This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
File: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft (raw, json)
Hash identifier: L/4GZ8kUc62BWZRP+u7FAU2ducbalI+Ceg/mFQzR6I4=
Subject key identifier: 47:C0:ED:88:3A:FF:4C:91:C1:E2:AA:21:1A:33:D7:96:6D:FE:B1:4B
Authority key identifier: A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D
Certificate issuer: /CN=A9164164/serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
Certificate serial: DF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
Manifest number: DD
Signing time: Sat 17 Jan 2026 04:41:44 +0000
Manifest this update: Sat 17 Jan 2026 04:41:43 +0000
Manifest next update: Sat 24 Jan 2026 04:41:43 +0000
Files and hashes: 1: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl (hash: RRun/c5W7OgpTqhfpPXtTpPSo/sb2skCjwE+GDsCkSw=)
2: F1487C2AA18211EFA2B7E923C4F9AE02.roa (hash: 2UPUWDlrZ248Wr3wYIIyX701FfOmCl7Va0oPhZdECKg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl
rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 04:41:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164164, serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
Validity
Not Before: Jan 17 04:41:43 2026 GMT
Not After : Jan 24 04:41:43 2026 GMT
Subject: CN=696b1308-b91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9a:da:2d:d6:6b:d1:e4:2b:02:80:70:af:b0:
92:c9:5c:21:da:a8:57:7e:01:06:54:71:d6:0d:d5:
bc:d6:dd:2c:fc:8b:82:41:e9:00:ab:45:fe:73:36:
b9:6d:8d:be:92:a2:7b:6a:67:04:d2:cd:03:b5:31:
83:47:5f:95:aa:6a:ab:ae:5e:51:d8:d0:80:b8:5d:
2a:22:57:34:de:a0:73:dd:08:28:87:4e:fc:ad:6b:
d0:33:dd:a0:9a:6c:72:f8:67:3a:7d:41:7f:76:6b:
9c:5f:12:59:ea:97:09:21:44:7d:31:fd:79:8a:89:
1d:f5:2b:7b:a4:c7:b9:dc:8b:45:7f:b4:e5:57:62:
f7:22:b9:f5:21:e7:d0:cf:dd:5e:a7:f7:1f:5b:50:
f4:29:16:72:7b:1f:13:5c:71:ea:e2:ac:d3:8f:76:
f8:3b:0f:78:d9:56:b2:2f:1c:81:d7:20:ad:13:5c:
c6:7a:2b:51:10:5f:83:ca:1c:3e:2a:ae:f0:9a:07:
ee:1f:6d:5a:e0:c3:ea:10:ba:11:0b:6b:1f:d3:59:
8f:91:f4:27:29:1c:aa:4f:66:24:de:f8:30:29:a0:
10:27:bb:d0:8b:8f:61:c8:bf:03:54:d1:f4:71:08:
57:27:b2:47:61:29:ea:26:19:19:6b:87:8a:d1:47:
30:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C0:ED:88:3A:FF:4C:91:C1:E2:AA:21:1A:33:D7:96:6D:FE:B1:4B
X509v3 Authority Key Identifier:
keyid:A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:73:65:db:84:d6:32:7e:1c:2e:f2:de:01:4e:3d:42:a3:7c:
0f:ea:0b:de:01:81:ab:8a:eb:2f:50:02:ad:a4:9c:e0:d4:0b:
3e:37:d7:48:c7:ed:e8:56:4d:48:8b:36:d1:60:77:78:90:9f:
4e:0d:6a:d3:84:8f:8e:02:2a:1d:40:9f:01:e7:d1:8c:13:d0:
cf:e0:41:de:48:2e:2f:a0:51:ea:42:c9:73:ec:f4:7b:f8:8a:
b7:c6:14:89:3c:a8:3b:c4:73:52:aa:a7:e1:3a:a8:fb:3d:9b:
d4:3b:93:80:9b:9e:5d:0e:48:0a:a3:53:3d:17:e6:ad:ca:b2:
22:4f:3d:cb:7a:cb:f8:2e:82:8f:bf:7d:ad:1c:2d:05:a2:c4:
68:aa:b3:ec:e9:9e:31:e7:91:ad:f6:ca:77:dd:5e:ca:b7:17:
00:2e:cc:12:56:e5:be:80:90:14:c1:aa:74:e9:b9:02:2c:5b:
09:ba:8c:46:4a:41:9a:33:c3:6f:63:6f:e6:ca:8f:a6:e1:3d:
f1:a6:54:61:88:3f:27:c7:53:81:ac:61:7f:a0:3f:b0:53:9f:
48:97:f2:d6:eb:7b:1a:0a:f2:c5:51:46:e9:1c:31:6f:0b:52:
ce:d9:83:04:62:9a:12:94:c3:df:02:02:fc:11:73:40:29:53:
ab:74:49:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:17:13 2026 by rpki-client