This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft File: QL0p_yZodz0y7qDscGYCir7gy54.mft (raw, json) Hash identifier: CLIhYVtRKUCDjN18ISKAHTVZrC22CNuksj1FiFm4w60= Subject key identifier: BA:9B:B6:2F:F7:8C:61:5A:4F:70:D4:25:DC:1B:DF:40:39:2F:FE:78 Authority key identifier: 40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E Certificate issuer: /CN=A91840A8/serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E Certificate serial: 0687 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft Manifest number: 0687 Signing time: Fri 16 Jan 2026 21:46:57 +0000 Manifest this update: Fri 16 Jan 2026 21:46:57 +0000 Manifest next update: Fri 23 Jan 2026 21:46:57 +0000 Files and hashes: 1: QL0p_yZodz0y7qDscGYCir7gy54.crl (hash: qcIoU5IHUWSJcHJnC5pPvBYMEPrZd9dCkJhlJOes3tU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 21:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1671 (0x687) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91840A8, serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E Validity Not Before: Jan 16 21:46:57 2026 GMT Not After : Jan 23 21:46:57 2026 GMT Subject: CN=696ab1d1-22f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ce:0e:92:cc:f7:04:22:b5:fe:75:ac:68:82: ba:ad:c6:6f:aa:82:89:15:16:df:47:e5:fd:2b:ac: d5:93:06:78:ac:c3:87:1a:5f:fe:b4:5e:c0:fb:9c: b5:01:8e:9d:2e:1f:34:c1:ca:9b:cf:4b:b5:91:68: c7:9a:8c:2d:28:cb:89:ad:d3:e9:5f:e3:78:dd:09: f4:e9:1f:ed:04:e8:f2:04:b9:64:bb:a4:2c:23:d9: 41:62:65:7e:68:e1:02:dc:76:0a:9c:c6:1c:44:66: 13:b2:e0:ee:48:41:00:4d:de:01:02:2b:f8:2b:dd: 93:e5:42:e3:f1:cd:55:4d:a9:a4:da:9a:50:ab:fe: 3d:53:db:1b:f3:97:00:01:f8:12:1b:93:ba:72:ff: 1b:89:b5:83:d3:a5:18:44:c4:e5:47:a8:ba:99:73: 28:4d:0d:e0:77:9a:8d:0f:79:d5:a9:96:16:1e:34: d7:69:fa:ff:08:5f:c8:4c:f6:de:13:8f:37:9d:40: a7:f8:55:83:4a:f4:40:19:bf:7b:c8:7b:23:68:1a: b8:db:11:dc:29:d6:cf:e6:b1:f7:b3:1a:7f:0b:61: 03:b0:8d:5e:5d:cf:bf:4b:8b:de:49:43:6c:01:78: 83:90:db:a9:ca:9b:5d:dc:c8:cb:2d:e8:64:eb:88: b6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9B:B6:2F:F7:8C:61:5A:4F:70:D4:25:DC:1B:DF:40:39:2F:FE:78 X509v3 Authority Key Identifier: keyid:40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:b1:82:ce:49:c1:7c:6b:3f:6d:bc:3f:cf:9c:cf:81:b9:94: 76:83:f8:2c:ef:93:6b:e2:75:03:ae:18:aa:26:0d:42:77:77: e5:95:26:48:cb:af:48:11:7d:73:6d:dd:06:e2:bb:ae:1a:47: d9:5b:58:7c:b1:c8:bf:32:e9:f4:05:a1:51:c3:a0:9a:cf:c1: e2:f7:91:5c:f4:8e:6f:34:40:5b:6e:51:54:43:fa:4c:63:25: f6:70:6c:d0:72:f8:01:56:61:c6:18:e6:4b:c7:46:1d:c5:3e: 82:8a:d2:64:ff:43:1a:e4:df:82:0c:cd:46:b2:09:bb:5d:6b: 8b:46:1c:5a:ed:9a:cf:23:55:4e:3e:41:bf:fb:a6:78:2c:ac: 95:6d:ad:16:f1:49:3f:fe:f2:7e:d3:56:98:d8:6e:49:02:93: 24:3b:07:a0:72:da:c3:f5:28:db:45:00:2c:85:9b:eb:7b:d1: 62:9a:0c:e2:2d:62:66:8b:8a:cb:ec:da:72:7f:aa:cd:5b:bd: 36:c0:ca:ad:bc:9b:d5:59:e4:9e:9f:6e:0e:06:b0:a2:92:85: 97:94:c7:2b:82:16:5e:67:43:29:d6:89:93:94:4c:56:49:70: 86:b6:14:5f:de:75:e0:9c:c2:38:2b:92:be:33:91:8d:a4:a3: e7:2a:2e:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwQTgxMTAvBgNVBAUTKDQwQkQyOUZGMjY2ODc3M0QzMkVFQTBFQzcwNjYwMjhB QkVFMENCOUUwHhcNMjYwMTE2MjE0NjU3WhcNMjYwMTIzMjE0NjU3WjAYMRYwFAYD VQQDDA02OTZhYjFkMS0yMmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwM4Oksz3BCK1/nWsaIK6rcZvqoKJFRbfR+X9K6zVkwZ4rMOHGl/+tF7A+5y1 AY6dLh80wcqbz0u1kWjHmowtKMuJrdPpX+N43Qn06R/tBOjyBLlku6QsI9lBYmV+ aOEC3HYKnMYcRGYTsuDuSEEATd4BAiv4K92T5ULj8c1VTamk2ppQq/49U9sb85cA AfgSG5O6cv8bibWD06UYRMTlR6i6mXMoTQ3gd5qND3nVqZYWHjTXafr/CF/ITPbe E483nUCn+FWDSvRAGb97yHsjaBq42xHcKdbP5rH3sxp/C2EDsI1eXc+/S4veSUNs AXiDkNupyptd3MjLLehk64i2gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqbti/3 jGFaT3DUJdwb30A5L/54MB8GA1UdIwQYMBaAFEC9Kf8maHc9Mu6g7HBmAoq+4Mue MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC82NzkwNzczNEEx OTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6MHk3cURzY0dZQ2lyN2d5 NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FMMHBfeVpvZHoweTdxRHNjR1lDaXI3Z3k1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDBBOC82NzkwNzczNEExOTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6 MHk3cURzY0dZQ2lyN2d5NTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBksYLOScF8az9tvD/PnM+BuZR2g/gs75Nr4nUDrhiqJg1Cd3fllSZI y69IEX1zbd0G4ruuGkfZW1h8sci/Mun0BaFRw6Caz8Hi95Fc9I5vNEBbblFUQ/pM YyX2cGzQcvgBVmHGGOZLx0YdxT6CitJk/0Ma5N+CDM1Gsgm7XWuLRhxa7ZrPI1VO PkG/+6Z4LKyVba0W8Uk//vJ+01aY2G5JApMkOwegctrD9SjbRQAshZvre9Fimgzi LWJmi4rL7Npyf6rNW702wMqtvJvVWeSen24OBrCikoWXlMcrghZeZ0Mp1omTlExW SXCGthRf3nXgnMI4K5K+M5GNpKPnKi7m -----END CERTIFICATE-----Generated at Sun Jan 18 03:17:14 2026 by rpki-client