This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft File: QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft (raw, json) Hash identifier: PO9zoJzyEAscWtRx1SnxXiMf1HmOlWFaHIynEP1CrIU= Subject key identifier: 68:A3:92:2F:B3:CF:B1:50:B6:F0:B7:E9:7B:7D:D5:16:47:B4:F2:85 Authority key identifier: 40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2 Certificate issuer: /CN=A91F5756/serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft Manifest number: 66 Signing time: Sun 25 Jan 2026 06:08:53 +0000 Manifest this update: Sun 25 Jan 2026 06:08:53 +0000 Manifest next update: Sun 01 Feb 2026 06:08:53 +0000 Files and hashes: 1: QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl (hash: zvZGFLv2gs/YYAvljr3d9M/wnTEqb08kbhRZk7ghvk4=) 2: 2FD77F7E621511F09070587CC4F9AE02.roa (hash: DzXy8BEuESMOqIj1ZsPp4HtWDSpRtccWGiXvOFf8WyM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 04:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5756, serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2 Validity Not Before: Jan 25 06:08:53 2026 GMT Not After : Feb 1 06:08:53 2026 GMT Subject: CN=6975b375-3757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7e:39:a1:36:0e:bf:78:fc:73:b1:7a:49:91: 5e:cd:f7:13:99:bc:36:78:61:23:f6:dc:bd:95:55: 21:6d:d4:d6:6e:0b:bb:20:5b:d1:b7:9f:ed:49:05: 8b:fe:13:f7:7d:4f:e7:11:15:da:82:d9:46:38:dc: 9e:61:15:0c:c2:cb:bb:ff:f1:f0:07:3a:37:82:0e: 58:16:f9:39:f4:67:3e:af:62:29:20:b0:f4:c8:95: 85:d9:7c:2f:b3:ca:21:c8:72:48:12:d6:04:69:b4: db:29:d5:b5:ed:1f:ee:a7:5a:c0:53:82:14:9f:7c: e1:84:da:84:4b:62:62:45:2f:22:bf:42:c1:6e:7b: 6b:40:b4:55:03:ae:60:d6:33:ac:3a:ea:64:7e:9c: 97:88:79:3a:d0:f2:e6:80:e7:e8:26:9f:c1:54:01: fe:96:b1:cc:53:48:ec:52:22:3c:cb:35:8d:70:6c: fc:1e:61:2a:10:92:2e:7b:ca:47:0b:71:bf:20:45: 1a:11:85:6c:7e:37:22:d9:39:fd:6c:15:03:33:d4: 66:9d:f6:3a:83:a8:fd:03:65:d3:c0:26:5a:85:27: 63:7d:63:7c:cf:3d:cc:67:16:22:45:76:2c:5b:98: 1d:9c:52:f7:2b:c4:5e:a6:4a:81:c0:cd:ee:e0:fc: 2e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A3:92:2F:B3:CF:B1:50:B6:F0:B7:E9:7B:7D:D5:16:47:B4:F2:85 X509v3 Authority Key Identifier: keyid:40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5e:d0:5e:2c:1f:89:b5:00:08:43:81:12:51:7a:6d:40:8a: 8a:20:22:42:38:b7:7a:a7:17:11:b8:7d:ae:6c:eb:32:11:73: 9b:f2:38:84:d8:5a:cd:76:48:88:72:29:2c:52:f1:32:cd:97: ca:2d:41:7e:1e:45:80:83:4e:e4:20:a2:72:6b:6e:37:85:f5: b1:2b:74:c7:5a:4f:e2:e0:93:3b:24:9f:f4:ed:ab:da:f2:75: 94:99:f0:8e:75:09:f5:ef:42:48:f9:55:aa:81:79:86:06:61: 78:2e:e8:b7:64:75:39:c1:8d:71:91:bb:d2:87:5e:ac:7d:e5: 4c:b7:2b:f3:11:59:e5:1e:3e:2b:ff:c7:ae:9d:8a:89:d1:af: df:7c:55:36:de:54:b2:74:26:3f:81:be:fd:ca:55:72:2e:f4: 09:85:6e:c3:bb:b3:74:27:2e:cb:78:32:81:bd:35:60:7a:34: 5d:7f:03:af:4f:ca:24:e0:65:10:a5:02:69:d7:c7:a6:90:d9: ee:7f:ba:6d:73:d6:26:77:23:97:cc:95:ed:c5:e3:1e:bf:14: 53:87:0b:fe:ad:1d:20:67:25:a9:8f:4d:0b:1a:fc:08:0b:6f: 22:1f:6e:b3:23:f3:82:e7:54:88:94:19:92:74:98:7c:2a:28: 48:d5:dd:cf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTc1NjExMC8GA1UEBRMoNDAxRDhCREM4MkEzMjQ0OEM5M0JBM0EwRkU5M0FGMTA2 NDIzNjJBMjAeFw0yNjAxMjUwNjA4NTNaFw0yNjAyMDEwNjA4NTNaMBgxFjAUBgNV BAMMDTY5NzViMzc1LTM3NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhfjmhNg6/ePxzsXpJkV7N9xOZvDZ4YSP23L2VVSFt1NZuC7sgW9G3n+1JBYv+ E/d9T+cRFdqC2UY43J5hFQzCy7v/8fAHOjeCDlgW+Tn0Zz6vYikgsPTIlYXZfC+z yiHIckgS1gRptNsp1bXtH+6nWsBTghSffOGE2oRLYmJFLyK/QsFue2tAtFUDrmDW M6w66mR+nJeIeTrQ8uaA5+gmn8FUAf6WscxTSOxSIjzLNY1wbPweYSoQki57ykcL cb8gRRoRhWx+NyLZOf1sFQMz1Gad9jqDqP0DZdPAJlqFJ2N9Y3zPPcxnFiJFdixb mB2cUvcrxF6mSoHAze7g/C63AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaKOSL7PP sVC28Lfpe33VFke08oUwHwYDVR0jBBgwFoAUQB2L3IKjJEjJO6Og/pOvEGQjYqIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1NzU2LzZCNzI3RjMyNjIx MjExRjA4Q0E2QzE1NEM0RjlBRTAyL1FCMkwzSUtqSkVqSk82T2dfcE92RUdRallx SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUUIyTDNJS2pKRWpKTzZPZ19wT3ZFR1FqWXFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 NzU2LzZCNzI3RjMyNjIxMjExRjA4Q0E2QzE1NEM0RjlBRTAyL1FCMkwzSUtqSkVq Sk82T2dfcE92RUdRallxSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHte0F4sH4m1AAhDgRJRem1AioogIkI4t3qnFxG4fa5s6zIRc5vyOITY Ws12SIhyKSxS8TLNl8otQX4eRYCDTuQgonJrbjeF9bErdMdaT+Lgkzskn/Ttq9ry dZSZ8I51CfXvQkj5VaqBeYYGYXgu6LdkdTnBjXGRu9KHXqx95Uy3K/MRWeUePiv/ x66dionRr998VTbeVLJ0Jj+Bvv3KVXIu9AmFbsO7s3QnLst4MoG9NWB6NF1/A69P yiTgZRClAmnXx6aQ2e5/um1z1iZ3I5fMle3F4x6/FFOHC/6tHSBnJamPTQsa/AgL byIfbrMj84LnVIiUGZJ0mHwqKEjV3c8= -----END CERTIFICATE-----Generated at Sun Jan 25 12:44:55 2026 by rpki-client