This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft File: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft (raw, json) Hash identifier: fa0l6JQm0WzvtGaFblEjxYEazTeKoODK3jfNbjd7bck= Subject key identifier: D1:E6:4F:93:CE:55:99:F4:5D:A2:E0:96:82:51:AF:5D:29:58:C6:47 Authority key identifier: 41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12 Certificate issuer: /CN=A91D8BB1/serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft Manifest number: 79 Signing time: Sat 17 Jan 2026 05:52:23 +0000 Manifest this update: Sat 17 Jan 2026 05:52:23 +0000 Manifest next update: Sat 24 Jan 2026 05:52:23 +0000 Files and hashes: 1: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl (hash: kF3j2v/2/Xom0lZVgMNznZ/1PQFSCQebksay838gkUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 05:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8BB1, serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512 Validity Not Before: Jan 17 05:52:23 2026 GMT Not After : Jan 24 05:52:23 2026 GMT Subject: CN=696b2397-6ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:58:3b:99:3f:30:65:fb:8c:10:43:64:90:21: d7:75:c6:f5:d3:26:3a:58:36:14:8b:a0:66:a2:e3: 0b:d3:b5:7f:b2:86:91:3b:47:9b:f8:97:68:b4:b9: 21:59:c8:c8:ef:60:10:66:e0:02:41:49:88:d9:6c: 90:f3:15:d2:fc:1e:95:05:b6:a1:24:59:97:fa:ae: e7:26:3d:a7:3c:fb:cc:79:e7:0c:3b:01:dc:21:8e: ba:af:58:25:3a:35:05:06:85:02:91:1d:7c:fe:29: 03:9e:eb:bc:a5:4e:c0:6a:05:08:72:60:8a:14:7b: ab:18:a0:72:d7:91:69:e2:12:e3:37:5a:9f:59:24: 90:e7:40:38:9d:07:a2:2b:0f:52:b7:8d:83:02:51: a2:fc:6d:87:35:02:74:f1:67:45:84:d7:29:c8:85: 5f:b0:d2:a3:aa:0f:3b:18:a6:fb:de:cc:3c:fb:5b: 4b:25:ff:3a:7a:3a:e6:53:e3:5d:91:c7:2c:2c:d6: 55:93:d5:2e:c0:e0:6e:0d:be:12:a0:d9:e9:7f:11: fd:5d:f0:ad:71:c9:3d:19:d4:45:cb:90:7a:df:11: cf:3b:f3:e6:a8:4d:75:7f:2b:42:83:7e:30:05:a0: aa:69:50:d2:55:83:97:d6:9b:06:bb:af:7f:e3:7a: 99:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E6:4F:93:CE:55:99:F4:5D:A2:E0:96:82:51:AF:5D:29:58:C6:47 X509v3 Authority Key Identifier: keyid:41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:62:0c:63:88:e5:c6:51:b0:c1:36:30:69:76:c0:23:5a:48: ea:e5:6f:3c:d3:9e:ab:ae:fe:7c:7c:c0:29:7a:40:4b:4e:82: cf:79:d1:5b:70:df:27:07:7c:8c:b5:0f:8d:0f:03:c0:fb:70: 44:ff:d8:b4:ee:7b:ae:7c:50:8a:d7:cd:87:d2:bd:92:de:86: ed:64:8a:5a:4d:c4:a0:f2:80:24:55:d1:aa:5b:f8:7f:b5:4e: ac:f3:6b:25:2c:83:72:a8:42:45:3b:70:84:c4:bf:fc:bd:7e: 42:c4:d3:30:b1:6e:68:b0:f0:86:2d:31:7d:b1:64:dc:70:19: 11:12:80:92:08:73:76:72:51:34:7d:18:a9:b8:3e:06:05:59: c9:84:dc:a6:8f:c8:9a:73:54:71:85:b9:fd:b5:88:d3:9e:8e: eb:17:e0:04:05:29:f3:b0:c6:70:40:75:b7:3f:df:68:4d:4f: 4b:4d:bc:d9:0b:bf:9f:cb:2c:d8:0c:4c:bc:83:6e:d1:c7:cf: 14:c1:3d:36:48:57:44:da:ff:a5:26:73:cc:fe:ca:f9:0e:c2: b5:60:e4:6c:76:71:71:91:d2:40:20:da:cb:71:a9:12:29:f4: 73:c9:d2:1e:7c:56:4a:95:47:3b:7e:61:8d:aa:c1:c1:7b:53: 60:67:e4:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEJCMTExMC8GA1UEBRMoNDEyQThEMTdERjkwN0E3ODM3NjUwMTJBODNCNzhCN0NC MUNBMjUxMjAeFw0yNjAxMTcwNTUyMjNaFw0yNjAxMjQwNTUyMjNaMBgxFjAUBgNV BAMMDTY5NmIyMzk3LTZjYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdWDuZPzBl+4wQQ2SQIdd1xvXTJjpYNhSLoGai4wvTtX+yhpE7R5v4l2i0uSFZ yMjvYBBm4AJBSYjZbJDzFdL8HpUFtqEkWZf6rucmPac8+8x55ww7AdwhjrqvWCU6 NQUGhQKRHXz+KQOe67ylTsBqBQhyYIoUe6sYoHLXkWniEuM3Wp9ZJJDnQDidB6Ir D1K3jYMCUaL8bYc1AnTxZ0WE1ynIhV+w0qOqDzsYpvvezDz7W0sl/zp6OuZT412R xyws1lWT1S7A4G4NvhKg2el/Ef1d8K1xyT0Z1EXLkHrfEc878+aoTXV/K0KDfjAF oKppUNJVg5fWmwa7r3/jepmVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0eZPk85V mfRdouCWglGvXSlYxkcwHwYDVR0jBBgwFoAUQSqNF9+Qeng3ZQEqg7eLfLHKJRIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QkIxLzUxRjlGNjE0M0Qy NTExRjA4MEM0ODk1NUM0RjlBRTAyL1FTcU5GOS1RZW5nM1pRRXFnN2VMZkxIS0pS SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUVNxTkY5LVFlbmczWlFFcWc3ZUxmTEhLSlJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 QkIxLzUxRjlGNjE0M0QyNTExRjA4MEM0ODk1NUM0RjlBRTAyL1FTcU5GOS1RZW5n M1pRRXFnN2VMZkxIS0pSSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEJiDGOI5cZRsME2MGl2wCNaSOrlbzzTnquu/nx8wCl6QEtOgs950Vtw 3ycHfIy1D40PA8D7cET/2LTue658UIrXzYfSvZLehu1kilpNxKDygCRV0apb+H+1 TqzzayUsg3KoQkU7cITEv/y9fkLE0zCxbmiw8IYtMX2xZNxwGRESgJIIc3ZyUTR9 GKm4PgYFWcmE3KaPyJpzVHGFuf21iNOejusX4AQFKfOwxnBAdbc/32hNT0tNvNkL v5/LLNgMTLyDbtHHzxTBPTZIV0Ta/6Umc8z+yvkOwrVg5Gx2cXGR0kAg2stxqRIp 9HPJ0h58VkqVRzt+YY2qwcF7U2Bn5Cg= -----END CERTIFICATE-----Generated at Sun Jan 18 03:16:12 2026 by rpki-client