This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
File: qXeTIZMxLej1k4T5CX9D3WvDF-E.mft (raw, json)
Hash identifier: FO2SadgAuxOaZnRphF3cyPAi9wbnulBBfEPdmtrHstw=
Subject key identifier: EC:35:40:36:CF:71:4A:E9:FF:D5:08:1F:D5:50:BB:D9:F7:0F:30:AD
Authority key identifier: A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1
Certificate issuer: /CN=A91FDD4D/serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1
Certificate serial: 0217
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
Manifest number: 0214
Signing time: Sat 10 Jan 2026 15:44:29 +0000
Manifest this update: Sat 10 Jan 2026 15:44:29 +0000
Manifest next update: Sat 17 Jan 2026 15:44:29 +0000
Files and hashes: 1: qXeTIZMxLej1k4T5CX9D3WvDF-E.crl (hash: 3zWx3CesOOKRhgW6db7AmWAlonHeF9yTOX6Iw1KyKIY=)
2: 10F77754D28311EDB1655152C4F9AE02.roa (hash: F/LDXxakDpGw+3XLXdPKCVfoeyAVKMDr7JqjszcCvB0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl
rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Jan 2026 15:44:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDD4D, serialNumber=A977932193312DE8F59384F9097F43DD6BC317E1
Validity
Not Before: Jan 10 15:44:29 2026 GMT
Not After : Jan 17 15:44:29 2026 GMT
Subject: CN=696273dd-ab1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:f4:c0:4c:29:ff:81:79:94:23:46:9e:41:
4d:2e:84:9f:7f:33:32:b8:47:f5:87:69:20:e6:89:
45:e8:b1:bb:e1:cb:23:44:a2:73:d7:8e:40:f6:df:
96:04:92:85:55:42:0d:11:62:68:f0:5f:70:78:b8:
e4:f9:f0:08:2a:85:98:2b:3c:ee:43:aa:0a:2d:54:
bf:ef:0b:b2:52:14:6e:e5:66:51:8b:f9:a4:0c:a8:
aa:2c:77:3f:84:19:3f:b3:e8:f8:f4:08:c5:06:3f:
39:b4:a2:93:37:68:b4:11:1d:3b:da:f8:12:af:1f:
13:b8:fa:67:9e:9e:31:e1:a7:a0:b6:85:03:15:96:
37:87:cb:78:ba:76:30:28:cc:2d:d3:d5:99:70:49:
ca:d1:ee:a4:2d:7d:76:6c:66:29:4f:93:ac:a9:95:
10:d5:18:b4:75:fb:ef:85:47:f4:96:64:92:95:f6:
45:cd:01:06:3c:3a:18:20:17:f6:08:75:2e:e6:63:
97:4e:ef:3f:94:7c:6f:1f:d6:77:42:d1:b7:42:fc:
89:2b:1d:2c:0e:39:c9:cd:05:2a:8c:c8:ac:f6:3a:
3e:ad:61:39:ff:cb:18:2f:e7:58:d5:7c:45:04:b5:
6f:f3:2d:a2:21:ad:14:7c:61:2f:21:3d:ce:8e:9e:
a4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:35:40:36:CF:71:4A:E9:FF:D5:08:1F:D5:50:BB:D9:F7:0F:30:AD
X509v3 Authority Key Identifier:
keyid:A9:77:93:21:93:31:2D:E8:F5:93:84:F9:09:7F:43:DD:6B:C3:17:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qXeTIZMxLej1k4T5CX9D3WvDF-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/6E94AAFED27D11ED8E9A2580C4F9AE02/qXeTIZMxLej1k4T5CX9D3WvDF-E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:20:05:41:a8:50:9f:83:8d:b4:10:f3:59:54:ac:7e:02:8a:
48:6e:2c:f8:6e:94:cb:eb:3f:ec:81:ec:18:bc:e5:60:ac:4c:
ff:f5:55:c4:6b:72:84:0f:d2:99:b8:4a:13:fc:2e:47:54:bd:
b0:07:dc:ee:bb:db:5d:ae:8f:3c:a1:7a:21:41:fa:31:82:b6:
94:56:42:9f:e2:45:a2:df:24:08:e8:94:65:39:23:d7:0f:59:
d3:87:6c:d8:6e:13:b4:b7:77:cd:05:f0:73:75:aa:3b:72:f9:
32:05:18:ff:e8:10:6c:de:dd:c4:4f:be:01:13:6f:da:29:91:
95:ad:e8:a5:9a:f8:ec:85:11:22:27:8b:9f:b6:fe:d8:ba:06:
f8:72:b0:1b:f9:2f:e6:6e:c9:74:f8:b0:1f:62:cd:ee:30:58:
8a:08:4b:08:39:fd:43:8a:8a:58:0c:3c:e0:9d:0f:89:3c:fe:
e2:47:eb:6a:38:38:b4:4e:87:9f:67:ed:05:67:b0:99:2b:ab:
e0:e5:1b:57:35:72:c7:a5:37:ed:3a:01:8b:70:4c:22:0d:02:
4e:f4:2e:ef:d8:84:8a:0e:c6:89:e7:ee:68:c1:1d:5b:fd:8b:
f4:ca:6b:51:6f:f0:d8:7a:a4:b2:9f:94:86:bf:60:81:26:e5:
59:c8:33:15
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRENEQxMTAvBgNVBAUTKEE5Nzc5MzIxOTMzMTJERThGNTkzODRGOTA5N0Y0M0RE
NkJDMzE3RTEwHhcNMjYwMTEwMTU0NDI5WhcNMjYwMTE3MTU0NDI5WjAYMRYwFAYD
VQQDDA02OTYyNzNkZC1hYjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvBH0wEwp/4F5lCNGnkFNLoSffzMyuEf1h2kg5olF6LG74csjRKJz145A9t+W
BJKFVUINEWJo8F9weLjk+fAIKoWYKzzuQ6oKLVS/7wuyUhRu5WZRi/mkDKiqLHc/
hBk/s+j49AjFBj85tKKTN2i0ER072vgSrx8TuPpnnp4x4aegtoUDFZY3h8t4unYw
KMwt09WZcEnK0e6kLX12bGYpT5OsqZUQ1Ri0dfvvhUf0lmSSlfZFzQEGPDoYIBf2
CHUu5mOXTu8/lHxvH9Z3QtG3QvyJKx0sDjnJzQUqjMis9jo+rWE5/8sYL+dY1XxF
BLVv8y2iIa0UfGEvIT3Ojp6kTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOw1QDbP
cUrp/9UIH9VQu9n3DzCtMB8GA1UdIwQYMBaAFKl3kyGTMS3o9ZOE+Ql/Q91rwxfh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC82RTk0QUFGRUQy
N0QxMUVEOEU5QTI1ODBDNEY5QUUwMi9xWGVUSVpNeExlajFrNFQ1Q1g5RDNXdkRG
LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FYZVRJWk14TGVqMWs0VDVDWDlEM1d2REYtRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REQ0RC82RTk0QUFGRUQyN0QxMUVEOEU5QTI1ODBDNEY5QUUwMi9xWGVUSVpNeExl
ajFrNFQ1Q1g5RDNXdkRGLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBkIAVBqFCfg420EPNZVKx+AopIbiz4bpTL6z/sgewYvOVgrEz/9VXE
a3KED9KZuEoT/C5HVL2wB9zuu9tdro88oXohQfoxgraUVkKf4kWi3yQI6JRlOSPX
D1nTh2zYbhO0t3fNBfBzdao7cvkyBRj/6BBs3t3ET74BE2/aKZGVreilmvjshREi
J4uftv7Yugb4crAb+S/mbsl0+LAfYs3uMFiKCEsIOf1DiopYDDzgnQ+JPP7iR+tq
ODi0ToefZ+0FZ7CZK6vg5RtXNXLHpTftOgGLcEwiDQJO9C7v2ISKDsaJ5+5owR1b
/Yv0ymtRb/DYeqSyn5SGv2CBJuVZyDMV
-----END CERTIFICATE-----
Generated at Sun Jan 11 19:55:00 2026 by rpki-client