This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
File: rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft (raw, json)
Hash identifier: l4badJjCDZs93B3pdKMx3rcPqvlV6zObNk997JOjFsg=
Subject key identifier: 21:EC:64:93:B6:0C:B0:29:C4:BB:2D:AC:CC:2F:50:8F:F6:89:1A:7D
Authority key identifier: AD:07:02:40:29:3A:CD:C5:24:CA:13:36:58:2D:70:C2:19:FC:C7:E0
Certificate issuer: /CN=A917799C/serialNumber=AD070240293ACDC524CA1336582D70C219FCC7E0
Certificate serial: 69
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
Manifest number: 68
Signing time: Sat 17 Jan 2026 06:00:38 +0000
Manifest this update: Sat 17 Jan 2026 06:00:38 +0000
Manifest next update: Sat 24 Jan 2026 06:00:38 +0000
Files and hashes: 1: rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl (hash: 5GPnQCLl2z3lNKv7IJpR+I8Sjwo8dPHUVOaEbK6adsM=)
2: 1A10CA38554511F0BE9D290EC4F9AE02.roa (hash: +cgq7m1m+3yCjZbwy4Qcjluah/ZFibIuVd5FM/B6ZOU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl
rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Jan 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917799C, serialNumber=AD070240293ACDC524CA1336582D70C219FCC7E0
Validity
Not Before: Jan 17 06:00:38 2026 GMT
Not After : Jan 24 06:00:38 2026 GMT
Subject: CN=696b2586-3305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:03:bc:06:81:19:03:fc:21:b3:2b:55:77:
3a:68:56:00:81:b0:3c:d9:29:f0:0b:6e:d8:24:79:
5d:e9:a4:d3:e4:f6:f8:44:de:52:f7:b4:47:37:de:
a4:ef:93:73:da:a3:9d:26:fb:c4:70:55:67:a4:d1:
5f:3a:64:af:08:6e:50:22:45:34:d3:42:08:cb:d9:
b6:8b:34:ae:33:ff:92:4d:c5:a7:96:30:1c:30:29:
5d:c4:d8:25:f4:a3:77:a7:8e:fe:4b:84:ae:c5:8d:
59:9e:ec:4b:cc:35:86:cd:83:ff:8d:1e:d2:92:30:
04:a3:50:7b:27:10:c4:de:d1:62:67:3e:ae:dd:af:
06:9f:1d:d7:8e:5a:c8:72:31:15:5b:23:74:7f:b5:
fa:88:f0:9a:30:1a:fc:9f:6a:7e:77:73:3f:67:ad:
13:79:96:40:92:fc:ed:64:2b:9b:89:9d:b3:60:d2:
46:60:cd:2a:dc:ff:2b:5f:d5:5b:2d:d1:3b:f3:de:
64:90:66:cf:ae:9b:b6:44:30:f4:f5:51:ec:a2:d8:
03:71:0a:de:2b:82:0f:75:21:77:2b:ba:6a:dc:18:
fb:db:9e:05:4b:05:f6:c3:b1:81:ef:7e:b3:4c:2b:
29:d5:6c:07:26:d5:0d:fe:b8:d2:a7:f6:47:a6:f0:
da:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EC:64:93:B6:0C:B0:29:C4:BB:2D:AC:CC:2F:50:8F:F6:89:1A:7D
X509v3 Authority Key Identifier:
keyid:AD:07:02:40:29:3A:CD:C5:24:CA:13:36:58:2D:70:C2:19:FC:C7:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:db:7c:d9:20:d0:2b:3c:c6:57:95:af:84:2f:0b:4b:ce:50:
5d:a4:45:6b:09:f1:21:37:d3:70:e4:d9:02:3b:1a:e7:eb:5c:
03:67:00:64:4a:87:4e:02:16:e1:bd:93:57:c3:c3:bc:b4:9d:
dd:40:8b:53:9b:19:8d:11:d3:08:4b:a5:ef:a6:7b:3c:47:f6:
5f:f8:58:7c:59:6d:bd:07:f9:e6:2b:76:e3:1c:a4:8c:d2:bf:
3f:92:ed:4d:dd:d7:60:95:1f:97:d5:6c:87:ce:1f:84:2b:98:
b5:ca:4b:0e:cc:9e:99:43:3c:51:ae:fa:67:5a:9f:6a:4e:0b:
24:7c:bc:1d:54:3d:bf:66:00:87:eb:db:8c:31:34:30:cc:dc:
28:18:e9:05:4d:9c:3e:b6:fe:25:5a:70:11:89:b5:2c:5f:c2:
a9:32:b7:8e:28:91:65:76:8e:ba:79:35:fd:5a:ae:b8:95:79:
fd:61:86:b7:b1:4b:f5:b3:87:f1:5e:be:6b:0e:44:7e:26:59:
21:50:37:e3:cd:e2:a3:11:f1:7c:ba:35:e0:4a:9c:23:3f:46:
e0:19:30:9c:e8:2f:84:05:e8:a1:3b:5c:19:7f:1f:6c:e9:36:
05:8a:18:d5:c1:b8:e2:9e:2d:4f:69:d4:54:ee:ec:ac:41:d2:
3a:ff:d9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 03:17:14 2026 by rpki-client