This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft File: QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft (raw, json) Hash identifier: qzITlKoX/aHLSjaiyUhg4HZ9txUSW1cUOJ3bY/5q8wo= Subject key identifier: B0:49:48:DA:44:1C:48:24:05:1C:C6:2A:4A:06:5D:6C:9C:EC:97:72 Authority key identifier: 41:4F:B6:17:88:69:13:0F:82:6E:9E:30:C0:B7:94:08:4D:97:60:DD Certificate issuer: /CN=A91E91BC/serialNumber=414FB6178869130F826E9E30C0B794084D9760DD Certificate serial: 0373 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft Manifest number: 036D Signing time: Sun 11 Jan 2026 00:05:20 +0000 Manifest this update: Sun 11 Jan 2026 00:05:19 +0000 Manifest next update: Sun 18 Jan 2026 00:05:19 +0000 Files and hashes: 1: QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl (hash: 2Ehd86N4T16Iv+/h3hqi1x8namoYsNE1yxnWh8kxooI=) 2: 7BCC4B32E85C11EE9593933FC4F9AE02.roa (hash: C9cBIgp62dlijuyH/TsefWQ1spYTduwHvoUlA7V/520=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Jan 2026 00:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 883 (0x373) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E91BC, serialNumber=414FB6178869130F826E9E30C0B794084D9760DD Validity Not Before: Jan 11 00:05:19 2026 GMT Not After : Jan 18 00:05:19 2026 GMT Subject: CN=6962e93f-7d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:eb:8b:63:65:02:37:08:2d:75:2e:90:eb:92: 48:86:9a:a6:aa:97:cf:c6:f0:62:f7:8f:14:a8:4e: 21:f4:d4:f4:1a:b6:a3:6d:e4:54:9e:03:40:87:e9: 2a:ca:f1:d3:c4:4d:e8:c4:72:07:83:1e:2b:f0:bf: c8:c2:8e:c4:5d:fa:f5:1f:9d:09:74:1c:19:12:09: d2:3b:69:df:24:4c:51:6e:bc:1a:52:49:cb:db:4d: ce:4d:37:99:b5:bc:88:e0:0c:70:4d:e7:b7:4b:42: 49:f8:17:e6:c0:e2:b6:e2:24:87:d9:2b:fa:b1:7f: 64:c8:8f:2e:c0:10:de:11:f8:bd:5d:a0:f9:fe:63: 40:39:d1:20:6a:08:ff:00:78:33:fd:13:e3:79:26: be:75:a2:6d:e5:e2:a5:a8:d1:95:ea:a4:9d:47:d8: 82:c3:06:56:62:06:05:c4:e8:d9:b7:60:9f:e0:2d: e4:b4:ef:40:98:bb:d3:5f:8d:e9:4c:8a:d5:e2:65: 21:6c:30:fb:58:53:11:71:0d:18:34:7c:c3:d6:b9: 28:76:2a:65:d4:22:9f:7e:51:98:47:f7:9c:b0:ca: c1:ef:57:d4:ab:c4:4d:0f:d2:0b:9b:cb:f1:3f:f0: e1:72:f7:37:1d:b6:ea:92:12:7a:8c:ee:4b:53:5e: b5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:49:48:DA:44:1C:48:24:05:1C:C6:2A:4A:06:5D:6C:9C:EC:97:72 X509v3 Authority Key Identifier: keyid:41:4F:B6:17:88:69:13:0F:82:6E:9E:30:C0:B7:94:08:4D:97:60:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:3a:c8:d0:15:d9:12:ca:52:d9:32:90:bb:e0:a1:5b:e5:b4: fb:41:bd:2a:62:82:74:1b:01:50:1a:66:b8:3a:bd:f2:90:34: dd:12:9f:48:a7:08:6c:5b:16:1f:b6:e6:33:71:ae:f4:1f:0c: fe:66:46:05:cc:eb:40:43:35:c1:98:58:71:2b:5f:d8:c9:1b: 0e:87:98:cb:0b:ef:42:c2:ef:15:9b:c3:2a:f7:b2:32:36:50: 8c:2e:75:3c:3b:23:f2:dd:a3:bd:ef:96:0e:c3:40:20:4e:b9: e8:65:13:0c:6d:36:d0:bf:c1:d4:ea:1b:9d:9c:ab:ac:c0:04: fb:ee:26:c2:df:38:e6:7e:e6:0e:f6:6a:d7:9b:7a:7e:2e:61: 5a:4d:2e:cc:d3:1b:0b:8d:2b:ce:f6:60:58:d4:d7:42:0a:ab: 15:3f:2d:c0:f8:af:af:ee:d8:a5:39:6e:3d:09:25:5c:03:f9: 2e:24:4e:08:28:49:81:a7:d5:fd:95:6b:84:42:b7:8d:cf:2d: b5:1c:13:2c:3e:5c:45:c0:b7:84:cc:d1:86:bb:d7:7d:96:ba: 5e:91:ed:a8:7b:fe:c1:0c:a6:81:d2:9f:ce:75:43:1f:2b:05: 43:65:60:81:6f:3d:c5:0b:ad:35:9e:fe:40:f1:88:58:18:cf: 60:19:47:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkxQkMxMTAvBgNVBAUTKDQxNEZCNjE3ODg2OTEzMEY4MjZFOUUzMEMwQjc5NDA4 NEQ5NzYwREQwHhcNMjYwMTExMDAwNTE5WhcNMjYwMTE4MDAwNTE5WjAYMRYwFAYD VQQDDA02OTYyZTkzZi03ZDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3OuLY2UCNwgtdS6Q65JIhpqmqpfPxvBi948UqE4h9NT0GrajbeRUngNAh+kq yvHTxE3oxHIHgx4r8L/Iwo7EXfr1H50JdBwZEgnSO2nfJExRbrwaUknL203OTTeZ tbyI4AxwTee3S0JJ+BfmwOK24iSH2Sv6sX9kyI8uwBDeEfi9XaD5/mNAOdEgagj/ AHgz/RPjeSa+daJt5eKlqNGV6qSdR9iCwwZWYgYFxOjZt2Cf4C3ktO9AmLvTX43p TIrV4mUhbDD7WFMRcQ0YNHzD1rkodipl1CKfflGYR/ecsMrB71fUq8RND9ILm8vx P/Dhcvc3HbbqkhJ6jO5LU161vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBJSNpE HEgkBRzGKkoGXWyc7JdyMB8GA1UdIwQYMBaAFEFPtheIaRMPgm6eMMC3lAhNl2Dd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BNEU2NzNDQURC RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9RVS0yRjRocEV3LUNicDR3d0xlVUNFMlhZ TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FVLTJGNGhwRXctQ2JwNHd3TGVVQ0UyWFlOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTFCQy9BNEU2NzNDQURCRTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9RVS0yRjRocEV3 LUNicDR3d0xlVUNFMlhZTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHOsjQFdkSylLZMpC74KFb5bT7Qb0qYoJ0GwFQGma4Or3ykDTdEp9I pwhsWxYftuYzca70Hwz+ZkYFzOtAQzXBmFhxK1/YyRsOh5jLC+9Cwu8Vm8Mq97Iy NlCMLnU8OyPy3aO975YOw0AgTrnoZRMMbTbQv8HU6hudnKuswAT77ibC3zjmfuYO 9mrXm3p+LmFaTS7M0xsLjSvO9mBY1NdCCqsVPy3A+K+v7tilOW49CSVcA/kuJE4I KEmBp9X9lWuEQreNzy21HBMsPlxFwLeEzNGGu9d9lrpeke2oe/7BDKaB0p/OdUMf KwVDZWCBbz3FC601nv5A8YhYGM9gGUcm -----END CERTIFICATE-----Generated at Mon Jan 12 13:44:35 2026 by rpki-client