This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft File: Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft (raw, json) Hash identifier: oySgGzDlYgszrzKEXz7vS+0w9hsOTxn8XTZK80ry6is= Subject key identifier: 63:2E:EF:CD:87:5B:2B:59:C3:7E:A5:64:6C:9A:9E:7A:D8:47:A0:57 Authority key identifier: 43:C3:CF:11:74:BD:72:B4:34:C6:92:8B:8A:BE:BF:05:D6:31:3F:40 Certificate issuer: /CN=A9198D20/serialNumber=43C3CF1174BD72B434C6928B8ABEBF05D6313F40 Certificate serial: 0C41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft Manifest number: 0C3A Signing time: Mon 12 Jan 2026 18:16:40 +0000 Manifest this update: Mon 12 Jan 2026 18:16:39 +0000 Manifest next update: Mon 19 Jan 2026 18:16:39 +0000 Files and hashes: 1: Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl (hash: e6+FbubT5k0Im8hI5BbVYdc7J/fz4J+NyAxl2lSPmzQ=) 2: EE985C561CEA11EA8B382C0BC4F9AE02.roa (hash: /clDM2qDPD5uC0RxJEAiWWigew7J9uL+PN4x0Vi4eF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 18:16:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3137 (0xc41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D20, serialNumber=43C3CF1174BD72B434C6928B8ABEBF05D6313F40 Validity Not Before: Jan 12 18:16:39 2026 GMT Not After : Jan 19 18:16:39 2026 GMT Subject: CN=69653a87-e6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:88:86:81:25:ad:cf:14:90:05:d8:03:8d:d1: c8:19:79:3f:ff:66:e1:8b:3c:4f:12:c3:bb:4a:dc: b4:8f:ae:12:a2:3a:e8:88:17:03:80:45:44:a6:ce: 61:18:a0:ad:9f:f7:7f:88:b2:d7:b7:40:a6:ab:f8: 6f:53:59:ec:5e:c3:c3:8a:80:cf:ba:ff:3d:dd:30: a8:29:20:e0:a8:60:c8:b5:85:ce:40:25:a4:af:05: 22:17:8e:af:c8:da:00:b3:1c:9c:f4:ae:65:3f:30: 6b:72:6b:77:ff:fc:ab:96:b9:03:a8:2a:59:e9:78: c5:49:91:7e:09:3d:a2:1c:28:02:0f:d9:5f:56:8a: 01:c4:03:08:b3:14:25:d6:18:62:e4:9f:38:10:ea: ab:72:6b:e7:c5:67:94:c8:0c:2d:7c:61:f4:de:ff: 7d:c9:e1:8e:da:fa:84:d1:6a:c5:d9:cc:18:ad:37: de:da:31:67:0b:91:0e:65:5e:63:82:ef:bc:10:ab: b8:37:ae:8c:99:9e:50:19:62:c9:17:dc:24:2e:4d: 98:ad:2c:05:af:7f:fe:4e:d6:4a:4e:b6:d3:cf:ba: 84:b4:8a:05:19:68:b0:40:27:b4:fc:25:35:f9:8b: 7e:fe:1f:f2:cb:45:71:d6:78:87:ba:d2:ae:f6:9b: 4b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2E:EF:CD:87:5B:2B:59:C3:7E:A5:64:6C:9A:9E:7A:D8:47:A0:57 X509v3 Authority Key Identifier: keyid:43:C3:CF:11:74:BD:72:B4:34:C6:92:8B:8A:BE:BF:05:D6:31:3F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:2e:ea:3e:17:4b:9d:df:4a:11:ae:35:98:6d:f8:1a:be:e1: 08:b9:f7:0b:77:21:c0:77:61:b5:2a:08:18:ac:40:b4:a8:76: c2:2b:4c:21:cf:d9:61:ad:e3:c3:79:47:43:79:4e:4d:f9:02: df:c4:35:b7:1d:7b:2f:50:c2:f7:c7:eb:2d:50:51:9e:71:8f: 91:45:19:20:8a:36:fd:bf:c4:81:2c:c4:2c:54:b1:6c:40:d5: 40:0f:44:4e:a1:31:41:8e:a0:e1:a0:85:61:4a:c2:c2:c5:9b: 23:68:55:a7:70:48:07:a0:e3:a1:91:8c:12:4c:d2:a9:94:3e: db:89:fd:9b:82:5c:35:ae:9f:28:17:f7:b1:9c:5b:da:3c:a7: 1e:3b:4a:41:7b:94:57:e8:27:60:96:72:3c:38:85:6b:94:44: 59:49:97:00:d8:d8:9c:fb:72:42:6c:71:9f:d9:a2:21:c6:8c: a4:f1:15:4f:de:cb:0d:cf:e3:19:2f:f8:0c:9c:bb:f4:18:45: f8:a8:8d:0e:e5:29:02:7e:91:64:81:35:5b:d3:26:e4:19:75: e4:51:df:02:9c:12:3b:56:12:44:b6:23:02:62:0f:09:8f:32: 3b:58:90:38:a3:96:24:8b:4b:78:c3:06:15:99:9e:8e:5e:42: f4:3f:64:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThEMjAxMTAvBgNVBAUTKDQzQzNDRjExNzRCRDcyQjQzNEM2OTI4QjhBQkVCRjA1 RDYzMTNGNDAwHhcNMjYwMTEyMTgxNjM5WhcNMjYwMTE5MTgxNjM5WjAYMRYwFAYD VQQDDA02OTY1M2E4Ny1lNmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYiGgSWtzxSQBdgDjdHIGXk//2bhizxPEsO7Sty0j64SojroiBcDgEVEps5h GKCtn/d/iLLXt0Cmq/hvU1nsXsPDioDPuv893TCoKSDgqGDItYXOQCWkrwUiF46v yNoAsxyc9K5lPzBrcmt3//yrlrkDqCpZ6XjFSZF+CT2iHCgCD9lfVooBxAMIsxQl 1hhi5J84EOqrcmvnxWeUyAwtfGH03v99yeGO2vqE0WrF2cwYrTfe2jFnC5EOZV5j gu+8EKu4N66MmZ5QGWLJF9wkLk2YrSwFr3/+TtZKTrbTz7qEtIoFGWiwQCe0/CU1 +Yt+/h/yy0Vx1niHutKu9ptLmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMu782H WytZw36lZGyannrYR6BXMB8GA1UdIwQYMBaAFEPDzxF0vXK0NMaSi4q+vwXWMT9A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQyMC8zRjc3MDNDMjFD RTkxMUVBOTg4OTc0ODdDNEY5QUUwMi9ROFBQRVhTOWNyUTB4cEtMaXI2X0JkWXhQ MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E4UFBFWFM5Y3JRMHhwS0xpcjZfQmRZeFAwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEQyMC8zRjc3MDNDMjFDRTkxMUVBOTg4OTc0ODdDNEY5QUUwMi9ROFBQRVhTOWNy UTB4cEtMaXI2X0JkWXhQMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMLuo+F0ud30oRrjWYbfgavuEIufcLdyHAd2G1KggYrEC0qHbCK0wh z9lhrePDeUdDeU5N+QLfxDW3HXsvUML3x+stUFGecY+RRRkgijb9v8SBLMQsVLFs QNVAD0ROoTFBjqDhoIVhSsLCxZsjaFWncEgHoOOhkYwSTNKplD7bif2bglw1rp8o F/exnFvaPKceO0pBe5RX6CdglnI8OIVrlERZSZcA2Nic+3JCbHGf2aIhxoyk8RVP 3ssNz+MZL/gMnLv0GEX4qI0O5SkCfpFkgTVb0ybkGXXkUd8CnBI7VhJEtiMCYg8J jzI7WJA4o5Yki0t4wwYVmZ6OXkL0P2SC -----END CERTIFICATE-----Generated at Tue Jan 13 02:55:58 2026 by rpki-client