This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
File: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft (raw, json)
Hash identifier: E3fbH30kPyHAJly7HUq4l+7PptWpGdRV2iXgDjsgwic=
Subject key identifier: CE:78:11:97:92:33:16:C8:31:F4:58:15:2A:6D:09:EE:99:C0:9E:CE
Authority key identifier: AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B
Certificate issuer: /CN=A91E4EF7/serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B
Certificate serial: 1BA0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
Manifest number: 1B94
Signing time: Sat 24 Jan 2026 16:02:48 +0000
Manifest this update: Sat 24 Jan 2026 16:02:48 +0000
Manifest next update: Sat 31 Jan 2026 16:02:48 +0000
Files and hashes: 1: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl (hash: /HEqEQcqlndYdtT4meqwMIA8qflZCDLjDRJxS2qm19Y=)
2: E24736EC9D9011EC89314083C4F9AE02.roa (hash: PfaBGPnkUgsWEXBDryvUqr89XZWDUPWxeZUL3rzB4xI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl
rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7072 (0x1ba0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4EF7, serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B
Validity
Not Before: Jan 24 16:02:48 2026 GMT
Not After : Jan 31 16:02:48 2026 GMT
Subject: CN=6974ed28-475a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:88:62:8d:3a:09:9b:05:2a:55:ff:f0:18:
27:a9:9f:c2:c3:25:65:0d:7f:d7:1f:87:53:a0:84:
d6:d6:79:d7:5e:fe:bf:bf:df:72:52:c4:c1:49:4c:
68:80:85:86:20:62:c4:e7:49:78:d5:73:ef:17:19:
e7:42:a3:1d:cf:5f:43:d2:88:18:42:8e:93:86:ca:
9f:bc:f5:74:e4:ca:8e:c2:cf:40:f9:4f:bc:38:14:
97:f2:39:70:43:24:bf:9f:95:e7:50:1a:6e:50:9c:
b6:e9:d9:0c:a3:b2:98:ab:2a:40:a8:1c:21:8a:ff:
11:95:f2:35:9e:e0:0d:30:88:57:19:33:8f:5c:eb:
1e:5d:a1:ac:80:7f:1e:b6:fb:95:49:a1:9e:7a:17:
e6:09:bf:83:2a:77:71:7a:78:5f:ce:09:e6:00:da:
fd:cd:a1:bc:95:27:48:91:97:5f:76:bb:72:6d:54:
9f:c5:b2:7b:f6:86:d4:8e:9e:8a:15:2d:f3:b7:71:
f2:b2:03:18:fc:21:24:56:f3:38:ff:2e:23:a2:53:
5f:1c:3a:f1:71:f6:5d:5c:e6:00:c5:56:e3:80:5e:
18:4a:22:44:d2:77:da:de:e7:ee:1e:21:ae:07:59:
95:76:40:0d:cf:b2:02:c9:fa:e8:5b:31:be:32:20:
55:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:78:11:97:92:33:16:C8:31:F4:58:15:2A:6D:09:EE:99:C0:9E:CE
X509v3 Authority Key Identifier:
keyid:AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e3:43:14:48:eb:f7:2d:fb:38:3d:c3:f5:c3:cb:ae:8f:be:4f:
0e:b9:f6:28:8c:0a:13:b7:e7:73:a7:26:53:12:72:53:85:4b:
8b:d2:ac:ba:b7:c6:e0:83:56:bf:8c:73:a0:7c:c9:e6:97:4b:
3a:5d:f1:2c:ad:1a:d4:dd:30:6d:53:2c:fe:58:55:d8:ee:9b:
1b:38:c4:bd:7c:f2:f0:f7:08:15:ec:33:49:00:f5:b3:db:46:
b2:7e:f4:dd:ef:87:23:38:1f:b6:63:d9:7c:48:fb:e8:83:9e:
f5:a2:8f:67:11:84:a1:50:57:e1:d7:7c:e8:b6:ed:2f:97:4e:
d0:f0:cd:b3:2b:af:18:75:2b:74:05:f5:9b:98:ca:ee:4d:55:
13:3d:71:0b:3f:9a:7c:57:f2:12:53:f2:90:99:14:61:91:7e:
b1:5c:7e:0c:26:c1:7e:f8:36:de:69:bb:1e:44:e7:f1:34:c7:
04:96:0e:21:65:51:cd:1e:f4:90:28:f0:dd:ea:7a:4a:39:2b:
5f:3e:43:fb:06:e2:66:e7:44:26:11:e0:ff:c6:5c:b2:18:7a:
35:e1:cc:f9:81:9b:da:65:85:94:eb:31:29:bc:c4:8c:6b:eb:
75:02:d8:b3:d1:1f:69:35:f9:9e:d0:0d:b1:68:44:58:cf:20:
89:17:ac:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:18:32 2026 by rpki-client