This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft File: QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft (raw, json) Hash identifier: Ze9oNVx5JKuE2d07G9Jtw5a721a5JJBzT1UnEH6Obpo= Subject key identifier: 75:F3:D1:81:A6:76:A0:3A:E3:E2:E5:10:4C:13:BB:C6:4F:5E:96:63 Authority key identifier: 41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C Certificate issuer: /CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft Manifest number: 01FF Signing time: Wed 07 Jan 2026 01:41:03 +0000 Manifest this update: Wed 07 Jan 2026 01:41:02 +0000 Manifest next update: Wed 14 Jan 2026 01:41:02 +0000 Files and hashes: 1: QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl (hash: Oaur0jpF/WKSs9EMoPm2pZEOPC9vhZCDlVwRIg2mgmQ=) 2: 5BE1A39CDFF411EDAF183A6BC4F9AE02.roa (hash: kSko0IDUfwmI+eYoz/fG8AvnBwnpICm84IEH409J6Ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Jan 2026 01:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111C49, serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Validity Not Before: Jan 7 01:41:02 2026 GMT Not After : Jan 14 01:41:02 2026 GMT Subject: CN=695db9ae-bc4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:33:76:e6:94:7a:ed:37:8a:6e:dd:98:6e:61: b9:d7:30:39:70:aa:0f:15:2d:88:12:77:ca:aa:8c: 46:51:ff:ea:4c:d7:6b:51:15:37:b7:67:64:b9:1c: d8:c3:cd:90:6d:e8:74:d2:af:c7:8f:0a:6d:4a:fb: d6:4d:b3:cc:93:30:c1:ca:d4:c3:ac:cc:2b:c9:68: a3:3c:ac:ce:9c:a0:f2:39:a4:60:f7:b0:c9:53:a6: 1e:b0:c3:17:2b:29:2b:4c:be:7e:4b:fa:96:10:ee: 0e:92:8f:04:27:ea:e6:e1:94:bf:a4:11:b0:3a:d0: 9f:39:48:55:3a:0f:74:b0:6d:b4:69:dc:d5:0c:9d: f1:66:50:82:51:42:b0:a9:b0:84:a3:5f:ca:6b:42: 1b:4c:ae:62:8d:96:fc:3f:e1:cf:cf:06:a6:bc:79: ca:f5:bb:b8:ca:ad:84:fb:a8:f9:59:26:56:03:7a: 5f:5c:5d:e4:13:f5:9b:7d:a9:7b:82:46:4d:3b:28: eb:f8:fd:88:79:cb:18:13:0f:30:77:84:56:0d:69: ea:54:5e:8d:b9:94:76:cc:5b:53:52:62:ee:6f:93: bf:ae:f6:8e:2d:bd:e3:0e:05:68:e4:fa:d7:0a:4e: 91:4a:a5:73:5e:13:ca:4b:a4:c1:7d:b7:95:69:df: a2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F3:D1:81:A6:76:A0:3A:E3:E2:E5:10:4C:13:BB:C6:4F:5E:96:63 X509v3 Authority Key Identifier: keyid:41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:1a:95:c5:9b:19:2a:41:c2:66:2e:6c:00:73:d0:13:8c:73: 76:2d:da:21:21:c0:db:9b:d1:3f:e4:6f:d5:d1:fe:62:a0:21: 15:1e:40:b2:95:0a:bc:89:9b:9f:45:da:0d:aa:e2:0e:c7:48: aa:e7:61:1f:3a:bb:a7:56:35:13:82:e0:42:48:09:e7:e0:30: df:05:f8:b7:3f:86:7d:69:14:87:59:2e:c3:0b:72:77:85:bb: 76:f7:68:83:3e:56:c3:5e:66:1a:4f:9b:ef:64:53:57:ac:9b: 5a:47:32:f1:92:ee:7f:46:48:22:9b:9c:3f:3d:7e:3c:68:2e: ae:37:fc:95:b0:36:66:00:46:bb:41:b8:ff:92:05:3d:6f:43: ac:67:81:f6:c9:20:cf:54:43:4e:89:4b:f5:75:23:29:f3:d6: 6f:f6:9f:97:1b:69:ff:e7:3d:de:de:61:ca:96:39:70:a7:2a: a8:66:22:b5:33:fb:6f:a2:24:f1:47:6c:e1:94:37:c6:c9:ed: ca:08:ea:b5:3d:e4:84:0a:0e:2b:88:2c:3b:4a:30:83:a0:a6: a1:9b:19:a3:2d:aa:5f:30:93:4c:d6:ff:14:4e:dc:21:7e:e6: f3:a9:28:8a:f9:0b:73:04:b2:ba:7e:64:5f:1b:11:2b:d6:ca: 43:a8:c4:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFDNDkxMTAvBgNVBAUTKDQxMEQ4RTY4NDMxODE4Nzc0QjMwQjE5QkU1Q0VGNTNE NDcxOTBCMkMwHhcNMjYwMTA3MDE0MTAyWhcNMjYwMTE0MDE0MTAyWjAYMRYwFAYD VQQDDA02OTVkYjlhZS1iYzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzN25pR67TeKbt2YbmG51zA5cKoPFS2IEnfKqoxGUf/qTNdrURU3t2dkuRzY w82Qbeh00q/HjwptSvvWTbPMkzDBytTDrMwryWijPKzOnKDyOaRg97DJU6YesMMX KykrTL5+S/qWEO4Oko8EJ+rm4ZS/pBGwOtCfOUhVOg90sG20adzVDJ3xZlCCUUKw qbCEo1/Ka0IbTK5ijZb8P+HPzwamvHnK9bu4yq2E+6j5WSZWA3pfXF3kE/Wbfal7 gkZNOyjr+P2IecsYEw8wd4RWDWnqVF6NuZR2zFtTUmLub5O/rvaOLb3jDgVo5PrX Ck6RSqVzXhPKS6TBfbeVad+iWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXz0YGm dqA64+LlEEwTu8ZPXpZjMB8GA1UdIwQYMBaAFEENjmhDGBh3SzCxm+XO9T1HGQss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUM0OS83QTdGMTk3MkRG RjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdIZExNTEdiNWM3MVBVY1pD eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRMk9hRU1ZR0hkTE1MR2I1YzcxUFVjWkN5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUM0OS83QTdGMTk3MkRGRjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdI ZExNTEdiNWM3MVBVY1pDeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiGpXFmxkqQcJmLmwAc9ATjHN2LdohIcDbm9E/5G/V0f5ioCEVHkCy lQq8iZufRdoNquIOx0iq52EfOrunVjUTguBCSAnn4DDfBfi3P4Z9aRSHWS7DC3J3 hbt292iDPlbDXmYaT5vvZFNXrJtaRzLxku5/Rkgim5w/PX48aC6uN/yVsDZmAEa7 Qbj/kgU9b0OsZ4H2ySDPVENOiUv1dSMp89Zv9p+XG2n/5z3e3mHKljlwpyqoZiK1 M/tvoiTxR2zhlDfGye3KCOq1PeSECg4riCw7SjCDoKahmxmjLapfMJNM1v8UTtwh fubzqSiK+QtzBLK6fmRfGxEr1spDqMS5 -----END CERTIFICATE-----Generated at Thu Jan 8 13:46:42 2026 by rpki-client