This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
File: QMCQUT8kAYkgsVHapVRJwV3IS-s.mft (raw, json)
Hash identifier: BFzLcNv0toIwoS1lTvNchW+emAHqw4aEruoq4uzlLhQ=
Subject key identifier: 31:1D:9D:91:99:A5:78:05:1E:0B:9F:49:FA:C5:38:B7:51:3B:53:A4
Authority key identifier: 40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB
Certificate issuer: /CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
Certificate serial: 0A2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
Manifest number: 0A23
Signing time: Tue 30 Dec 2025 19:15:18 +0000
Manifest this update: Tue 30 Dec 2025 19:15:17 +0000
Manifest next update: Tue 06 Jan 2026 19:15:17 +0000
Files and hashes: 1: QMCQUT8kAYkgsVHapVRJwV3IS-s.crl (hash: y2tQ18MxH6Ao7cxeo8QOesFGDWSg2x//6U8XLeZRbv8=)
2: 1E809CD0845111EAA961467EC4F9AE02.roa (hash: daFA8yMRnffIfjJ7fLZ41ES4LLpPtN0oWTU77ItHPkU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl
rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Jan 2026 19:15:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2603 (0xa2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111ED2, serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
Validity
Not Before: Dec 30 19:15:17 2025 GMT
Not After : Jan 6 19:15:17 2026 GMT
Subject: CN=695424c6-f05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:64:d8:42:5d:9b:74:06:e3:b0:dd:72:fe:
48:c5:2e:d6:1a:a0:81:b7:b9:86:93:25:36:2c:5d:
c9:83:aa:d6:3e:98:29:2a:67:0d:1f:e6:96:05:fc:
c6:ed:59:48:c1:17:c0:35:f8:ac:79:f7:fe:88:6b:
f6:55:fc:82:b3:87:7c:30:31:84:5a:b0:d6:a8:34:
d4:27:af:c3:f1:bd:84:09:f1:1a:30:84:43:69:5c:
69:bd:99:1f:f4:13:3d:1c:62:93:e9:3f:70:d3:ff:
d4:59:da:70:02:10:bb:8b:34:6c:c6:e4:3b:f4:d9:
78:d3:d8:2b:85:19:dc:6a:f2:cd:44:eb:9c:3f:4b:
a3:a1:1d:3f:73:27:bc:d7:4d:98:1d:1c:6b:42:b0:
93:32:eb:89:a4:0d:0a:74:3f:93:23:22:fa:49:fa:
2c:a2:11:e3:f5:fe:cf:26:c3:2e:f0:02:61:61:ea:
47:dd:83:fb:bb:f8:e5:48:1d:72:b2:17:3f:79:a6:
46:57:72:a7:bf:28:50:ba:ec:de:d3:52:4e:cb:15:
9a:11:0b:8d:59:bd:65:ce:29:31:54:0f:f7:97:db:
53:ef:4f:78:73:b6:96:da:85:30:89:b2:e6:51:39:
e2:35:6d:e8:3e:e9:fa:8f:9a:17:04:b6:a1:d0:84:
ee:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1D:9D:91:99:A5:78:05:1E:0B:9F:49:FA:C5:38:B7:51:3B:53:A4
X509v3 Authority Key Identifier:
keyid:40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f9:27:02:cc:a6:54:a7:ec:45:a3:e4:e0:62:e1:eb:f0:b6:
95:4b:7b:92:46:02:4e:73:65:79:fe:5c:dd:75:10:bf:c4:14:
4f:2d:ec:18:84:d7:36:e8:05:ba:f8:93:c9:ad:09:8b:14:8a:
00:a9:4a:e3:e5:e5:8f:50:cb:8a:9d:9b:21:b7:e0:c2:11:ba:
cb:47:4f:6e:ea:6a:d4:dd:0b:2b:f6:ef:c7:95:19:2d:bd:a6:
55:6c:f9:89:28:a0:a7:22:0f:35:13:61:2d:b1:c7:c5:db:ad:
03:09:78:30:0b:2d:40:fc:f9:80:c4:2e:45:33:00:9b:6b:9b:
99:c8:3f:f4:f3:11:82:99:a2:c5:ad:e9:85:01:cb:29:e4:3d:
1e:60:32:18:ef:98:5f:76:2b:98:7c:5c:86:6a:06:dd:90:77:
de:32:bb:9a:af:5b:cd:56:c6:d4:f8:fa:92:a9:ff:bc:8a:ff:
d3:b5:3f:9f:b6:66:05:fa:59:b6:c1:03:6e:d8:ed:62:2e:6b:
2d:7b:e4:9f:54:03:e3:25:05:de:28:4c:62:bd:2b:6b:a3:a2:
69:b8:24:43:79:cb:5e:c0:bb:b6:27:33:07:35:47:12:a1:8c:
cf:6c:68:a5:7f:6e:03:06:b4:58:bf:57:e6:52:39:7d:28:f3:
3d:a0:14:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 05:21:33 2025 by rpki-client