This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft File: qjbeqgtIjXQ9MJajdNPOwwNOado.mft (raw, json) Hash identifier: YJK5oRm6Tmww08ShHibjCxeItSQUQ5sjOyce6RmZOfc= Subject key identifier: 6A:55:93:06:C2:A2:1E:18:7A:F9:18:6D:51:9A:DD:46:E4:41:CC:8D Authority key identifier: AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA Certificate issuer: /CN=A91DC068/serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft Manifest number: 015D Signing time: Thu 01 Jan 2026 03:43:50 +0000 Manifest this update: Thu 01 Jan 2026 03:43:50 +0000 Manifest next update: Thu 08 Jan 2026 03:43:50 +0000 Files and hashes: 1: qjbeqgtIjXQ9MJajdNPOwwNOado.crl (hash: 4SsBVEb9FbunrQ0zuKx1877smUDYkrVAlzvwBQ6/j9s=) 2: 4CFFF0A6D5DD11EEA5B1C711C4F9AE02.roa (hash: 39NjyNN95zMryV/4gipoP40hgOhWq2OieGFrOUrcjx8=) 3: 4C798C5AD5DD11EEA5B1C711C4F9AE02.roa (hash: UehIW4ne9/pa7E+bJ7b7vlEagKFtkPy1RDy9gQNG8w4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Jan 2026 03:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC068, serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA Validity Not Before: Jan 1 03:43:50 2026 GMT Not After : Jan 8 03:43:50 2026 GMT Subject: CN=6955ed76-bbe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f7:13:63:24:83:e2:22:ad:f8:62:62:0c:12: 6b:6d:7a:9b:73:79:9b:bf:61:a7:b6:70:1a:83:5d: 06:25:6a:a0:3a:0c:ff:12:70:9f:5a:3b:ae:a6:a8: 59:14:0e:49:bf:0f:7b:60:a0:45:f4:2c:01:a2:ab: 16:53:55:06:b4:cf:4b:3e:30:2d:cb:a9:c2:b8:3b: d4:d9:78:6f:ff:cf:24:58:da:76:37:c0:a4:29:90: ee:40:79:84:36:8b:45:25:fe:ff:f0:7a:ef:f0:d1: 17:fc:e7:0c:65:4a:73:a2:55:7a:61:d9:86:ef:a5: 98:01:a4:87:47:eb:64:b9:7f:87:a5:e7:2f:ff:eb: 77:35:58:ee:51:46:30:b4:68:08:22:7c:3e:09:99: 55:01:48:2f:1b:f3:90:ab:7e:12:0e:dc:3c:49:b9: 1b:7b:0e:4b:67:82:41:6d:09:1d:7e:a4:97:75:b2: 73:72:e4:88:4f:d7:5a:ed:1c:8e:0c:5b:89:74:9e: b4:8a:08:46:e6:d1:4d:64:d4:23:74:6e:bb:db:3f: 1c:22:8b:16:5e:5c:a5:1b:ea:8e:dc:49:da:dd:7f: 84:28:30:9c:d6:e9:ab:02:78:3b:9d:f6:50:cb:6c: 93:a5:b6:f5:fd:cb:3e:3a:02:7c:d5:84:41:6e:29: e4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:55:93:06:C2:A2:1E:18:7A:F9:18:6D:51:9A:DD:46:E4:41:CC:8D X509v3 Authority Key Identifier: keyid:AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:8d:83:22:49:18:0b:8e:7e:74:02:a3:b9:f1:d5:1f:2a:39: 69:6e:8a:23:8e:a3:ba:93:d9:55:cb:c3:bd:be:2f:3d:25:a0: a8:7b:22:f3:59:39:b5:ae:3f:54:fa:4c:d1:9f:9f:22:6a:1b: e2:60:b6:70:c6:89:ce:43:74:7b:ea:23:eb:19:7c:ef:f5:a6: 44:b2:7d:f1:b7:c7:76:66:a3:1b:27:cc:91:ee:e6:0c:6e:7b: 32:50:44:f8:de:5c:fc:08:c6:88:c8:e6:31:aa:98:6e:b9:6a: f6:7b:ae:ff:b4:13:55:0f:7b:89:61:df:a9:9a:dc:a6:3e:02: 43:ce:41:3c:01:fa:f1:e0:b4:06:2b:05:52:22:d0:89:b6:83: 84:b6:b2:da:22:16:8c:02:a0:64:1a:61:60:c0:f7:be:e0:94: b0:18:a0:45:fc:8f:91:f8:56:89:a4:b3:05:94:7d:81:24:20: f7:bd:e1:d4:e7:92:99:7a:db:bf:27:52:94:e7:07:03:ba:6c: e8:2c:2a:06:bf:3f:f7:70:a5:ac:58:1c:a8:59:f7:c8:e1:af: aa:8f:3d:46:6a:f1:14:a7:93:02:b5:f3:d5:d3:ae:98:e2:6c: 89:36:32:04:3a:3b:de:45:1e:04:92:ea:5f:d8:0a:ed:17:7b: 82:1a:b0:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwNjgxMTAvBgNVBAUTKEFBMzZERUFBMEI0ODhENzQzRDMwOTZBMzc0RDNDRUMz MDM0RTY5REEwHhcNMjYwMTAxMDM0MzUwWhcNMjYwMTA4MDM0MzUwWjAYMRYwFAYD VQQDDA02OTU1ZWQ3Ni1iYmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PcTYySD4iKt+GJiDBJrbXqbc3mbv2GntnAag10GJWqgOgz/EnCfWjuupqhZ FA5Jvw97YKBF9CwBoqsWU1UGtM9LPjAty6nCuDvU2Xhv/88kWNp2N8CkKZDuQHmE NotFJf7/8Hrv8NEX/OcMZUpzolV6YdmG76WYAaSHR+tkuX+Hpecv/+t3NVjuUUYw tGgIInw+CZlVAUgvG/OQq34SDtw8Sbkbew5LZ4JBbQkdfqSXdbJzcuSIT9da7RyO DFuJdJ60ighG5tFNZNQjdG672z8cIosWXlylG+qO3Ena3X+EKDCc1umrAng7nfZQ y2yTpbb1/cs+OgJ81YRBbink2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGpVkwbC oh4YevkYbVGa3UbkQcyNMB8GA1UdIwQYMBaAFKo23qoLSI10PTCWo3TTzsMDTmna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC83ODFFN0RDNEQ1 MTYxMUVFQjM1RTZBNjBDNEY5QUUwMi9xamJlcWd0SWpYUTlNSmFqZE5QT3d3Tk9h ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FqYmVxZ3RJalhROU1KYWpkTlBPd3dOT2Fkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzA2OC83ODFFN0RDNEQ1MTYxMUVFQjM1RTZBNjBDNEY5QUUwMi9xamJlcWd0SWpY UTlNSmFqZE5QT3d3Tk9hZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChjYMiSRgLjn50AqO58dUfKjlpboojjqO6k9lVy8O9vi89JaCoeyLz WTm1rj9U+kzRn58iahviYLZwxonOQ3R76iPrGXzv9aZEsn3xt8d2ZqMbJ8yR7uYM bnsyUET43lz8CMaIyOYxqphuuWr2e67/tBNVD3uJYd+pmtymPgJDzkE8Afrx4LQG KwVSItCJtoOEtrLaIhaMAqBkGmFgwPe+4JSwGKBF/I+R+FaJpLMFlH2BJCD3veHU 55KZetu/J1KU5wcDumzoLCoGvz/3cKWsWByoWffI4a+qjz1GavEUp5MCtfPV066Y 4myJNjIEOjveRR4Ekupf2ArtF3uCGrAK -----END CERTIFICATE-----Generated at Fri Jan 2 20:05:44 2026 by rpki-client