This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
File: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft (raw, json)
Hash identifier: dlnCDVM+NJampzFqhPs+tdJgXtzH2+dFRRh3uiXQrJM=
Subject key identifier: 3D:4B:57:A2:E4:50:BB:A6:75:82:6C:4E:77:36:FD:15:46:6C:2C:24
Authority key identifier: 42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96
Certificate issuer: /CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
Manifest number: FD
Signing time: Sat 17 Jan 2026 04:21:18 +0000
Manifest this update: Sat 17 Jan 2026 04:21:18 +0000
Manifest next update: Sat 24 Jan 2026 04:21:18 +0000
Files and hashes: 1: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl (hash: Ua0P/LuVddtGqVGE5fMfzUa4/m77D5I7HjQ6pzQdZYw=)
2: 5F18EB127A7E11EF932E0B3EC4F9AE02.roa (hash: VWRRCd4nJbWD0TRBP58eY5MdXn/pUrD+aCnAKKgYqGE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl
rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 04:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140436, serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
Validity
Not Before: Jan 17 04:21:18 2026 GMT
Not After : Jan 24 04:21:18 2026 GMT
Subject: CN=696b0e3e-4262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dd:b7:4a:fd:8c:e9:65:37:1f:5b:74:cc:72:
ee:99:e7:64:df:54:b6:d4:bd:d3:ff:1b:ee:71:01:
1c:80:23:e5:d0:68:5e:d6:92:70:8d:f0:44:1d:bc:
1f:32:9d:a1:ea:08:5d:10:84:24:72:05:4d:2e:74:
a8:a8:75:ff:4d:53:c9:14:6c:75:e7:b2:89:7f:71:
ae:ce:f4:8a:11:94:40:83:33:4e:f6:6a:07:5d:42:
c4:6f:4d:e5:4e:78:de:b4:05:04:2c:db:ed:70:fa:
d2:db:3c:be:c7:6d:fc:8b:8d:31:bc:f4:cf:8c:76:
98:2a:d0:52:8d:e3:b9:94:c0:26:df:da:7b:bc:e0:
e9:b2:bc:7a:09:cd:27:98:78:54:75:93:98:ba:fc:
23:1f:3d:81:86:7a:28:5b:c9:ca:9d:a3:40:a7:08:
bd:46:5d:05:41:32:db:a6:51:fe:71:12:78:03:92:
51:e6:32:31:62:c1:ea:a5:f1:1c:c1:b2:82:00:bd:
3e:dd:0c:c8:d3:3d:ba:bd:76:f8:73:1b:bf:4e:37:
c5:97:e6:21:b3:ef:f0:60:53:e2:f9:18:f4:4f:f6:
5f:65:da:eb:da:53:20:d5:36:5f:69:7c:d3:e3:64:
87:c7:da:21:aa:83:1e:bd:e6:88:e4:11:78:bd:68:
cb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4B:57:A2:E4:50:BB:A6:75:82:6C:4E:77:36:FD:15:46:6C:2C:24
X509v3 Authority Key Identifier:
keyid:42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:4b:8e:cc:16:1b:38:57:9c:14:19:04:c4:aa:d6:6f:c3:76:
1c:da:dd:e5:b8:f4:98:e5:54:d9:a8:f0:22:df:c7:92:a4:5a:
fd:e6:1d:b0:9a:49:53:83:62:90:07:51:83:a1:53:76:1e:e0:
c6:3b:de:2e:79:f2:f2:d9:f7:c2:32:06:80:e0:96:d7:61:6b:
29:39:a6:39:77:93:47:11:27:2c:da:05:05:30:81:96:e1:c2:
3b:97:ee:1e:81:b9:29:92:ee:ce:cb:0a:78:a6:71:d4:f0:20:
e7:de:5b:08:b7:d2:e4:f7:1d:70:6d:d5:f5:b4:9c:0c:29:96:
9b:b3:af:22:de:85:3a:2c:ad:f9:96:4e:81:93:83:9c:8a:b3:
2e:e7:45:40:0a:da:76:43:99:67:a9:0a:03:dc:d6:9d:ae:e5:
1b:f8:78:e4:8e:f9:e9:b9:8a:0a:5c:06:d4:09:1d:b1:61:fd:
46:1b:e1:a3:bb:d1:5f:33:31:2e:32:ae:38:4f:2b:35:10:08:
b0:8b:69:18:54:ad:53:c4:5d:d4:a3:73:55:a0:80:76:21:4a:
af:26:c1:aa:70:9e:b9:45:0d:9e:d6:91:0f:2b:b0:19:94:f7:
0b:ae:7b:3f:c0:61:36:9f:3c:d6:37:1d:17:d1:e5:81:f8:66:
f1:81:07:d0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDA0MzYxMTAvBgNVBAUTKDQyQzJDQkE0N0ZBRDM4OUZEMThCNjFDQUUyMjQ3MkQ2
MUUwRUE4OTYwHhcNMjYwMTE3MDQyMTE4WhcNMjYwMTI0MDQyMTE4WjAYMRYwFAYD
VQQDDA02OTZiMGUzZS00MjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0N23Sv2M6WU3H1t0zHLumedk31S21L3T/xvucQEcgCPl0Ghe1pJwjfBEHbwf
Mp2h6ghdEIQkcgVNLnSoqHX/TVPJFGx157KJf3GuzvSKEZRAgzNO9moHXULEb03l
TnjetAUELNvtcPrS2zy+x238i40xvPTPjHaYKtBSjeO5lMAm39p7vODpsrx6Cc0n
mHhUdZOYuvwjHz2BhnooW8nKnaNApwi9Rl0FQTLbplH+cRJ4A5JR5jIxYsHqpfEc
wbKCAL0+3QzI0z26vXb4cxu/TjfFl+Yhs+/wYFPi+Rj0T/ZfZdrr2lMg1TZfaXzT
42SHx9ohqoMeveaI5BF4vWjLqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1LV6Lk
ULumdYJsTnc2/RVGbCwkMB8GA1UdIwQYMBaAFELCy6R/rTif0YthyuIkctYeDqiW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDQzNi8xNTYxQkVERTc2
NTcxMUVGOEJGQzdBMTFDNEY5QUUwMi9Rc0xMcEgtdE9KX1JpMkhLNGlSeTFoNE9x
SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FzTExwSC10T0pfUmkySEs0aVJ5MWg0T3FKWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MDQzNi8xNTYxQkVERTc2NTcxMUVGOEJGQzdBMTFDNEY5QUUwMi9Rc0xMcEgtdE9K
X1JpMkhLNGlSeTFoNE9xSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBCS47MFhs4V5wUGQTEqtZvw3Yc2t3luPSY5VTZqPAi38eSpFr95h2w
mklTg2KQB1GDoVN2HuDGO94uefLy2ffCMgaA4JbXYWspOaY5d5NHEScs2gUFMIGW
4cI7l+4egbkpku7Oywp4pnHU8CDn3lsIt9Lk9x1wbdX1tJwMKZabs68i3oU6LK35
lk6Bk4OcirMu50VACtp2Q5lnqQoD3NadruUb+HjkjvnpuYoKXAbUCR2xYf1GG+Gj
u9FfMzEuMq44Tys1EAiwi2kYVK1TxF3Uo3NVoIB2IUqvJsGqcJ65RQ2e1pEPK7AZ
lPcLrns/wGE2nzzWNx0X0eWB+GbxgQfQ
-----END CERTIFICATE-----
Generated at Sun Jan 18 03:17:26 2026 by rpki-client