This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
File: qoXM0t0-HAA79y_1PljHIA588Kg.mft (raw, json)
Hash identifier: ezB7BIyACTg7YbtqRAfKvwOC/jI1rk8/8T9LT8h4ZrI=
Subject key identifier: 7F:24:03:C5:E5:1E:FB:E4:54:1C:78:D4:27:77:B6:6A:C2:58:44:79
Authority key identifier: AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8
Certificate issuer: /CN=A916D29F/serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
Certificate serial: 0F19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
Manifest number: 0EF1
Signing time: Tue 20 Jan 2026 18:14:52 +0000
Manifest this update: Tue 20 Jan 2026 18:14:52 +0000
Manifest next update: Tue 27 Jan 2026 18:14:52 +0000
Files and hashes: 1: qoXM0t0-HAA79y_1PljHIA588Kg.crl (hash: 8IyQlqHs5bh3qBCTNYP+EIgN4zjWccf2HSKxzG3iXCg=)
2: 3FCD146C97D911F080901462C4F9AE02.roa (hash: QH3D7T2VUR34bpoi2uBU+MYzIEn1N1uIndF0SKzEq0M=)
3: FA9D67D07C5711F0AD80C25CC4F9AE02.roa (hash: tIh+onx7P64PUXbw83XM2/5VcYFgpj0I1pBR1iA0x2A=)
4: AA135886D75411EFA0D6BE34C4F9AE02.roa (hash: xOb31eTj6qQweD06rQOZ68BLh7/cOt9toZkwNGiZiWE=)
5: 8D655C9656A511EA8FAB974DC4F9AE02.roa (hash: 7f3lV5fclUFk4HpC8eAZ02uUzhTxBR66fxeDdnxYpgw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl
rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 18:14:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3865 (0xf19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D29F, serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
Validity
Not Before: Jan 20 18:14:52 2026 GMT
Not After : Jan 27 18:14:52 2026 GMT
Subject: CN=696fc61c-c924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:21:ba:b3:fe:4b:0a:4c:51:95:5a:1d:4e:51:
bc:0c:05:57:ad:8b:63:e6:45:c8:12:df:44:c8:d9:
85:1b:1d:69:af:ad:e4:a3:23:c1:c7:be:e0:4e:d6:
3c:4b:6a:1e:ed:45:e4:a1:1a:3b:42:5c:c2:92:40:
2d:1b:4d:c3:e3:45:d1:25:80:93:17:64:ec:cb:5a:
70:6c:93:b2:38:6a:59:8b:4f:1e:bc:a8:a6:2e:e9:
40:d3:c1:37:c4:b5:93:00:86:1e:02:04:19:8b:69:
95:2f:b0:16:5a:a6:48:74:d6:54:47:47:9c:3c:5a:
be:2c:45:45:d0:cb:7f:de:04:b3:58:e6:74:1c:89:
29:86:6b:b7:e8:44:74:0b:21:93:96:68:67:6c:0d:
22:ea:02:cf:ad:f7:91:35:27:ce:a6:e8:8f:9c:e3:
fe:11:2f:bd:bd:59:4a:78:78:d7:4d:9d:8f:7e:32:
ac:3b:33:ce:13:cb:99:84:d5:73:e2:e6:64:3e:e4:
64:36:fb:80:8b:fa:56:2f:1b:d8:61:f9:5c:af:e4:
0b:a1:38:96:8a:25:80:0a:b4:f3:b3:d3:54:4d:55:
ba:3e:4e:48:0e:73:c4:6f:45:97:93:36:97:46:2e:
e9:61:a7:69:49:4e:1e:97:bd:c1:4b:71:91:88:12:
62:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:24:03:C5:E5:1E:FB:E4:54:1C:78:D4:27:77:B6:6A:C2:58:44:79
X509v3 Authority Key Identifier:
keyid:AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:a7:77:4f:2d:a8:65:b2:8f:91:46:ce:06:15:aa:80:2f:a7:
83:39:6f:4d:56:40:68:d7:f2:e0:a4:f1:7d:73:90:ab:e2:20:
c7:9d:77:9e:ea:6f:96:ee:22:6e:3a:34:a1:ae:8d:a3:69:1d:
dc:8b:99:ee:34:d9:fd:81:fa:18:ae:e4:6c:ca:16:61:46:21:
99:0f:26:64:43:ee:ef:c7:4e:78:eb:3e:53:33:29:ee:c7:ba:
4c:cf:84:29:1c:a6:41:b6:88:52:bc:72:03:a8:b9:eb:1c:a6:
da:5b:22:b8:07:3b:8e:de:41:25:bf:cd:12:d5:48:10:5c:ce:
55:e9:92:c2:69:0b:24:e7:b0:60:0b:14:c7:5a:25:c9:f7:07:
52:62:9f:a1:83:9d:b0:37:22:25:21:9b:5e:e3:f6:23:34:d9:
a4:8e:62:44:af:a9:72:78:be:ef:db:c1:42:6f:9c:19:e9:5f:
b7:f6:69:55:67:88:0e:05:85:77:82:e1:cb:9b:92:ab:2b:dd:
24:8e:e3:e9:ea:1c:24:59:d8:9f:a4:17:7f:c2:43:46:f5:37:
b9:78:de:8e:0f:52:8b:2f:c4:9c:6c:a9:e2:b7:ed:e8:2c:2f:
0e:e4:2f:93:0f:c1:c3:b2:95:90:bd:e9:e4:dd:ec:86:c8:2c:
3e:d8:0f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 02:38:04 2026 by rpki-client