This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft
File: cq-668ns3aLu0tSbE-YEjqPkHmA.mft (raw, json)
Hash identifier: lAEGsJYA3oiIq5CN2NdJTH/l6qrZG10vn0eGAzlAgnQ=
Subject key identifier: 4F:3B:FB:B9:C5:06:78:4F:34:31:49:4C:9A:58:B9:46:4D:ED:00:DA
Authority key identifier: 72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60
Certificate issuer: /CN=A91FDD4D/serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60
Certificate serial: 2228
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft
Manifest number: 21ED
Signing time: Sat 24 Jan 2026 15:44:09 +0000
Manifest this update: Sat 24 Jan 2026 15:44:08 +0000
Manifest next update: Sat 31 Jan 2026 15:44:08 +0000
Files and hashes: 1: cq-668ns3aLu0tSbE-YEjqPkHmA.crl (hash: 91On7efQjKcERKbd5+GluEpw6/nQaA8s+6t//cO2Kmk=)
2: EEFB07CCB8A311ED8F694046C4F9AE02.roa (hash: cgIrr8o9jTXMbYMAZf1J8wAI/DfnpUQHzKHIr7ZgI6c=)
3: 0F0824DED28311EDB1655152C4F9AE02.roa (hash: dz1GvojNAIHZyqW3h8Y6bP+YBH4Rk6bXASQ1x7rYr58=)
4: 1C628A90671411EEA0040661C4F9AE02.roa (hash: CTvIhXrCtBos/LVoBMmH2P68ViNfFaDxoAYBDmOA96g=)
5: E9DE96C44C3611EEA9D59630C4F9AE02.roa (hash: PC1UpxkrsO/0WXvqCVPit0ma41SpwfY7b5bjQTzVpWQ=)
6: E50E6E14B63411EDB4416786C4F9AE02.roa (hash: FmtBKEomkwEsg09oOugyzChandkcrHCKNwzoO1agNsg=)
7: 0FB07E54D28311EDB1655152C4F9AE02.roa (hash: V6pTdi9Go4VZBEN3XXIn2lnRjqLUf2zngAhmgO8tgA0=)
8: AB9E7432714911EEBF95153CC4F9AE02.roa (hash: lgOGf6vXQs55zxCogd+pRQs87jNu5Yd5pLF5QPR8QMk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl
rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:44:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8744 (0x2228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDD4D, serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60
Validity
Not Before: Jan 24 15:44:08 2026 GMT
Not After : Jan 31 15:44:08 2026 GMT
Subject: CN=6974e8c9-7783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2a:c5:f1:10:c8:62:d2:ae:de:1d:0f:ba:01:
0c:49:33:9e:2c:c8:6c:e9:15:fa:18:19:63:20:1e:
91:7b:31:fc:af:b3:28:9a:69:56:bd:d3:cf:90:fc:
16:ce:9b:fd:fc:87:77:b7:0e:ea:48:8a:f9:4f:95:
8d:68:8d:22:35:b1:2d:5d:41:2f:d0:e1:ff:1b:62:
97:31:6f:0e:f0:04:23:a7:5a:2f:ec:5f:b1:9c:73:
a5:cf:46:c0:eb:61:50:21:d1:09:8b:7f:a7:d0:25:
28:e8:7d:f7:14:d2:1b:d8:65:d8:7b:ef:78:64:75:
e4:62:35:11:a5:07:c7:19:31:0c:1e:af:7e:db:8f:
f4:09:00:98:54:1d:7c:a1:43:d4:12:4d:9f:df:48:
6b:ba:57:05:3d:d6:68:29:58:9f:5a:98:36:47:b8:
b9:63:ee:88:11:ec:07:d6:ac:75:ea:6d:37:9f:d3:
90:95:9a:9b:cc:23:75:ef:98:3e:b8:2f:31:f0:59:
44:e4:2e:75:cb:5a:3f:5b:d1:65:a9:fe:cc:13:7b:
92:fb:20:58:0e:b8:11:12:ed:ab:36:89:d5:e8:da:
d7:94:1a:9d:2e:04:e0:db:5b:fe:b9:e2:a0:47:dc:
75:17:4b:44:86:c6:58:ce:fc:75:2b:a8:eb:76:0b:
84:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3B:FB:B9:C5:06:78:4F:34:31:49:4C:9A:58:B9:46:4D:ED:00:DA
X509v3 Authority Key Identifier:
keyid:72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7a:38:c0:07:e1:2c:40:2d:d7:12:89:c2:90:4d:7f:e8:fa:
14:2b:08:fb:e0:df:fc:04:ab:28:f5:a6:7d:bd:64:cb:19:6e:
f7:1d:62:55:29:d0:f1:a9:57:64:a3:d6:e5:ad:7f:a1:f5:17:
6a:7c:82:14:7f:df:b7:00:5f:6e:98:fb:c1:b2:25:68:27:3e:
84:00:2b:e5:5c:f2:73:05:79:79:30:c0:5f:c6:e5:ec:81:c8:
f2:dd:c4:01:0f:50:79:6e:99:bc:b6:ea:b3:20:d9:5a:22:c2:
cb:ad:69:46:98:41:e7:e2:7b:23:41:f5:f0:cd:dc:4b:91:6c:
a2:4c:2c:f3:1f:3a:92:29:88:d5:8a:7d:4a:c1:df:30:49:96:
ff:60:37:0f:08:20:e8:6d:30:cd:40:75:65:d5:55:6c:01:12:
95:7a:2e:cb:14:72:e6:3a:66:2c:58:43:b4:59:6f:36:33:90:
4f:ba:d6:b1:7e:c3:1a:9f:34:41:4d:c5:c4:78:1f:0f:f1:d9:
89:99:8b:26:cb:98:70:a0:91:94:65:97:90:01:98:a6:ea:8c:
c0:cf:c3:9c:3b:34:3b:93:f7:8c:8e:a0:82:dd:10:48:e3:81:
b6:92:13:c0:ed:91:84:c4:33:9b:bb:08:3b:93:d6:24:93:e3:
b8:e8:d4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:07:20 2026 by rpki-client