This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
File: QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json)
Hash identifier: teA09EMGR1Hge2Xh4rygJga9v2X7733X9iUmrudUVX4=
Subject key identifier: 17:EF:A1:33:80:89:BB:EE:C7:08:47:D7:49:FD:46:6D:92:54:2C:5F
Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Certificate serial: 043D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
Manifest number: 0435
Signing time: Sat 24 Jan 2026 23:29:05 +0000
Manifest this update: Sat 24 Jan 2026 23:29:05 +0000
Manifest next update: Sat 31 Jan 2026 23:29:05 +0000
Files and hashes: 1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: SBaqPf0NxfYO2zcf3l3ts9rX1ly8xQ2IAi4CqzM0B/s=)
2: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: vlEni3UTKg6N69bA/qO6bko6oc0V7Y603/5krA0YD5s=)
3: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: qOMt8gV+qKOqfr/cX53ygmFqRFWIxLXDn07p9oOee54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:29:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1085 (0x43d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Validity
Not Before: Jan 24 23:29:05 2026 GMT
Not After : Jan 31 23:29:05 2026 GMT
Subject: CN=697555c1-2953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:0a:ab:b9:0b:b7:a9:1d:90:cc:6d:7d:5d:
d1:9c:d0:60:ea:ec:d5:32:b1:e0:fd:72:69:76:b1:
a1:47:41:16:0a:4c:41:46:60:8e:17:5e:5b:85:e9:
85:7a:fd:32:67:f5:06:66:55:1f:06:98:4e:b9:2c:
9f:57:0d:56:a4:d5:ce:f3:ee:c5:18:6c:a4:c9:fc:
ad:34:8a:d9:02:c2:f1:d8:12:72:ac:80:d9:91:5c:
be:48:79:37:62:16:bf:26:f6:34:dd:16:7f:c9:95:
9f:17:bc:39:41:f6:99:25:6d:71:c6:bc:b0:d4:42:
fd:f8:96:df:df:12:7c:b2:8a:c5:0d:99:aa:e3:f6:
a7:80:4d:ff:37:2a:c7:28:63:ba:9e:80:9c:0d:d5:
76:ac:be:d4:c0:2b:97:ed:e6:6b:6b:a6:c3:32:ea:
65:00:a6:f3:bd:11:0f:fa:e6:fb:60:a9:a3:ce:95:
61:78:7c:1b:a3:02:76:20:33:11:f4:38:77:d0:a8:
f4:f4:11:da:21:96:1f:46:05:72:1f:32:b6:8d:a4:
70:61:15:fc:b3:c8:b5:74:80:47:a2:d9:1b:b5:8e:
9e:74:a4:e1:92:79:54:98:0b:54:f0:52:eb:88:77:
67:63:e4:ff:d7:de:db:c6:03:76:4f:73:f0:ab:d5:
ef:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EF:A1:33:80:89:BB:EE:C7:08:47:D7:49:FD:46:6D:92:54:2C:5F
X509v3 Authority Key Identifier:
keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:54:20:02:da:bb:cc:96:b4:93:34:4e:7d:cf:2b:e7:15:8d:
41:31:e7:cf:51:7a:b9:72:80:cf:c4:ed:0f:7d:25:98:2b:b1:
ff:ed:96:d7:11:4c:39:ec:c0:1b:44:5e:78:61:8c:85:ef:ea:
1c:d8:ee:7a:da:02:81:9f:39:91:1c:b0:35:15:13:23:aa:3d:
22:01:37:53:bf:5f:57:c3:33:b0:46:e1:f6:15:d0:d4:a4:59:
da:69:ef:b0:15:f3:71:cd:d1:ed:2e:3d:fc:81:a4:19:12:e1:
b6:e7:ff:2d:0e:fa:8c:1f:c6:8d:a2:04:91:34:70:ee:10:17:
8d:3c:21:b1:22:71:61:6b:89:93:66:03:9b:ad:08:90:6c:a3:
97:a9:af:43:26:0c:b5:ca:59:06:43:ab:f3:49:ab:7e:57:2f:
ea:b5:b9:30:ce:51:c6:24:d6:0d:eb:3d:f6:68:93:db:dc:86:
1b:f6:c1:f8:fe:d9:61:7e:bc:87:97:a2:fc:8e:d1:3e:f3:8b:
ed:46:5c:9c:1a:e7:27:87:5f:67:47:82:9b:5b:98:20:4e:c4:
3a:b1:d3:53:d4:40:92:45:71:71:26:26:df:07:3b:f4:d3:37:
cf:73:3c:d5:42:14:85:19:dc:ec:35:ac:9c:88:4d:08:f2:e8:
0b:9e:e5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:13:06 2026 by rpki-client