This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft File: Qe0RfxoN1CRX1JR491zcsoZTpx8.mft (raw, json) Hash identifier: pvSwkIxgRQG8tEg2DS60sING7UlYbPx/nfj/omubpRw= Subject key identifier: AC:35:03:84:E4:77:49:8A:0B:9B:5C:16:5E:02:5A:5F:11:35:69:73 Authority key identifier: 41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F Certificate issuer: /CN=A917C09A/serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft Manifest number: 08 Signing time: Sat 17 Jan 2026 07:04:32 +0000 Manifest this update: Sat 17 Jan 2026 07:04:32 +0000 Manifest next update: Sat 24 Jan 2026 07:04:32 +0000 Files and hashes: 1: Qe0RfxoN1CRX1JR491zcsoZTpx8.crl (hash: D1fpn93iqRmmv5Y6zaSuaMfgPvviThVU7EmRrl00cfY=) 2: 0C544A5EEAD811F0B5BDA80D656F56BC.roa (hash: 5Q0WBVLw+AXUIyH8ywYoKJyU6uay7s/bBtZ6b3V7Saw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 07:04:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C09A, serialNumber=41ED117F1A0DD42457D49478F75CDCB28653A71F Validity Not Before: Jan 17 07:04:32 2026 GMT Not After : Jan 24 07:04:32 2026 GMT Subject: CN=696b3480-dd22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:31:40:f5:dc:61:b9:ef:4e:27:2c:1d:87:03: 5f:90:6c:d4:b3:2e:99:63:ec:f4:80:79:b4:40:12: 93:c9:30:28:74:d1:b5:d9:bc:57:bc:d9:15:7f:d5: 51:31:5c:63:dc:10:fc:ec:15:c6:0a:d2:6c:2e:60: e1:90:c5:a0:48:da:f0:52:41:69:ad:27:c7:5f:a8: ed:73:a6:61:d0:c4:1f:18:71:c4:62:45:6e:b8:1a: 78:49:c6:35:9e:f0:ec:2a:c5:6b:2f:54:78:28:3a: ce:f3:88:64:85:bb:ca:80:d8:17:1d:58:fe:c3:d8: 50:bb:ed:7c:3c:52:fd:a4:b8:b5:9f:61:b2:af:ea: 4f:01:0d:7a:03:3d:d2:fb:38:66:53:8a:37:47:e1: ea:f2:fa:74:1e:8d:4a:59:fb:42:4e:a8:07:d6:4c: 52:0c:4e:52:44:66:9a:2d:95:df:be:13:01:db:81: c3:cf:92:83:5d:74:84:b2:1f:5d:0a:a8:4a:8e:e1: 39:50:a7:e9:a2:b4:e0:62:c5:fd:e3:45:13:da:d2: 56:4b:dc:51:55:00:35:be:29:00:23:de:5b:6a:d4: 05:7c:0d:09:55:c1:9d:3f:42:78:e2:92:95:3d:0d: 4d:b4:5e:77:30:a7:00:d9:c4:71:13:5d:c3:7d:95: 28:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:35:03:84:E4:77:49:8A:0B:9B:5C:16:5E:02:5A:5F:11:35:69:73 X509v3 Authority Key Identifier: keyid:41:ED:11:7F:1A:0D:D4:24:57:D4:94:78:F7:5C:DC:B2:86:53:A7:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qe0RfxoN1CRX1JR491zcsoZTpx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C09A/B2966D9EEAD711F0B9CBFBE6646F56BC/Qe0RfxoN1CRX1JR491zcsoZTpx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:4e:ed:de:b8:d5:32:46:2d:06:f3:37:d0:e3:32:c7:6d:d6: c1:78:25:c5:fe:ab:83:02:2c:83:e7:94:0f:d5:ca:1c:d3:54: 0f:99:f5:21:79:f1:f2:c6:e5:18:57:a2:db:d8:0b:75:3f:cd: 3c:eb:64:90:6c:9a:29:d8:db:9d:3c:86:24:d9:78:18:db:3e: 1f:36:c4:ef:fa:16:74:3f:01:47:44:e9:36:a1:58:05:16:21: 79:ad:bf:3e:c0:e0:2e:4a:49:42:1e:26:f0:7d:77:91:20:f5: 98:f6:53:ee:bd:d9:e7:e6:7d:46:7b:b2:06:14:d2:88:a9:a7: 7c:f7:e0:df:d1:05:d3:d0:13:34:5e:dc:87:65:f4:c7:76:80: f0:6c:63:8a:b0:be:d0:7c:62:a8:14:53:89:3f:7c:81:91:93: 63:b3:eb:48:55:63:b9:b9:fd:30:9d:f6:38:dd:cd:00:b3:9a: 11:a6:72:93:c4:75:e2:2b:41:ee:5f:7c:f0:22:be:98:3c:d4: 97:0a:96:4b:0b:4c:0d:e3:85:85:88:5c:62:de:3d:28:ed:1a: 99:fd:03:5a:f6:b3:cb:f9:4f:f7:00:18:0a:07:6a:10:da:4f: c8:e9:bf:86:f8:7c:8d:72:ca:b5:70:4c:82:1e:ce:2e:12:1c: de:b6:a1:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE3 QzA5QTExMC8GA1UEBRMoNDFFRDExN0YxQTBERDQyNDU3RDQ5NDc4Rjc1Q0RDQjI4 NjUzQTcxRjAeFw0yNjAxMTcwNzA0MzJaFw0yNjAxMjQwNzA0MzJaMBgxFjAUBgNV BAMMDTY5NmIzNDgwLWRkMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyMUD13GG5704nLB2HA1+QbNSzLplj7PSAebRAEpPJMCh00bXZvFe82RV/1VEx XGPcEPzsFcYK0mwuYOGQxaBI2vBSQWmtJ8dfqO1zpmHQxB8YccRiRW64GnhJxjWe 8OwqxWsvVHgoOs7ziGSFu8qA2BcdWP7D2FC77Xw8Uv2kuLWfYbKv6k8BDXoDPdL7 OGZTijdH4ery+nQejUpZ+0JOqAfWTFIMTlJEZpotld++EwHbgcPPkoNddISyH10K qEqO4TlQp+mitOBixf3jRRPa0lZL3FFVADW+KQAj3ltq1AV8DQlVwZ0/QnjikpU9 DU20XncwpwDZxHETXcN9lSj9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrDUDhOR3 SYoLm1wWXgJaXxE1aXMwHwYDVR0jBBgwFoAUQe0RfxoN1CRX1JR491zcsoZTpx8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMDlBL0IyOTY2RDlFRUFE NzExRjBCOUNCRkJFNjY0NkY1NkJDL1FlMFJmeG9OMUNSWDFKUjQ5MXpjc29aVHB4 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUWUwUmZ4b04xQ1JYMUpSNDkxemNzb1pUcHg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD MDlBL0IyOTY2RDlFRUFENzExRjBCOUNCRkJFNjY0NkY1NkJDL1FlMFJmeG9OMUNS WDFKUjQ5MXpjc29aVHB4OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAdO7d641TJGLQbzN9DjMsdt1sF4JcX+q4MCLIPnlA/VyhzTVA+Z9SF5 8fLG5RhXotvYC3U/zTzrZJBsminY2508hiTZeBjbPh82xO/6FnQ/AUdE6TahWAUW IXmtvz7A4C5KSUIeJvB9d5Eg9Zj2U+692efmfUZ7sgYU0oipp3z34N/RBdPQEzRe 3Idl9Md2gPBsY4qwvtB8YqgUU4k/fIGRk2Oz60hVY7m5/TCd9jjdzQCzmhGmcpPE deIrQe5ffPAivpg81JcKlksLTA3jhYWIXGLePSjtGpn9A1r2s8v5T/cAGAoHahDa T8jpv4b4fI1yyrVwTIIezi4SHN62oWY= -----END CERTIFICATE-----Generated at Sun Jan 18 03:13:07 2026 by rpki-client