This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft File: QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft (raw, json) Hash identifier: 72vT6AxftzLhWljjDQLI1WpKbf0j/9kOo4AJCXzRDBU= Subject key identifier: A0:A4:07:39:7A:7A:27:D5:CC:58:DC:2C:E5:1A:E2:6D:65:0B:14:D4 Authority key identifier: 41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 Certificate issuer: /CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Certificate serial: 04BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft Manifest number: 04B6 Signing time: Sat 24 Jan 2026 23:07:59 +0000 Manifest this update: Sat 24 Jan 2026 23:07:59 +0000 Manifest next update: Sat 31 Jan 2026 23:07:59 +0000 Files and hashes: 1: QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl (hash: xkhyDYses0GWNooGg5jwf9wGwK7llplsY3Xfg/thn30=) 2: 6229E2DC5C7911EC8C7BD812C4F9AE02.roa (hash: h3D5F/TKilSwFXiWulZfSNZqxOFtLKLv7bWrJluucIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 23:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1211 (0x4bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F95E2, serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Validity Not Before: Jan 24 23:07:59 2026 GMT Not After : Jan 31 23:07:59 2026 GMT Subject: CN=697550cf-c329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ec:e9:97:a6:58:c9:37:15:e2:1a:02:5a:8c: 90:98:fb:10:7e:9a:d1:6b:40:ac:5b:3a:e2:f9:2b: fe:0f:87:52:3c:83:a1:42:39:0c:21:60:40:6d:69: 47:6f:c8:9a:9c:ce:21:ea:d0:4e:c9:ab:a8:cc:5d: 77:84:8f:1e:4a:c3:0e:57:d4:91:03:87:c6:ee:fb: 50:1e:77:11:14:4e:0d:ea:e5:38:33:2a:f9:00:75: 00:1e:37:78:55:6b:75:0b:33:9d:1f:87:31:07:fe: e1:2f:7d:e2:38:91:6a:79:a3:94:25:53:7c:4f:a2: 2f:22:e6:22:9d:86:3b:3e:94:4d:68:9c:33:20:b1: 3c:12:fa:b6:73:50:b7:9f:e4:42:64:c6:43:c7:7a: cc:7b:17:03:68:d7:aa:38:72:89:a6:21:6c:18:2c: eb:b6:30:b7:06:74:0b:5c:f2:f6:d1:38:7c:c1:c6: 0d:ad:2f:d6:06:6d:68:ac:0d:e2:51:ce:a1:f1:cc: 56:10:52:d2:6e:8d:6d:fe:ad:16:e7:c2:01:a5:df: e5:4e:51:01:57:61:95:76:41:8e:56:9c:f0:bf:1b: 41:39:d7:af:55:6d:c2:7f:48:08:51:dd:17:4d:77: 95:64:21:c4:1c:ee:c5:47:24:ac:81:44:f9:5b:c3: b2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A4:07:39:7A:7A:27:D5:CC:58:DC:2C:E5:1A:E2:6D:65:0B:14:D4 X509v3 Authority Key Identifier: keyid:41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:08:e6:11:9c:a6:77:97:e9:24:b1:52:20:34:8b:ad:be:52: b9:a9:04:0c:67:1b:cc:28:b8:dd:59:e1:ac:00:43:97:ea:b9: 89:8b:17:34:3e:c9:aa:99:ed:b5:e0:9d:26:f0:cf:b8:e3:0d: 16:9a:4f:df:7e:70:ab:c5:cd:39:a0:ac:ed:30:48:ba:da:aa: 78:6f:65:9f:a1:cc:f7:b3:28:99:10:01:60:3b:8e:af:35:84: d4:91:c5:5d:05:20:fe:f0:c8:bc:2e:1f:af:92:83:da:cb:2b: 33:1b:ad:e8:87:fe:97:c9:17:b2:e0:73:b3:96:ff:90:ea:46: 8d:57:c6:63:5b:d0:dc:d1:db:74:6c:dd:e8:6b:90:85:07:2f: 99:04:7d:62:ee:35:89:ab:2c:e6:5a:1f:1d:e6:bf:f2:72:68: 40:3f:51:d9:5d:31:9a:94:64:44:3b:e3:80:53:af:cb:26:1f: 2c:a2:6f:f7:64:ad:a0:84:81:6a:f7:3d:4a:78:64:a0:53:1a: 20:1d:89:37:0b:6d:26:2f:e7:a6:01:64:8a:f6:5d:ab:f8:45: d0:7f:ec:18:cd:c0:96:48:d8:06:ff:50:47:2a:3e:6b:a7:3e: 8f:5e:05:ba:89:ef:24:44:cd:ba:0f:d0:06:f6:bf:e3:42:03: 13:09:69:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk1RTIxMTAvBgNVBAUTKDQxMDU5N0Q1QjAwMDQzRTIwQUEyNDA5RTMyNzFFRDRG NDFFMTMxQzcwHhcNMjYwMTI0MjMwNzU5WhcNMjYwMTMxMjMwNzU5WjAYMRYwFAYD VQQDDA02OTc1NTBjZi1jMzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsezpl6ZYyTcV4hoCWoyQmPsQfprRa0CsWzri+Sv+D4dSPIOhQjkMIWBAbWlH b8ianM4h6tBOyauozF13hI8eSsMOV9SRA4fG7vtQHncRFE4N6uU4Myr5AHUAHjd4 VWt1CzOdH4cxB/7hL33iOJFqeaOUJVN8T6IvIuYinYY7PpRNaJwzILE8Evq2c1C3 n+RCZMZDx3rMexcDaNeqOHKJpiFsGCzrtjC3BnQLXPL20Th8wcYNrS/WBm1orA3i Uc6h8cxWEFLSbo1t/q0W58IBpd/lTlEBV2GVdkGOVpzwvxtBOdevVW3Cf0gIUd0X TXeVZCHEHO7FRySsgUT5W8OylwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCkBzl6 eifVzFjcLOUa4m1lCxTUMB8GA1UdIwQYMBaAFEEFl9WwAEPiCqJAnjJx7U9B4THH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTVFMi8xMTg1NDVGQTVD NzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEtSUtva0NlTW5IdFQwSGhN Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRV1gxYkFBUS1JS29rQ2VNbkh0VDBIaE1jYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTVFMi8xMTg1NDVGQTVDNzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEt SUtva0NlTW5IdFQwSGhNY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQCOYRnKZ3l+kksVIgNIutvlK5qQQMZxvMKLjdWeGsAEOX6rmJixc0 Psmqme214J0m8M+44w0Wmk/ffnCrxc05oKztMEi62qp4b2Wfocz3syiZEAFgO46v NYTUkcVdBSD+8Mi8Lh+vkoPayyszG63oh/6XyRey4HOzlv+Q6kaNV8ZjW9Dc0dt0 bN3oa5CFBy+ZBH1i7jWJqyzmWh8d5r/ycmhAP1HZXTGalGREO+OAU6/LJh8som/3 ZK2ghIFq9z1KeGSgUxogHYk3C20mL+emAWSK9l2r+EXQf+wYzcCWSNgG/1BHKj5r pz6PXgW6ie8kRM26D9AG9r/jQgMTCWne -----END CERTIFICATE-----Generated at Sun Jan 25 12:24:15 2026 by rpki-client