This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft File: QgHlq32GvGha8R8C3mhAUVttgFg.mft (raw, json) Hash identifier: HPUK42xk4tP5YEUDPPbuIL7mPyxtNXQESNYm6ZL+Dtg= Subject key identifier: 1C:C6:D8:8A:00:14:98:A8:DE:78:FE:AB:BD:01:AE:02:AC:C8:E3:00 Authority key identifier: 42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58 Certificate issuer: /CN=A91454B0/serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058 Certificate serial: 34FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft Manifest number: 34FD Signing time: Sat 10 Jan 2026 14:36:09 +0000 Manifest this update: Sat 10 Jan 2026 14:36:09 +0000 Manifest next update: Sat 17 Jan 2026 14:36:09 +0000 Files and hashes: 1: QgHlq32GvGha8R8C3mhAUVttgFg.crl (hash: 4tAdgm62PZ4USdmpnoIoggNm/RzUG7q8IhwJlEgNm7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.crl rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Jan 2026 14:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13565 (0x34fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454B0, serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058 Validity Not Before: Jan 10 14:36:09 2026 GMT Not After : Jan 17 14:36:09 2026 GMT Subject: CN=696263d9-9dcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:60:68:4b:ed:f8:96:b3:ca:db:36:81:e0:2e: 7c:a4:f4:f1:95:b2:a5:d8:ed:9f:3f:16:e9:69:11: 90:84:be:7a:6b:24:20:d2:bf:d5:bd:87:58:21:56: c3:bc:2d:84:be:61:14:13:7e:c3:1b:fe:64:73:1c: 1b:ff:b0:12:a4:42:86:87:3d:4a:79:92:9c:85:5d: c0:0d:eb:75:07:6c:1d:dd:00:e6:4a:4b:ea:9d:fc: 02:7a:5e:fd:ca:75:c6:8a:e6:dd:5f:1f:e7:f2:c4: e6:4f:43:71:e2:c0:1a:5f:5a:cf:0c:7e:7e:5c:07: 5a:63:89:e4:a8:0b:1e:c0:e2:da:16:1b:12:97:2e: d3:db:2b:c4:b8:58:38:62:a7:39:ab:a8:9a:d9:8a: a8:b2:18:ee:3c:ed:9b:4a:10:01:74:28:58:74:81: 4d:eb:02:4c:d5:98:24:28:60:10:a9:cd:18:a1:cd: e4:fd:e5:b1:6b:2f:1d:9f:5b:ef:fa:b2:4d:ae:0c: 91:f4:7e:84:f1:73:f6:39:a0:f0:31:19:58:76:40: c8:02:3c:5f:8c:fa:24:5c:0f:a8:f2:8d:7d:97:a8: 61:50:6c:25:65:e7:8a:15:f9:1b:f4:f2:b1:7a:97: 9d:10:75:55:d8:ff:67:0e:07:5c:78:87:0c:e6:6e: 00:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C6:D8:8A:00:14:98:A8:DE:78:FE:AB:BD:01:AE:02:AC:C8:E3:00 X509v3 Authority Key Identifier: keyid:42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:62:fa:3b:e2:73:fd:9d:7e:75:59:b6:8f:d5:77:0a:95:48: 06:f3:4d:6a:2c:63:2f:14:49:64:aa:5c:ce:8b:fa:4d:4d:9f: c0:b5:52:d0:3e:ef:a7:c2:48:67:c6:96:38:8c:5e:ef:7d:7c: 64:77:25:65:14:b8:ed:94:ab:9d:68:e3:9d:d5:a9:d4:d6:d9: a6:f5:6c:64:43:b8:c8:e8:ea:88:d3:a2:5a:01:54:a0:6d:12: 9c:44:f1:b7:02:5a:a4:5d:3d:50:90:f8:10:a3:ec:f1:e0:ab: 6e:7f:1b:17:a9:b9:35:0d:fb:10:36:3d:94:3f:17:33:e1:17: 0f:b3:66:94:73:fc:d4:96:80:f9:3a:79:18:88:72:fb:2c:bf: 4b:93:63:1e:00:80:8e:44:6f:92:88:bc:03:b0:82:78:a7:1a: 57:d3:cd:d1:82:66:91:cf:41:42:93:3f:34:96:c4:62:6d:f9: e3:1c:33:d9:29:96:dc:22:de:3d:03:c8:44:cb:4b:64:8b:5a: 0e:be:92:13:e9:b4:92:5d:f1:8c:92:04:b1:ad:b9:39:8d:17: 18:2a:63:c6:17:91:dd:79:e0:22:e1:6f:5d:e5:6d:06:f2:c5: 86:a7:4c:d6:c2:76:54:43:b7:5f:17:51:62:45:1c:1b:24:17: 31:f4:6a:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NDU0QjAxMTAvBgNVBAUTKDQyMDFFNUFCN0Q4NkJDNjg1QUYxMUYwMkRFNjg0MDUx NUI2RDgwNTgwHhcNMjYwMTEwMTQzNjA5WhcNMjYwMTE3MTQzNjA5WjAYMRYwFAYD VQQDDA02OTYyNjNkOS05ZGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mBoS+34lrPK2zaB4C58pPTxlbKl2O2fPxbpaRGQhL56ayQg0r/VvYdYIVbD vC2EvmEUE37DG/5kcxwb/7ASpEKGhz1KeZKchV3ADet1B2wd3QDmSkvqnfwCel79 ynXGiubdXx/n8sTmT0Nx4sAaX1rPDH5+XAdaY4nkqAsewOLaFhsSly7T2yvEuFg4 Yqc5q6ia2YqoshjuPO2bShABdChYdIFN6wJM1ZgkKGAQqc0Yoc3k/eWxay8dn1vv +rJNrgyR9H6E8XP2OaDwMRlYdkDIAjxfjPokXA+o8o19l6hhUGwlZeeKFfkb9PKx epedEHVV2P9nDgdceIcM5m4ABwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzG2IoA FJio3nj+q70BrgKsyOMAMB8GA1UdIwQYMBaAFEIB5at9hrxoWvEfAt5oQFFbbYBY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRCMC8xQ0M0RERCNjFE OEUxMUUyOTAyRTNDRUMwOEIwMkNEMi9RZ0hscTMyR3ZHaGE4UjhDM21oQVVWdHRn RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FnSGxxMzJHdkdoYThSOEMzbWhBVVZ0dGdGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRCMC8xQ0M0RERCNjFEOEUxMUUyOTAyRTNDRUMwOEIwMkNEMi9RZ0hscTMyR3ZH aGE4UjhDM21oQVVWdHRnRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1Yvo74nP9nX51WbaP1XcKlUgG801qLGMvFElkqlzOi/pNTZ/AtVLQ Pu+nwkhnxpY4jF7vfXxkdyVlFLjtlKudaOOd1anU1tmm9WxkQ7jI6OqI06JaAVSg bRKcRPG3AlqkXT1QkPgQo+zx4KtufxsXqbk1DfsQNj2UPxcz4RcPs2aUc/zUloD5 OnkYiHL7LL9Lk2MeAICORG+SiLwDsIJ4pxpX083RgmaRz0FCkz80lsRibfnjHDPZ KZbcIt49A8hEy0tki1oOvpIT6bSSXfGMkgSxrbk5jRcYKmPGF5HdeeAi4W9d5W0G 8sWGp0zWwnZUQ7dfF1FiRRwbJBcx9Gq8 -----END CERTIFICATE-----Generated at Mon Jan 12 02:37:59 2026 by rpki-client