40 2026 GMT
Not After : Jan 31 21:58:40 2026 GMT
Subject: CN=69754091-8640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a5:4a:46:04:d7:c1:e2:a6:a3:d4:a2:48:05:
f6:0e:4b:35:09:55:67:37:f0:04:21:a0:1b:f9:9c:
21:e2:00:9a:36:82:f8:67:5b:9c:d4:64:a9:6d:04:
7d:62:27:4e:97:57:ad:8a:1b:a3:11:da:38:46:0f:
5d:e5:ef:78:91:3e:33:fb:04:b5:4f:f3:0a:58:7a:
1b:00:e9:ca:e6:71:c6:e1:b3:36:75:20:1a:82:32:
be:44:cc:00:6a:7b:c0:ac:4b:84:ad:4f:cc:2e:3f:
c5:38:24:88:c9:77:aa:cd:62:99:5a:f1:be:6c:ba:
2a:33:eb:95:ea:bd:eb:9b:00:be:e5:f6:76:53:e8:
35:80:c8:ca:6e:f3:75:c8:bd:4c:c4:8a:c4:ba:5e:
6c:2b:f0:a5:2c:fd:9b:16:03:63:fe:38:20:e9:d6:
89:fc:d3:36:83:0a:09:16:06:62:bf:53:4e:c6:0a:
67:a5:2f:86:2e:5c:b3:c7:06:5f:a6:55:bb:6d:d3:
9c:79:1e:bd:34:a3:e8:ff:c4:78:36:9f:f3:d7:69:
a7:28:b3:17:7a:e8:90:00:ca:53:e1:3b:68:e2:b5:
a4:b8:fd:fe:d3:80:de:24:c1:26:89:1e:13:06:6d:
79:cb:20:7a:b3:ec:56:9a:a5:92:31:aa:13:ae:c7:
3f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:84:D0:2C:45:20:8E:89:31:99:84:3A:60:5D:3D:5C:97:C2:36:3E
X509v3 Authority Key Identifier:
keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:49:68:0d:f5:32:ce:56:c6:25:3a:f8:80:c1:4a:cc:02:32:
84:04:61:b5:5a:f7:ac:c8:25:da:00:4a:3e:f2:48:41:47:36:
5f:fa:cd:b9:71:5a:59:1e:f3:ca:58:c9:5f:b3:87:e9:74:de:
13:98:95:c8:5d:81:e5:ec:77:0d:23:1b:34:f8:41:e0:59:4b:
30:8c:89:6f:53:ba:9f:f9:9d:86:24:b0:22:47:8a:0e:30:04:
8f:ce:ac:58:39:8d:94:18:ec:2f:93:5e:84:c0:b4:4d:dc:c5:
fb:3a:ce:c2:a0:24:f4:78:aa:4a:c6:6b:86:92:95:b9:95:63:
5b:3b:6a:63:23:d5:50:59:34:7f:db:f0:e0:7d:ed:cd:37:a9:
02:8c:06:98:da:b2:2e:ec:8c:ff:fc:00:68:4f:55:57:b4:aa:
e7:27:6e:79:77:80:e1:50:99:3c:79:fa:f9:dc:b4:da:d6:70:
79:69:51:de:16:a4:43:60:a4:71:60:a6:2a:67:19:40:16:3c:
49:39:38:66:c6:fd:9d:12:5b:48:63:60:94:bf:0c:9c:88:b0:
64:8d:80:7b:3b:78:3b:b4:32:71:ab:fe:e5:f7:74:00:c7:41:
a6:fa:86:af:7c:f1:39:13:3d:ea:1d:4c:fe:40:6d:92:f0:a9:
4e:2b:32:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:57:25 2026 by rpki-client