This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
File: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft (raw, json)
Hash identifier: tHGOG6e2YNRKCwyVKjSnsGhgmj+oeLF5FlcsaM0MGDI=
Subject key identifier: C8:9C:A0:6A:48:BB:7D:62:67:0B:76:CF:1B:D2:63:09:44:A6:3A:49
Authority key identifier: 42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09
Certificate issuer: /CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
Certificate serial: 07A8
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
Manifest number: 079E
Signing time: Tue 20 Jan 2026 18:54:37 +0000
Manifest this update: Tue 20 Jan 2026 18:54:37 +0000
Manifest next update: Tue 27 Jan 2026 18:54:37 +0000
Files and hashes: 1: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl (hash: d6lZksJWNNMVt81hQrOsQWa/GZQdbfePcMmLushpqhY=)
2: 510308503E8211EBA910FF57C4F9AE02.roa (hash: PjHH406K/ka7XNZ7a0h9GqbdKh0e4+H0cJO6YTJYTgA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl
rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 18:54:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1960 (0x7a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8AF, serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209
Validity
Not Before: Jan 20 18:54:37 2026 GMT
Not After : Jan 27 18:54:37 2026 GMT
Subject: CN=696fcf6d-2b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:f6:d4:21:a5:fe:2e:d1:62:2a:4d:fc:d6:
0c:ef:95:3d:08:55:0e:a7:7c:8c:ac:c4:b2:0c:b3:
cc:1f:02:b7:f3:83:f2:20:34:be:dd:64:72:42:39:
1a:e1:d4:55:a2:af:83:aa:f8:42:8c:82:80:0a:ab:
29:9c:18:69:67:66:f0:2f:6f:47:f0:45:8c:d8:05:
95:a9:07:52:d6:e1:4f:df:60:b5:db:22:6d:57:7f:
2f:2b:62:70:d3:79:ea:b5:e0:b3:94:b5:41:66:88:
b0:74:90:14:15:90:4c:2e:f2:3b:5f:bd:74:72:0a:
f9:d8:13:d0:1b:f4:76:65:51:1c:3e:14:51:be:23:
7d:be:6c:65:16:45:5a:5b:82:f7:99:d8:37:bb:86:
78:0b:a8:23:a8:7e:ad:3c:29:10:bb:a5:c3:b4:43:
e4:a1:a2:f8:97:a5:79:f8:cb:83:45:a4:c9:4a:6d:
dc:79:b3:cc:d0:fa:90:75:e3:61:11:cd:32:a4:1f:
64:5a:86:9d:b4:49:14:34:35:4d:4d:c0:7d:45:be:
84:f8:8d:1c:ec:ba:b8:86:13:62:90:c6:0c:b2:15:
fe:56:58:1c:9f:e9:8a:36:e4:1e:75:dd:1e:32:b5:
f1:c2:19:99:82:2e:d1:b8:a2:10:dc:12:86:ae:45:
95:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9C:A0:6A:48:BB:7D:62:67:0B:76:CF:1B:D2:63:09:44:A6:3A:49
X509v3 Authority Key Identifier:
keyid:42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e2:3f:ee:c6:9d:31:be:7d:7c:b0:39:8f:df:77:32:2f:25:
fb:87:d4:26:e0:d9:2b:b3:02:d5:6d:cd:ea:96:f6:53:a4:d5:
27:c0:e2:d5:a3:69:88:5c:a2:b6:a1:d4:e8:4e:a5:af:b2:4c:
a6:d9:be:41:bb:a8:cd:0c:70:d5:a1:d6:43:33:83:47:2a:c3:
0f:1e:4b:8b:7e:2a:0d:5f:c7:6a:2e:a6:52:dc:57:1c:d2:58:
00:60:2a:1f:e7:23:9b:78:85:3c:e1:1f:d6:2d:e7:cc:bf:19:
7b:b5:6e:d5:2d:65:24:ef:87:4e:83:a0:8f:27:e0:8b:b7:aa:
65:5c:92:a7:52:e0:a8:85:bf:f9:4e:f1:6c:71:cf:ee:be:fa:
67:3c:84:c1:9c:1c:cf:e4:ad:a6:59:93:d0:15:e6:38:86:66:
60:26:0b:83:93:79:e8:77:da:80:3e:27:4d:8b:e2:51:be:64:
30:e0:1e:a6:0a:7c:76:85:42:ab:9e:8a:b5:5b:42:27:fb:56:
77:17:2e:ee:2d:93:bf:ab:62:94:9e:a5:db:b0:a3:34:3d:e6:
b9:c3:ef:e3:c3:8f:80:a1:7f:fd:9a:3f:0a:d4:f3:29:2c:97:
f5:e4:c9:43:d8:b5:ce:96:95:7e:dc:b6:eb:0b:ed:14:cb:b3:
97:27:5b:88
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM4QUYxMTAvBgNVBAUTKDQyNEUwQTM4NDNGM0ZBMUY0NEI2QUYyRUYzRUUxMTgx
NUM0QjUyMDkwHhcNMjYwMTIwMTg1NDM3WhcNMjYwMTI3MTg1NDM3WjAYMRYwFAYD
VQQDDA02OTZmY2Y2ZC0yYjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoIv21CGl/i7RYipN/NYM75U9CFUOp3yMrMSyDLPMHwK384PyIDS+3WRyQjka
4dRVoq+DqvhCjIKACqspnBhpZ2bwL29H8EWM2AWVqQdS1uFP32C12yJtV38vK2Jw
03nqteCzlLVBZoiwdJAUFZBMLvI7X710cgr52BPQG/R2ZVEcPhRRviN9vmxlFkVa
W4L3mdg3u4Z4C6gjqH6tPCkQu6XDtEPkoaL4l6V5+MuDRaTJSm3cebPM0PqQdeNh
Ec0ypB9kWoadtEkUNDVNTcB9Rb6E+I0c7Lq4hhNikMYMshX+Vlgcn+mKNuQedd0e
MrXxwhmZgi7RuKIQ3BKGrkWVVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMicoGpI
u31iZwt2zxvSYwlEpjpJMB8GA1UdIwQYMBaAFEJOCjhD8/ofRLavLvPuEYFcS1IJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9FRTBBRUVDQTNF
ODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1oOUV0cTh1OC00UmdWeExV
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1FrNEtPRVB6LWg5RXRxOHU4LTRSZ1Z4TFVnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QzhBRi9FRTBBRUVDQTNFODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1o
OUV0cTh1OC00UmdWeExVZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBt4j/uxp0xvn18sDmP33cyLyX7h9Qm4NkrswLVbc3qlvZTpNUnwOLV
o2mIXKK2odToTqWvskym2b5Bu6jNDHDVodZDM4NHKsMPHkuLfioNX8dqLqZS3Fcc
0lgAYCof5yObeIU84R/WLefMvxl7tW7VLWUk74dOg6CPJ+CLt6plXJKnUuCohb/5
TvFscc/uvvpnPITBnBzP5K2mWZPQFeY4hmZgJguDk3nod9qAPidNi+JRvmQw4B6m
Cnx2hUKrnoq1W0In+1Z3Fy7uLZO/q2KUnqXbsKM0Pea5w+/jw4+AoX/9mj8K1PMp
LJf15MlD2LXOlpV+3LbrC+0Uy7OXJ1uI
-----END CERTIFICATE-----
Generated at Wed Jan 21 07:51:34 2026 by rpki-client