This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft File: Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft (raw, json) Hash identifier: pUrgr5bPfJcA24ycmLM4Gifi7VNaHSJ4uqAddvp9tGc= Subject key identifier: CF:46:0A:A1:FE:65:F5:3C:BC:A9:05:55:BC:6F:82:42:F3:BB:73:0B Authority key identifier: 43:EA:F3:0C:23:0C:6E:EE:6E:35:4D:C0:37:72:A6:EE:53:D5:06:85 Certificate issuer: /CN=A91988EB/serialNumber=43EAF30C230C6EEE6E354DC03772A6EE53D50685 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft Manifest number: 06 Signing time: Mon 05 Jan 2026 06:58:17 +0000 Manifest this update: Mon 05 Jan 2026 06:58:17 +0000 Manifest next update: Mon 12 Jan 2026 06:58:17 +0000 Files and hashes: 1: Q-rzDCMMbu5uNU3AN3Km7lPVBoU.crl (hash: sM+VmbYdbTE6H83SoDshuKNzek9cgXkYZ65X4F9ue68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.crl rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Jan 2026 06:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91988EB, serialNumber=43EAF30C230C6EEE6E354DC03772A6EE53D50685 Validity Not Before: Jan 5 06:58:17 2026 GMT Not After : Jan 12 06:58:17 2026 GMT Subject: CN=695b6109-d39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c4:e1:df:8a:c1:ef:f5:eb:8f:b9:ce:06:14: b2:53:ec:cf:19:75:d3:77:72:a0:79:7c:50:f3:fc: 7c:92:c9:79:ba:8a:11:b9:ef:c5:f4:d7:62:b9:06: 6c:7a:a4:b3:cd:70:28:df:4d:ee:7e:ec:5f:d5:de: af:9a:94:5e:9b:3f:97:ab:f5:4e:6a:4d:62:65:77: fe:49:5c:9c:3b:3d:89:bb:6f:5a:fd:3f:6b:d5:02: af:5d:48:be:a9:51:71:9a:cc:37:a2:aa:ed:4a:49: 8e:f6:77:3d:1e:2d:28:40:ae:1f:cb:3f:60:77:9c: 05:f1:84:ed:73:e5:d4:45:ee:b9:27:42:92:f1:d7: b2:7e:69:24:d9:1a:4d:bd:d0:69:d8:89:a4:1b:d3: 37:f4:49:40:ce:50:31:99:26:5b:e6:39:37:98:da: a0:87:5d:8b:17:8a:da:f7:9c:d9:73:73:02:59:cc: b8:6d:72:c8:f0:ab:42:e0:2e:10:82:83:d3:7c:d4: ab:2a:a5:38:1d:aa:67:62:47:78:07:10:3f:a3:ba: d5:f5:87:e8:1e:8a:f0:f7:2a:10:7d:be:6c:12:11: 07:c3:be:87:2c:ed:be:31:18:cd:5e:02:c6:b8:9b: ec:f5:b8:34:4b:fd:bb:e7:d9:6d:60:ea:0d:ae:55: 0c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:46:0A:A1:FE:65:F5:3C:BC:A9:05:55:BC:6F:82:42:F3:BB:73:0B X509v3 Authority Key Identifier: keyid:43:EA:F3:0C:23:0C:6E:EE:6E:35:4D:C0:37:72:A6:EE:53:D5:06:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91988EB/018E1F6CE48B11F083D11E6B446F56BC/Q-rzDCMMbu5uNU3AN3Km7lPVBoU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:9d:4e:da:77:b3:c0:4e:69:0c:c5:1e:e5:53:c9:1c:97:f1: d6:b3:73:53:77:58:db:23:6b:98:d7:a3:11:96:a1:ac:8d:e0: 07:4f:31:11:4b:ea:a0:45:9d:d1:8b:80:5a:80:5a:e8:e2:f7: c1:68:9f:ee:20:18:34:14:49:26:51:f1:d1:45:6e:ca:25:3e: 87:c3:ab:55:85:77:eb:c1:85:43:80:f2:f0:f8:84:83:db:e9: 07:0f:5d:04:32:28:bd:ce:96:c0:4f:92:18:22:8d:f1:d4:06: 24:4d:66:c4:08:af:bc:e9:06:d6:99:84:eb:f2:92:e8:b9:31: 0e:33:87:b4:df:cc:44:89:a4:cc:5b:fe:ca:d2:34:e1:28:5b: dc:9a:74:e2:c7:1d:da:e1:cd:d7:a8:f7:3d:ab:0e:a5:39:ff: 30:db:5f:2f:ec:28:fe:3d:79:9d:aa:12:b1:fd:c0:cc:e5:92: 93:31:b9:f1:e4:bb:a2:64:9f:53:c6:c4:8a:ec:ed:f2:fa:72: 04:e7:25:42:09:9e:78:50:3c:e5:63:5d:37:b6:79:5f:7b:33: dd:87:66:70:a4:ea:00:a0:3c:7b:1d:f2:6f:18:32:02:d4:96: 86:aa:2c:6f:4a:e4:d0:d4:d4:9b:b7:d1:3e:83:33:f0:71:aa: 60:95:ff:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE5 ODhFQjExMC8GA1UEBRMoNDNFQUYzMEMyMzBDNkVFRTZFMzU0REMwMzc3MkE2RUU1 M0Q1MDY4NTAeFw0yNjAxMDUwNjU4MTdaFw0yNjAxMTIwNjU4MTdaMBgxFjAUBgNV BAMMDTY5NWI2MTA5LWQzOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/xOHfisHv9euPuc4GFLJT7M8ZddN3cqB5fFDz/HySyXm6ihG578X012K5Bmx6 pLPNcCjfTe5+7F/V3q+alF6bP5er9U5qTWJld/5JXJw7PYm7b1r9P2vVAq9dSL6p UXGazDeiqu1KSY72dz0eLShArh/LP2B3nAXxhO1z5dRF7rknQpLx17J+aSTZGk29 0GnYiaQb0zf0SUDOUDGZJlvmOTeY2qCHXYsXitr3nNlzcwJZzLhtcsjwq0LgLhCC g9N81KsqpTgdqmdiR3gHED+jutX1h+geivD3KhB9vmwSEQfDvocs7b4xGM1eAsa4 m+z1uDRL/bvn2W1g6g2uVQynAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUz0YKof5l 9Ty8qQVVvG+CQvO7cwswHwYDVR0jBBgwFoAUQ+rzDCMMbu5uNU3AN3Km7lPVBoUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4OEVCLzAxOEUxRjZDRTQ4 QjExRjA4M0QxMUU2QjQ0NkY1NkJDL1EtcnpEQ01NYnU1dU5VM0FOM0ttN2xQVkJv VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUS1yekRDTU1idTV1TlUzQU4zS203bFBWQm9VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 OEVCLzAxOEUxRjZDRTQ4QjExRjA4M0QxMUU2QjQ0NkY1NkJDL1EtcnpEQ01NYnU1 dU5VM0FOM0ttN2xQVkJvVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJedTtp3s8BOaQzFHuVTyRyX8dazc1N3WNsja5jXoxGWoayN4AdPMRFL 6qBFndGLgFqAWuji98Fon+4gGDQUSSZR8dFFbsolPofDq1WFd+vBhUOA8vD4hIPb 6QcPXQQyKL3OlsBPkhgijfHUBiRNZsQIr7zpBtaZhOvykui5MQ4zh7TfzESJpMxb /srSNOEoW9yadOLHHdrhzdeo9z2rDqU5/zDbXy/sKP49eZ2qErH9wMzlkpMxufHk u6Jkn1PGxIrs7fL6cgTnJUIJnnhQPOVjXTe2eV97M92HZnCk6gCgPHsd8m8YMgLU loaqLG9K5NDU1Ju30T6DM/BxqmCV/y0= -----END CERTIFICATE-----Generated at Wed Jan 7 06:36:20 2026 by rpki-client