This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
File: QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft (raw, json)
Hash identifier: P3vynHIMOALEQe0AWiyja0NssKkJGFR/Uu76CiLqZeU=
Subject key identifier: 7D:AF:EF:F5:11:E1:84:A4:95:9D:85:C8:8B:77:74:B2:97:C9:6B:84
Authority key identifier: 40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
Certificate issuer: /CN=A91ADD64/serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Certificate serial: 0157
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
Manifest number: 0147
Signing time: Fri 09 Jan 2026 03:49:50 +0000
Manifest this update: Fri 09 Jan 2026 03:49:49 +0000
Manifest next update: Fri 16 Jan 2026 03:49:49 +0000
Files and hashes: 1: QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl (hash: PDu4J8Tu6t7DPaNqxA2KkWdrKFRtwydSnC2dwL9z6rw=)
2: B1F23610923B11F084052A57C4F9AE02.roa (hash: 6wBIunqzVP5IVwrNYuKOIIoGdjbUyMvHMZGflDhF2Wc=)
3: 8B0E94087E7711F0825F7E6BC4F9AE02.roa (hash: VGNr+wy397+x+eo2u5nezP4JupOw3/BZyZCNhIT48y4=)
4: 47E37F2AAB1A11F096B0EC5FC4F9AE02.roa (hash: f31wkh4SmRezq8K+eaS7YGeeme+WhDVB3FqGjZlLVDI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl
rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Jan 2026 03:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADD64, serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Validity
Not Before: Jan 9 03:49:49 2026 GMT
Not After : Jan 16 03:49:49 2026 GMT
Subject: CN=69607ade-b449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:91:6c:cb:ca:c9:8c:1e:ed:0b:c7:60:62:0f:
fb:28:ef:3b:ab:97:fd:d5:56:db:ff:93:43:1f:0e:
54:6f:2c:0b:1e:67:90:d0:c4:39:26:e5:d2:ed:b5:
5e:ae:73:ec:4f:ac:45:89:72:e0:02:2e:0b:ba:7c:
1a:97:4f:5f:65:84:52:d5:40:d9:bf:35:ca:59:b4:
1e:dd:41:db:ae:02:60:b2:a2:09:5a:a2:12:07:6b:
ef:ad:8b:dd:22:1b:6c:88:a8:97:3c:06:b4:0c:22:
2c:9e:aa:fa:72:d1:92:9f:f8:e7:a2:79:8c:1c:33:
92:f8:aa:9e:16:36:07:6e:e4:e5:ef:6c:c1:0d:cb:
3e:d3:a7:b3:d9:88:3c:f1:c3:db:40:12:52:e1:51:
09:e3:48:95:be:00:b7:77:ef:77:12:24:06:d7:19:
8f:4a:d7:b8:87:7b:98:ae:75:02:b6:90:3f:ed:2d:
70:cc:28:56:6a:f6:b5:31:a7:7d:b8:24:43:22:03:
4e:56:a8:e3:6d:32:ef:12:95:68:be:06:05:0d:5a:
c3:84:70:55:5a:b4:c1:e0:81:ef:b3:98:0a:6f:a2:
0f:de:3e:19:e2:c8:51:a6:cd:72:66:5d:ae:d0:1a:
79:37:ae:f4:34:d8:7e:19:64:27:ba:d4:44:59:cc:
62:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AF:EF:F5:11:E1:84:A4:95:9D:85:C8:8B:77:74:B2:97:C9:6B:84
X509v3 Authority Key Identifier:
keyid:40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:d6:5d:39:78:54:c4:61:99:c5:58:8e:28:f1:0a:a3:2c:96:
18:82:19:32:0a:47:88:0f:ce:67:24:74:60:71:65:34:22:32:
3d:f0:5c:71:79:1e:a2:d1:eb:d6:46:da:9b:18:6c:b7:f3:52:
fa:53:50:3f:b2:4a:85:d2:87:80:f2:e0:51:6d:5f:f0:b8:22:
c9:1f:50:8e:cd:f5:23:a6:50:ea:0f:59:e5:af:58:2a:7f:0c:
71:d3:88:cc:83:1f:92:d0:8c:28:d2:7f:5f:d5:b3:58:d3:78:
8c:f7:b7:c0:5a:5d:0d:ef:39:80:ab:cb:b4:e4:16:f1:9e:8f:
68:09:4b:62:c4:83:2d:ee:10:6f:d4:6b:bf:51:b4:8e:14:7c:
13:ac:ab:98:05:86:c3:62:2e:1b:49:a4:f7:3e:4a:d2:5b:86:
5e:27:98:c1:6a:c7:b4:87:38:90:1e:c9:f5:b7:65:0c:6d:39:
61:bc:a6:bb:47:8c:e1:50:22:15:49:ed:e8:9c:b0:63:f3:8f:
67:b2:1f:8e:55:eb:eb:34:eb:f5:13:d8:0b:52:b3:9e:9e:2c:
1c:0b:06:2f:02:60:31:07:a8:72:8c:5a:f9:2c:06:ad:9e:6a:
c9:4b:49:23:e9:21:fe:95:fc:a7:0f:ac:b2:f2:f5:67:fa:5c:
e8:f1:a6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 20:58:15 2026 by rpki-client