This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
File: Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft (raw, json)
Hash identifier: 72VHzwmwb6y7ziEVA2+r5qgWiTA1ZNA7gOCpH3th40Y=
Subject key identifier: 9B:DE:2D:D8:CE:52:84:18:B2:FB:36:1C:B7:0B:11:C4:67:2C:BA:2F
Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Certificate serial: 0675
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
Manifest number: 065B
Signing time: Sat 31 Jan 2026 22:01:51 +0000
Manifest this update: Sat 31 Jan 2026 22:01:51 +0000
Manifest next update: Sat 07 Feb 2026 22:01:51 +0000
Files and hashes: 1: Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl (hash: cKAJHOX+/CnlPZe0E8PAkbbsLQ7DB9maufAOXxW7czk=)
2: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (hash: WL1wjvavlZNBJVifGm25dsfKzlKEpfNQuM2fEKaPYkY=)
3: 0E0DBEA4327411ED80554E32C4F9AE02.roa (hash: LIJfkhB+FEnFSom6qGXtkQF2GYNSzLyM4CrNqHpDKAI=)
4: 87BF5BF6BD3411EB99D25F26C4F9AE02.roa (hash: FrN9o1lFg/xEbU5z0+woTSKpRYhEXE4ng2cT+urUy+w=)
5: 49FAAD72591211EDA743880DC4F9AE02.roa (hash: p2SDVbwBZwxr3yJ4yGh7aCxA4CeficP3aVklyI/yKDc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Feb 2026 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1653 (0x675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Validity
Not Before: Jan 31 22:01:51 2026 GMT
Not After : Feb 7 22:01:51 2026 GMT
Subject: CN=697e7bcf-d682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:1f:7c:3d:ac:d6:15:24:32:18:5a:77:ac:
c8:45:d8:4c:5e:34:18:a2:18:c3:d2:b0:9b:77:96:
65:02:52:cc:f9:fb:67:40:15:fb:d5:60:c1:15:c2:
4a:5a:f9:e5:3e:bb:78:b1:1b:ec:1b:5e:54:93:39:
08:53:b5:f7:dd:ad:77:e9:e9:a5:9a:f8:74:65:4e:
ce:49:e2:ea:00:e7:6b:5b:fb:6e:67:c5:ce:d5:2d:
40:e3:d9:a5:d7:ff:f8:59:fc:bc:c7:3f:a9:5b:43:
5c:48:ef:77:6f:63:fe:e4:cd:06:15:f7:5d:8a:fb:
56:ad:bc:d0:92:47:eb:7f:86:a6:ba:c6:bf:16:d8:
1d:a6:9f:6d:f8:1f:9a:4f:01:b4:a4:49:da:dc:a2:
da:a0:f3:8c:f2:b3:1a:c8:12:fe:a1:08:a2:24:0e:
f0:be:d8:48:8f:a2:26:58:91:a0:28:a3:a1:ca:eb:
69:f9:3c:e5:f0:d5:18:03:69:ed:f8:aa:9e:6a:1e:
bd:57:3f:59:fd:0b:be:8f:12:4b:4b:a0:7f:72:35:
6b:30:e0:8c:66:34:82:ea:9a:90:fc:fd:b1:4e:80:
a5:84:a9:9e:6f:56:a7:6f:51:55:da:cc:9e:9a:be:
17:55:0f:21:51:9b:0d:99:2b:9d:fc:8e:47:9b:78:
90:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DE:2D:D8:CE:52:84:18:B2:FB:36:1C:B7:0B:11:C4:67:2C:BA:2F
X509v3 Authority Key Identifier:
keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f7:04:75:7d:af:d3:b5:5f:e2:a8:04:a1:96:38:fd:74:64:
d6:8f:e5:b5:db:03:77:0c:9f:4f:28:4c:68:5e:65:11:80:b8:
bc:ca:12:ea:93:9d:df:12:1d:42:68:0e:e2:44:24:ec:45:89:
06:ac:f2:9a:9c:b5:13:78:08:34:d4:a2:82:22:d9:d4:de:59:
16:7b:ce:80:d6:be:c3:0c:17:a3:b1:89:92:d7:f2:ae:a6:ae:
1b:65:b3:a2:35:47:63:de:a8:0a:4a:eb:e2:bf:90:2c:f0:77:
85:42:1e:e2:39:22:fa:4e:63:cc:34:b6:80:3d:b4:21:64:00:
3c:34:69:bd:9b:74:02:0c:df:fb:7e:7d:cb:58:ae:e8:2f:a4:
9f:30:50:ba:de:db:ad:38:fa:ca:93:15:51:b8:44:43:39:c3:
4e:10:d9:ca:fa:92:6c:90:be:f3:8e:b3:a7:03:c8:5e:d7:fc:
06:b5:c9:4a:1e:ae:dc:5d:91:cc:01:f8:85:74:6c:cf:b7:bd:
87:3b:43:26:dd:c0:b3:cb:00:88:c1:e5:35:1b:32:e1:b3:ea:
f6:4b:8a:dc:54:43:b5:39:1d:05:00:c6:02:a8:42:84:10:f2:
49:57:9b:10:b4:4c:98:04:2d:b0:19:aa:18:a6:59:13:29:17:
aa:d8:65:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:46:00 2026 by rpki-client