This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft File: QNueLLrezam5cjUQIVB63NGlYn8.mft (raw, json) Hash identifier: KBpiQnw2qRZi4tQ2LAWrvSAsAzYgd8chjULSg26oXnE= Subject key identifier: 8F:BE:6F:11:5B:C7:A9:13:3E:06:74:C6:F6:0F:45:94:1B:A1:ED:58 Authority key identifier: 40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F Certificate issuer: /CN=A91C8B4F/serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F Certificate serial: 04A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft Manifest number: 049B Signing time: Mon 26 Jan 2026 23:10:48 +0000 Manifest this update: Mon 26 Jan 2026 23:10:47 +0000 Manifest next update: Mon 02 Feb 2026 23:10:47 +0000 Files and hashes: 1: QNueLLrezam5cjUQIVB63NGlYn8.crl (hash: BQ6mKBnx5b2iBeyX78NWmBaFlu+4BJB+MBtOWBo01dg=) 2: 43540B7A0EE311EF9E24862BC4F9AE02.roa (hash: mV4y857QRPSQMJQogVNfC/t4weo9OVDbm55M2NQZyIc=) 3: 18E79956BAA811ECB07DA44BC4F9AE02.roa (hash: C2+RZmYoetqMpTEvEp2UgZ/k5COwbQ6X5aMLB79x36Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Feb 2026 23:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1190 (0x4a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8B4F, serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F Validity Not Before: Jan 26 23:10:47 2026 GMT Not After : Feb 2 23:10:47 2026 GMT Subject: CN=6977f478-73e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bb:2f:dd:0a:d6:b4:c9:5c:0c:a6:59:fd:e0: 91:57:4b:bc:cf:e7:14:9b:f9:e5:b0:ee:a1:05:5e: 52:be:3d:92:2a:59:8a:e0:40:bf:bf:69:bb:d6:93: e4:7b:00:66:5a:57:f0:13:68:a8:59:a8:e4:fe:c5: b0:4c:9d:17:0a:f6:3b:6d:af:36:89:c0:8b:f7:47: ea:26:79:38:d4:b1:02:08:65:cf:55:55:76:47:de: 1d:a2:fd:e3:cd:a8:54:a3:64:33:2f:53:fb:48:43: 31:3c:b2:14:81:dc:24:6c:9b:d5:5c:6f:76:38:c5: 58:02:6f:5e:72:a3:b3:37:34:6e:43:55:24:e6:ce: 0f:00:e7:e3:96:ce:fe:90:65:32:fc:4f:bf:48:4e: 99:95:c6:52:24:0d:a5:7f:60:49:8a:13:e5:be:e9: dc:ea:56:53:a1:8e:63:c5:e9:00:06:79:b2:a4:a3: f2:e4:a0:3c:28:a2:fc:19:fa:2f:16:e5:09:d4:77: f4:86:fe:e3:29:aa:3e:47:ae:95:14:c3:7e:e0:59: 13:6c:6c:df:50:8b:92:8b:6c:82:24:d3:99:07:3b: 54:7e:6e:08:6b:ed:e4:60:b6:1f:81:de:d3:d3:35: f7:8c:9b:03:25:28:52:eb:e8:70:f0:e8:8b:4b:7a: d4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BE:6F:11:5B:C7:A9:13:3E:06:74:C6:F6:0F:45:94:1B:A1:ED:58 X509v3 Authority Key Identifier: keyid:40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:71:45:fc:51:0e:f2:4b:c2:b8:94:09:46:43:40:1c:34:7d: 2b:14:df:ec:2c:5b:3f:e5:5a:12:f5:1e:47:cb:3a:5b:7d:b4: 11:ca:0e:3d:bc:d4:fa:73:b3:28:ab:b7:16:fe:93:01:ff:31: 42:93:56:f8:c5:2a:3f:fb:7a:c6:01:ab:fc:ed:a7:68:82:93: 39:25:5b:0e:2b:b7:f1:2b:5d:6f:af:6f:f5:3e:19:88:1b:79: 08:35:2b:c2:d1:c8:48:ca:27:10:da:aa:59:62:12:54:cc:da: b0:4a:98:a5:7b:21:d0:6f:1a:a4:d4:c4:0c:1a:fd:c2:b5:53: a7:49:06:bb:b3:d7:8e:ee:74:cb:0e:71:02:4b:81:be:a9:6e: 13:23:63:67:f6:c0:0c:4e:1c:f3:6c:c8:2b:f0:8e:d8:06:6e: 39:a4:40:b2:5d:46:bf:38:2e:41:94:0a:af:76:0b:ac:7f:aa: b0:9d:a4:a0:24:a5:bb:e9:7e:10:d2:77:cf:ae:d5:5f:c2:a1: 0b:3e:0c:68:7e:4d:59:50:79:95:9f:ee:79:fb:0c:a8:de:e7: 04:6f:1d:43:f1:24:a6:4d:e9:d2:11:1c:f4:ff:fa:49:6d:8e: dd:05:0a:48:2e:d1:2c:e7:ab:10:28:c2:5a:cd:55:ab:43:11: aa:d4:4c:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCNEYxMTAvBgNVBAUTKDQwREI5RTJDQkFERUNEQTlCOTcyMzUxMDIxNTA3QURD RDFBNTYyN0YwHhcNMjYwMTI2MjMxMDQ3WhcNMjYwMjAyMjMxMDQ3WjAYMRYwFAYD VQQDDA02OTc3ZjQ3OC03M2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbsv3QrWtMlcDKZZ/eCRV0u8z+cUm/nlsO6hBV5Svj2SKlmK4EC/v2m71pPk ewBmWlfwE2ioWajk/sWwTJ0XCvY7ba82icCL90fqJnk41LECCGXPVVV2R94dov3j zahUo2QzL1P7SEMxPLIUgdwkbJvVXG92OMVYAm9ecqOzNzRuQ1Uk5s4PAOfjls7+ kGUy/E+/SE6ZlcZSJA2lf2BJihPlvunc6lZToY5jxekABnmypKPy5KA8KKL8Gfov FuUJ1Hf0hv7jKao+R66VFMN+4FkTbGzfUIuSi2yCJNOZBztUfm4Ia+3kYLYfgd7T 0zX3jJsDJShS6+hw8OiLS3rU9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI++bxFb x6kTPgZ0xvYPRZQboe1YMB8GA1UdIwQYMBaAFEDbniy63s2puXI1ECFQetzRpWJ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEI0Ri9ERDczMjY0ODY4 QkMxMUVDODc4MDc5NDhDNEY5QUUwMi9RTnVlTExyZXphbTVjalVRSVZCNjNOR2xZ bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOdWVMTHJlemFtNWNqVVFJVkI2M05HbFluOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEI0Ri9ERDczMjY0ODY4QkMxMUVDODc4MDc5NDhDNEY5QUUwMi9RTnVlTExyZXph bTVjalVRSVZCNjNOR2xZbjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCcUX8UQ7yS8K4lAlGQ0AcNH0rFN/sLFs/5VoS9R5HyzpbfbQRyg49 vNT6c7Moq7cW/pMB/zFCk1b4xSo/+3rGAav87adogpM5JVsOK7fxK11vr2/1PhmI G3kINSvC0chIyicQ2qpZYhJUzNqwSpileyHQbxqk1MQMGv3CtVOnSQa7s9eO7nTL DnECS4G+qW4TI2Nn9sAMThzzbMgr8I7YBm45pECyXUa/OC5BlAqvdgusf6qwnaSg JKW76X4Q0nfPrtVfwqELPgxofk1ZUHmVn+55+wyo3ucEbx1D8SSmTenSERz0//pJ bY7dBQpILtEs56sQKMJazVWrQxGq1Ez8 -----END CERTIFICATE-----Generated at Tue Jan 27 13:24:08 2026 by rpki-client