This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft File: QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft (raw, json) Hash identifier: 8XuPlJZi42sxyLrtu6TpS03IXh8UJYR5bwM4iZ2AesM= Subject key identifier: AF:8F:FF:AF:D6:4B:EA:31:ED:5E:B4:A9:99:B0:00:F0:2C:07:34:8C Authority key identifier: 41:6D:6C:D6:03:90:FB:7C:96:ED:79:D7:8C:E7:6F:54:AF:CF:44:58 Certificate issuer: /CN=A91E5D61/serialNumber=416D6CD60390FB7C96ED79D78CE76F54AFCF4458 Certificate serial: 1315 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft Manifest number: 483D Signing time: Tue 20 Jan 2026 14:20:38 +0000 Manifest this update: Tue 20 Jan 2026 14:20:37 +0000 Manifest next update: Tue 27 Jan 2026 14:20:37 +0000 Files and hashes: 1: QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl (hash: F4/k+OCxD2pFfre9bdIu4OF9Ay/KWF2x/N6Y6SPkfoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4885 (0x1315) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=416D6CD60390FB7C96ED79D78CE76F54AFCF4458 Validity Not Before: Jan 20 14:20:37 2026 GMT Not After : Jan 27 14:20:37 2026 GMT Subject: CN=696f8f36-2518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5e:3b:cc:9b:22:14:d8:6d:de:01:58:a7:97: 0b:99:e2:6d:88:c6:69:01:2c:34:8a:5d:22:63:31: bb:58:ed:40:4d:66:65:b6:2c:bb:06:c5:23:7c:c8: 8c:71:5f:53:e2:28:cc:a7:30:18:4c:09:82:38:cc: 8c:c8:ce:14:ae:9b:94:ea:70:f9:03:99:72:26:d6: d1:b0:6c:d2:19:71:21:89:de:92:42:ee:2a:97:cc: 32:31:38:f5:44:d1:5f:cb:24:d8:b2:f4:bd:e6:bb: c7:1d:ca:8d:ca:50:e0:f9:81:2e:ea:0c:f9:60:19: 94:ba:6b:6a:ca:9c:d5:37:0b:ea:8d:c1:16:a0:10: a4:d9:2d:ba:d5:b7:aa:ea:a0:48:e3:ee:a3:d4:79: 97:be:f5:d1:80:60:da:cc:28:f6:61:7a:6a:02:95: 03:5c:61:43:df:1f:1b:4f:16:8f:e8:d0:a1:c0:dc: 21:e4:c3:7b:15:50:f9:5d:6a:c5:1e:f5:a6:f5:6c: 4e:32:33:60:f8:c4:0c:e7:82:dc:93:4b:66:ad:7e: 7c:5d:d1:b9:9e:9b:03:9f:62:33:98:93:97:be:19: a2:cd:46:5f:5a:be:69:41:41:cb:61:ac:4f:ba:c9: 02:51:75:e4:e3:4a:33:6f:c1:53:53:20:dc:ff:76: b1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8F:FF:AF:D6:4B:EA:31:ED:5E:B4:A9:99:B0:00:F0:2C:07:34:8C X509v3 Authority Key Identifier: keyid:41:6D:6C:D6:03:90:FB:7C:96:ED:79:D7:8C:E7:6F:54:AF:CF:44:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:01:49:0b:30:92:7c:d5:a1:d7:8e:05:e2:c4:71:f4:fc:48: ba:07:aa:c7:dc:0d:83:93:e4:a6:aa:77:bc:fd:5d:3b:3c:ed: b7:4f:48:09:3b:63:d1:91:8d:05:04:5d:7c:e7:2b:63:f0:c2: 81:64:d6:f0:ba:1f:34:fe:60:7c:e1:8f:64:74:78:f9:d7:91: bd:05:0b:22:7c:92:b9:5b:36:0a:55:25:c4:bc:c7:bd:d4:7a: b4:46:16:61:82:db:94:fb:e5:95:cc:1b:61:2c:3d:31:14:ee: ae:e0:02:27:87:73:90:7d:7a:5a:63:01:44:96:c3:ca:2e:55: 8c:e1:1f:19:b1:bf:c3:d1:7a:a2:45:c4:25:52:4b:e7:1b:32: 70:25:ab:be:b7:4f:a1:b1:34:5f:47:7b:37:3f:67:bb:76:dc: 6b:95:cf:8f:ce:39:de:f9:33:62:3b:16:d6:dc:ff:be:d0:6d: 77:6b:cf:18:92:ae:3c:b6:f0:40:8b:f7:ff:b6:0a:a6:92:64: 6d:de:b7:f8:29:61:e5:32:ce:dc:34:58:c0:a4:91:c6:c2:b7: bb:f0:6a:d6:35:0f:46:b4:d4:73:6f:db:11:e4:ef:f6:c8:0f: 46:fd:ee:7a:3c:a9:99:b7:b4:f1:4c:9f:8c:d6:27:1e:27:33: 38:db:5d:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICExUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDQxNkQ2Q0Q2MDM5MEZCN0M5NkVENzlENzhDRTc2RjU0 QUZDRjQ0NTgwHhcNMjYwMTIwMTQyMDM3WhcNMjYwMTI3MTQyMDM3WjAYMRYwFAYD VQQDDA02OTZmOGYzNi0yNTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoV47zJsiFNht3gFYp5cLmeJtiMZpASw0il0iYzG7WO1ATWZltiy7BsUjfMiM cV9T4ijMpzAYTAmCOMyMyM4UrpuU6nD5A5lyJtbRsGzSGXEhid6SQu4ql8wyMTj1 RNFfyyTYsvS95rvHHcqNylDg+YEu6gz5YBmUumtqypzVNwvqjcEWoBCk2S261beq 6qBI4+6j1HmXvvXRgGDazCj2YXpqApUDXGFD3x8bTxaP6NChwNwh5MN7FVD5XWrF HvWm9WxOMjNg+MQM54Lck0tmrX58XdG5npsDn2IzmJOXvhmizUZfWr5pQUHLYaxP uskCUXXk40ozb8FTUyDc/3axTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+P/6/W S+ox7V60qZmwAPAsBzSMMB8GA1UdIwQYMBaAFEFtbNYDkPt8lu1514znb1Svz0RY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8yQTdDN0Q5ODFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9RVzFzMWdPUS0zeVc3WG5Yak9kdlZLX1BS RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1FXMXMxZ09RLTN5VzdYblhqT2R2VktfUFJGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8yQTdDN0Q5ODFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9RVzFzMWdPUS0z eVc3WG5Yak9kdlZLX1BSRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiAUkLMJJ81aHXjgXixHH0/Ei6B6rH3A2Dk+Smqne8/V07PO23T0gJ O2PRkY0FBF185ytj8MKBZNbwuh80/mB84Y9kdHj515G9BQsifJK5WzYKVSXEvMe9 1Hq0RhZhgtuU++WVzBthLD0xFO6u4AInh3OQfXpaYwFElsPKLlWM4R8Zsb/D0Xqi RcQlUkvnGzJwJau+t0+hsTRfR3s3P2e7dtxrlc+Pzjne+TNiOxbW3P++0G13a88Y kq48tvBAi/f/tgqmkmRt3rf4KWHlMs7cNFjApJHGwre78GrWNQ9GtNRzb9sR5O/2 yA9G/e56PKmZt7TxTJ+M1iceJzM4213H -----END CERTIFICATE-----Generated at Wed Jan 21 07:51:22 2026 by rpki-client