This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft
File: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft (raw, json)
Hash identifier: rBoupfjyGBrv9qeTHtcpe1ZpMrmRYqk6rCJ1W8MeUhQ=
Subject key identifier: D9:B6:5F:6D:6B:22:32:EC:FC:C9:69:47:A4:50:0E:9D:CB:E9:DA:AA
Authority key identifier: 40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5
Certificate issuer: /CN=A911CB05/serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5
Certificate serial: E0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft
Manifest number: DE
Signing time: Fri 19 Dec 2025 04:39:51 +0000
Manifest this update: Fri 19 Dec 2025 04:39:51 +0000
Manifest next update: Fri 26 Dec 2025 04:39:51 +0000
Files and hashes: 1: QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl (hash: 7D2qEgPvT93bZMg8R4yhQbmmWThV1jV8vVSOIXRkayw=)
2: E692CC2A8A9B11EFBC56AA85C4F9AE02.roa (hash: izaJYsSU6U7Mo7zWWYJeDmZ95mIz6wQL/e1yh556DPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl
rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:39:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CB05, serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5
Validity
Not Before: Dec 19 04:39:51 2025 GMT
Not After : Dec 26 04:39:51 2025 GMT
Subject: CN=6944d717-92ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:90:7c:fc:17:3c:a0:83:fd:1b:0b:43:08:
3d:bb:49:21:e4:02:a4:ec:70:dd:10:a9:d7:bf:c4:
b6:1f:b7:60:ab:08:43:3a:ca:89:a0:20:f7:5b:f2:
d2:8a:ce:01:aa:bb:95:23:69:49:b6:a4:51:af:70:
1e:59:08:84:48:af:5b:ac:54:d5:f0:b8:e9:58:0d:
3b:b3:13:1d:2b:1c:e1:cd:4e:ba:f2:fe:05:3e:d4:
30:5e:96:7c:b5:34:d3:53:b9:73:2b:5d:2e:a9:95:
d4:e6:dd:a2:57:9d:a8:2b:b2:10:58:a8:3b:d4:30:
9e:a8:3d:18:c1:cf:aa:f3:d5:f8:56:6b:1e:45:8d:
5e:68:e1:cc:70:9e:e7:16:ee:57:9f:72:29:ec:a6:
fc:91:45:80:d0:33:e1:ec:d8:cf:88:07:a7:1b:68:
10:33:30:af:f9:cd:bc:58:f3:41:c0:34:7f:ea:d8:
1d:41:03:6f:a2:f4:24:e7:e6:77:e0:82:3b:b7:f7:
8f:39:a2:47:21:ff:54:1d:be:15:e6:1f:2e:18:45:
6f:ff:ee:9c:11:60:a9:c3:a7:04:2a:fe:0d:04:78:
9f:00:d8:bd:63:09:8b:34:07:79:79:ca:3d:0c:e0:
09:ef:be:13:1f:da:fb:82:bc:20:76:6f:78:82:33:
79:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B6:5F:6D:6B:22:32:EC:FC:C9:69:47:A4:50:0E:9D:CB:E9:DA:AA
X509v3 Authority Key Identifier:
keyid:40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:d5:02:bb:90:97:4f:ac:df:9d:ee:37:e9:89:06:ec:7b:70:
63:e6:bd:ba:7e:31:8f:c4:01:8d:f9:93:38:a6:4c:95:ba:8c:
0a:59:df:df:e8:60:ec:cc:bf:be:81:65:d8:59:be:e2:02:e2:
bd:0b:80:ca:8e:7c:5c:43:3f:1e:d0:ec:6e:72:91:9f:ce:90:
ae:9b:4c:f2:e1:89:06:ba:c4:e3:a7:f5:00:e4:f9:eb:45:80:
3e:29:37:01:c4:6b:ba:ca:17:50:f7:7f:59:a6:ab:e2:fe:70:
3f:b8:65:ac:c8:4b:9b:16:38:39:18:bf:70:e1:d0:54:22:be:
ea:15:a4:fe:01:54:25:53:f6:e9:33:4b:23:1d:5a:b6:aa:66:
0d:99:d4:85:d3:91:4a:aa:3b:c4:2f:6e:7c:25:8e:cb:4b:30:
e8:24:69:00:30:5e:1e:cc:b2:26:a8:b7:55:a5:ad:3f:00:9b:
23:35:e2:9c:7d:af:12:7e:fd:52:d0:8c:5d:73:a0:fe:9e:55:
78:72:07:c1:e0:46:f1:36:5d:19:df:1f:35:c6:1c:0a:7a:13:
76:ab:93:10:25:99:24:ab:8b:9f:a6:48:67:fe:c5:30:ae:42:
11:a1:83:4b:b7:8f:49:c1:0f:9e:44:3b:ec:42:e5:40:a0:28:
bc:5e:fd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:56:19 2025 by rpki-client