This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
File: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft (raw, json)
Hash identifier: 7PPRI8ND6rBPKyIkrwg+hAQgFPNOYvoXL7L9szhy6vo=
Subject key identifier: 1B:7E:09:BF:84:E8:93:6E:28:B7:5C:95:E1:32:1F:6F:F6:99:6A:79
Authority key identifier: 43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4
Certificate issuer: /CN=A91978DD/serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4
Certificate serial: 17B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
Manifest number: 17A7
Signing time: Mon 26 Jan 2026 16:19:42 +0000
Manifest this update: Mon 26 Jan 2026 16:19:41 +0000
Manifest next update: Mon 02 Feb 2026 16:19:41 +0000
Files and hashes: 1: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl (hash: 2LfHbHL92k4IQow9XfQaxb3pB6z5/VGOcVvDcOWS0+s=)
2: 16ABD910E0C111E7BA64DE22C4F9AE02.roa (hash: lHKNLWfYNI9WQcRtKzmUJBeHs5miXzhGVpBtJH3ux+Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl
rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Feb 2026 16:19:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6065 (0x17b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91978DD, serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4
Validity
Not Before: Jan 26 16:19:41 2026 GMT
Not After : Feb 2 16:19:41 2026 GMT
Subject: CN=6977941e-f940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:ce:ae:f5:3a:c7:9a:46:a1:25:0a:87:06:
a2:8b:d8:03:70:bd:51:ec:04:1b:6c:e7:4d:f0:54:
5c:96:fd:13:ae:1e:32:13:1f:33:ba:b1:56:d3:19:
2c:9f:93:c9:cd:c8:d8:e0:76:aa:fe:c7:4a:01:2c:
9b:14:43:3d:51:48:0e:3c:6d:d6:10:88:48:6e:03:
81:35:84:e5:35:f0:a5:b2:1e:99:ae:8d:97:12:10:
02:6a:cc:ef:72:57:0e:d6:31:f1:09:60:6e:6b:31:
14:46:7d:46:14:0a:40:54:8c:d3:88:02:14:00:b8:
cd:36:34:ad:cb:c5:d6:57:a2:45:2b:5d:9c:73:86:
66:46:9d:11:e9:99:b3:a5:ab:59:1b:62:07:89:ec:
65:36:9d:ba:0f:4c:7f:44:be:15:14:2e:85:38:a8:
0f:17:2e:8d:9b:9f:eb:1c:4f:27:59:74:9c:ee:f4:
7d:f6:9c:c4:23:86:0f:3c:f1:d1:12:9b:f1:77:8b:
9a:04:27:f7:9b:a2:54:f6:40:26:6b:13:31:9e:aa:
1a:ee:b6:c8:dd:79:bd:03:76:ed:f4:6b:c5:fa:30:
11:14:b2:c0:d7:e3:62:75:fd:42:b3:a4:d7:f3:6c:
10:1b:3c:a8:80:bf:b8:2f:52:5b:84:3e:82:40:4d:
60:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7E:09:BF:84:E8:93:6E:28:B7:5C:95:E1:32:1F:6F:F6:99:6A:79
X509v3 Authority Key Identifier:
keyid:43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e7:05:5c:2b:01:d0:39:9b:12:2d:17:a0:33:f2:eb:74:ce:
10:13:38:58:78:97:bd:f7:bc:d0:0e:3f:5a:c6:7b:bd:9e:11:
ed:78:9e:8c:9c:93:f5:42:fa:34:50:de:ec:5d:4e:53:7b:9a:
4e:bc:ee:49:f3:b9:1e:60:2f:99:c5:ff:55:53:10:64:0a:51:
77:c9:da:87:bb:58:f7:34:0d:dc:50:7b:23:2a:f2:47:b9:2e:
df:b3:14:a8:be:ab:0c:0f:56:24:6f:af:0e:04:fc:f2:9b:e4:
3a:4b:74:0f:44:35:bd:f6:15:c4:0d:b7:df:d1:70:a9:89:29:
5b:ea:ea:e8:e9:1f:7c:e7:68:28:04:89:1e:b2:2b:6e:5b:54:
9f:b0:a6:48:20:cc:b8:71:56:3e:d3:60:6e:b0:5c:46:c1:e3:
1d:6a:69:f6:cd:57:a0:06:ac:57:33:8a:02:8c:80:54:5d:06:
d2:16:bf:38:1a:3a:e6:8f:0c:fc:86:a2:ae:55:79:c7:a5:9c:
93:36:56:b4:e3:a7:c0:2e:00:4b:e0:12:16:e1:61:87:7f:cb:
0c:e3:b4:34:89:f5:92:94:db:2e:0f:4e:4e:ad:a2:25:ee:26:
0d:33:04:9c:15:af:ce:be:71:93:70:98:02:bb:8b:b1:7b:55:
65:8c:5c:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICF7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTc4REQxMTAvBgNVBAUTKDQzRDI1MEQ1QzFGNjA5RUQxNzRERkYyNjQzMDFEQjQ1
QkUyNUIxQjQwHhcNMjYwMTI2MTYxOTQxWhcNMjYwMjAyMTYxOTQxWjAYMRYwFAYD
VQQDDA02OTc3OTQxZS1mOTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsoPOrvU6x5pGoSUKhwaii9gDcL1R7AQbbOdN8FRclv0Trh4yEx8zurFW0xks
n5PJzcjY4Haq/sdKASybFEM9UUgOPG3WEIhIbgOBNYTlNfClsh6Zro2XEhACaszv
clcO1jHxCWBuazEURn1GFApAVIzTiAIUALjNNjSty8XWV6JFK12cc4ZmRp0R6Zmz
patZG2IHiexlNp26D0x/RL4VFC6FOKgPFy6Nm5/rHE8nWXSc7vR99pzEI4YPPPHR
Epvxd4uaBCf3m6JU9kAmaxMxnqoa7rbI3Xm9A3bt9GvF+jARFLLA1+Nidf1Cs6TX
82wQGzyogL+4L1JbhD6CQE1gNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBt+Cb+E
6JNuKLdcleEyH2/2mWp5MB8GA1UdIwQYMBaAFEPSUNXB9gntF03/JkMB20W+JbG0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzhERC9DQzE4RDlENEUw
QjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNlMFhUZjhtUXdIYlJiNGxz
YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1E5SlExY0gyQ2UwWFRmOG1Rd0hiUmI0bHNiUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzhERC9DQzE4RDlENEUwQjYxMUU3OTlBMkI2ODJDNEY5QUUwMi9ROUpRMWNIMkNl
MFhUZjhtUXdIYlJiNGxzYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCK5wVcKwHQOZsSLRegM/LrdM4QEzhYeJe997zQDj9axnu9nhHteJ6M
nJP1Qvo0UN7sXU5Te5pOvO5J87keYC+Zxf9VUxBkClF3ydqHu1j3NA3cUHsjKvJH
uS7fsxSovqsMD1Ykb68OBPzym+Q6S3QPRDW99hXEDbff0XCpiSlb6uro6R9852go
BIkesituW1SfsKZIIMy4cVY+02BusFxGweMdamn2zVegBqxXM4oCjIBUXQbSFr84
Gjrmjwz8hqKuVXnHpZyTNla046fALgBL4BIW4WGHf8sM47Q0ifWSlNsuD05OraIl
7iYNMwScFa/OvnGTcJgCu4uxe1VljFx6
-----END CERTIFICATE-----
Generated at Tue Jan 27 08:50:58 2026 by rpki-client