This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft
File: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft (raw, json)
Hash identifier: 3SyHFsAXfCj8cQ9se2shsrgmVVO8FAqnbUpDXtOf9k0=
Subject key identifier: 36:CA:23:1E:83:42:66:BF:8B:0F:60:CD:90:32:B3:70:57:BE:23:B6
Authority key identifier: 40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5
Certificate issuer: /CN=A911CB05/serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft
Manifest number: ED
Signing time: Sat 17 Jan 2026 04:30:15 +0000
Manifest this update: Sat 17 Jan 2026 04:30:14 +0000
Manifest next update: Sat 24 Jan 2026 04:30:14 +0000
Files and hashes: 1: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl (hash: uVB8RxbEZZfuBdBKA63TnfTR5bqH80dsmSiijwNSCcw=)
2: E692CC2A8A9B11EFBC56AA85C4F9AE02.roa (hash: izaJYsSU6U7Mo7zWWYJeDmZ95mIz6wQL/e1yh556DPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl
rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 04:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CB05, serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5
Validity
Not Before: Jan 17 04:30:14 2026 GMT
Not After : Jan 24 04:30:14 2026 GMT
Subject: CN=696b1057-5abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ae:18:94:b6:cb:ff:15:60:65:01:67:6d:68:
59:7b:69:b7:3e:f0:47:a2:ea:3f:29:e7:59:f1:b5:
9d:d9:e7:f4:e3:77:3f:72:d2:5c:d2:1f:13:af:a2:
4e:32:f0:ca:18:05:72:b1:1d:16:93:1a:98:bf:d7:
20:03:c8:1a:14:e2:5b:b6:2b:5c:96:32:5a:b9:46:
d4:3b:13:e9:75:1b:86:32:c0:31:54:ce:87:6e:41:
04:75:e7:57:a7:3a:98:8a:93:13:38:82:77:cc:25:
f1:b3:a8:55:92:2f:1c:69:b2:62:95:90:b6:1d:41:
1d:de:d6:0a:db:9c:09:ae:69:27:02:eb:27:e4:ed:
f5:2a:f4:b7:14:5d:32:e9:d6:b0:ce:3a:e4:96:93:
6c:9a:3a:df:a2:d5:88:8f:e1:86:b9:43:b6:06:fe:
f5:bd:15:e7:63:d3:62:e3:4f:7d:22:bd:96:b0:cd:
15:a1:77:4e:10:d3:71:4f:29:b4:f5:19:e1:9a:57:
05:5e:e9:94:d6:cc:8b:08:1e:ed:fd:ed:67:d2:e5:
b5:4b:c7:e2:e8:e1:3b:08:30:b0:15:22:78:02:56:
c4:2c:3d:ea:e4:c8:05:d8:b4:ee:2e:02:62:38:e3:
9b:e7:ee:a0:ab:98:38:1c:12:33:63:e5:04:18:17:
1f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CA:23:1E:83:42:66:BF:8B:0F:60:CD:90:32:B3:70:57:BE:23:B6
X509v3 Authority Key Identifier:
keyid:40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:cd:d3:60:66:ff:e6:02:c4:e0:92:72:93:03:63:61:d5:ac:
22:04:fd:e1:63:3d:55:32:73:41:ae:af:d2:97:4f:c6:c6:68:
dd:c9:08:f3:33:58:3d:9e:b5:63:e8:5e:62:2e:41:47:a7:ab:
72:02:10:4a:2a:7d:cb:3b:a1:05:80:99:f0:60:b4:18:ff:33:
7a:6c:90:46:4c:22:27:75:46:06:6e:db:9a:ba:40:35:70:2e:
8e:7b:c9:5b:d9:c0:e4:5d:0c:89:82:13:6c:9a:b7:fd:f1:09:
7a:10:3b:b9:f4:93:15:ca:38:cd:d5:c1:51:88:c2:8b:df:eb:
1c:74:18:fe:da:1b:8b:76:3e:4e:53:66:26:35:f5:96:79:8d:
b6:9c:29:3c:75:ce:05:f3:a4:10:23:7a:ca:c0:2d:bd:e8:d2:
22:7e:7c:76:68:a9:ed:d8:d1:63:1c:41:f2:83:b8:bb:2b:41:
40:92:fc:d4:cc:9f:69:1a:3c:e8:b5:64:23:c6:77:75:2e:c4:
e4:a4:11:0c:e1:52:e7:59:de:cc:76:5c:ab:a2:06:a4:fa:6c:
7b:9b:6c:a1:68:51:54:44:51:00:b7:07:69:33:ed:65:d2:cd:
4a:78:00:5f:c1:91:5d:d4:80:4b:b2:f4:ac:ec:47:1b:ac:40:
5f:24:34:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:17:26 2026 by rpki-client