This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft File: qjXi-Xe1XnL5FjW_fVO861NHmDs.mft (raw, json) Hash identifier: v8xcLT/mrUQ0hu95NJqcB0QFj6ajdSQBFHI17+5sL1I= Subject key identifier: 3A:E6:D1:25:47:8B:C1:46:42:6D:F3:7D:84:A7:CE:09:3A:97:52:E9 Authority key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B Certificate issuer: /CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft Manifest number: D8 Signing time: Sat 17 Jan 2026 04:46:41 +0000 Manifest this update: Sat 17 Jan 2026 04:46:40 +0000 Manifest next update: Sat 24 Jan 2026 04:46:40 +0000 Files and hashes: 1: qjXi-Xe1XnL5FjW_fVO861NHmDs.crl (hash: DvPyzYaELe8FRXCSMVBd8jej4LdqFkXiftX9Ifp1fGM=) 2: 8D6B6D86A98C11EFAAC0F364C4F9AE02.roa (hash: im2ulDC6TuJxDzTWTDZh2iCRPtHb9EQEE+xjYBtaU3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38, serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Validity Not Before: Jan 17 04:46:40 2026 GMT Not After : Jan 24 04:46:40 2026 GMT Subject: CN=696b1430-fca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a7:72:69:df:c1:c1:36:38:b9:7c:e0:97:d3: 23:bf:f8:2a:3f:9b:4b:c7:db:b4:f5:20:14:90:c7: 23:f1:e3:e2:3c:b4:a4:f5:60:a3:f2:a2:68:45:f4: a5:6b:f8:18:7f:c2:05:b5:df:d1:97:0a:64:f2:28: 30:28:68:4a:bd:fa:02:29:c5:38:48:37:31:25:ae: 8d:78:30:ad:e6:23:87:40:ad:50:45:34:ae:c6:f7: c0:7b:6e:4e:00:07:a0:9f:95:b2:d1:d4:1c:45:e0: a5:c2:e0:1b:b0:73:19:37:d0:cf:e2:14:49:9f:a3: 8d:2f:eb:60:ae:86:f1:bc:cb:5e:d8:b0:23:6f:d2: f4:af:5c:00:1e:23:3d:64:38:e2:79:d6:5f:0d:a9: 87:2e:cf:ba:4b:63:ce:d8:99:e9:6d:a8:d5:4d:11: 1e:79:f1:85:93:be:cb:cd:52:25:e7:70:1d:7e:13: 4b:16:48:b1:49:10:a3:bb:75:4b:9a:01:b7:01:8e: 3a:74:db:ba:fe:06:56:71:ad:ff:53:0e:fc:e3:2e: 73:e4:a3:a2:69:fb:f8:f6:0c:98:35:1c:8e:0e:0c: 62:cb:24:50:ba:ed:22:5b:1e:e9:b7:43:52:16:04: 40:09:ae:b3:16:ad:8e:15:b7:ac:05:c1:de:13:3a: 12:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E6:D1:25:47:8B:C1:46:42:6D:F3:7D:84:A7:CE:09:3A:97:52:E9 X509v3 Authority Key Identifier: keyid:AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:ab:7f:7d:12:e0:fd:aa:7b:9e:53:df:d5:6e:32:0e:70:39: e2:8e:98:de:d3:c3:ec:51:9f:95:7e:44:23:97:c9:ca:4a:f2: ed:57:3b:29:e4:6d:d7:84:b0:9e:f2:2d:48:09:48:ce:f8:69: df:12:eb:b0:1a:23:e0:c7:76:cc:81:64:d5:0f:09:d5:93:9d: f1:ca:af:38:7b:e7:9a:1f:f0:78:e5:d2:ac:25:80:c4:f0:9e: 79:de:53:dc:92:cd:d0:1b:60:69:82:33:52:27:99:c4:e3:c8: 0b:e7:5f:df:d6:3c:64:df:c3:e1:57:09:8a:7b:d0:17:74:af: 26:ee:f0:72:b9:b9:5b:6e:d0:eb:ef:f9:b9:44:1c:d8:c2:1b: d1:53:3e:56:0c:56:64:02:f8:19:a5:11:b3:b8:2c:62:3f:f7: 13:65:25:a6:8b:1c:1f:09:a6:0d:ea:59:9d:84:b2:ea:45:76: 29:0e:1c:5c:1e:b8:34:c7:9f:59:ae:1f:1f:c8:89:e4:1e:36: b2:bd:24:4c:b6:04:f5:33:e9:63:bd:57:df:c0:6c:8d:21:4d: 6e:98:47:24:1d:6d:e2:b4:38:16:bb:6f:f8:cb:21:b3:c4:85: 88:a0:4d:6b:9d:2b:26:fe:9b:cf:be:2e:0b:07:4b:88:05:9c: 51:bd:34:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJDMzgxMTAvBgNVBAUTKEFBMzVFMkY5NzdCNTVFNzJGOTE2MzVCRjdENTNCQ0VC NTM0Nzk4M0IwHhcNMjYwMTE3MDQ0NjQwWhcNMjYwMTI0MDQ0NjQwWjAYMRYwFAYD VQQDDA02OTZiMTQzMC1mY2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6dyad/BwTY4uXzgl9Mjv/gqP5tLx9u09SAUkMcj8ePiPLSk9WCj8qJoRfSl a/gYf8IFtd/Rlwpk8igwKGhKvfoCKcU4SDcxJa6NeDCt5iOHQK1QRTSuxvfAe25O AAegn5Wy0dQcReClwuAbsHMZN9DP4hRJn6ONL+tgrobxvMte2LAjb9L0r1wAHiM9 ZDjiedZfDamHLs+6S2PO2JnpbajVTREeefGFk77LzVIl53AdfhNLFkixSRCju3VL mgG3AY46dNu6/gZWca3/Uw784y5z5KOiafv49gyYNRyODgxiyyRQuu0iWx7pt0NS FgRACa6zFq2OFbesBcHeEzoSHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrm0SVH i8FGQm3zfYSnzgk6l1LpMB8GA1UdIwQYMBaAFKo14vl3tV5y+RY1v31TvOtTR5g7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkMzOC8wNEJBQTYxNEE5 OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhuTDVGaldfZlZPODYxTkht RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FqWGktWGUxWG5MNUZqV19mVk84NjFOSG1Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkMzOC8wNEJBQTYxNEE5OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhu TDVGaldfZlZPODYxTkhtRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGq399EuD9qnueU9/VbjIOcDnijpje08PsUZ+VfkQjl8nKSvLtVzsp 5G3XhLCe8i1ICUjO+GnfEuuwGiPgx3bMgWTVDwnVk53xyq84e+eaH/B45dKsJYDE 8J553lPcks3QG2BpgjNSJ5nE48gL51/f1jxk38PhVwmKe9AXdK8m7vByublbbtDr 7/m5RBzYwhvRUz5WDFZkAvgZpRGzuCxiP/cTZSWmixwfCaYN6lmdhLLqRXYpDhxc Hrg0x59Zrh8fyInkHjayvSRMtgT1M+ljvVffwGyNIU1umEckHW3itDgWu2/4yyGz xIWIoE1rnSsm/pvPvi4LB0uIBZxRvTSq -----END CERTIFICATE-----Generated at Sun Jan 18 03:16:32 2026 by rpki-client