This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft
File: QbMaaMknik1EdI4t-MasqBV47LU.mft (raw, json)
Hash identifier: d6GQE0yuuTWSmhfk3DS+au9p40DKFs5QEFOAraDdocQ=
Subject key identifier: 47:01:0E:3E:4C:E5:6C:94:05:3E:71:57:69:37:62:CC:E6:3A:5B:21
Authority key identifier: 41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5
Certificate issuer: /CN=A9120A29/serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5
Certificate serial: 0B42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft
Manifest number: 0B3B
Signing time: Sun 28 Dec 2025 18:44:58 +0000
Manifest this update: Sun 28 Dec 2025 18:44:57 +0000
Manifest next update: Sun 04 Jan 2026 18:44:57 +0000
Files and hashes: 1: QbMaaMknik1EdI4t-MasqBV47LU.crl (hash: uFr7qHk07fR4alK6+FUSlHtAd7Sz8X4issWZ4P+e7r8=)
2: 73A346A24D5D11EAA811C368C4F9AE02.roa (hash: AtiHUqqiSc5seLUNoB/SjIutv6okcY16FsBOaprHkwA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.crl
rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Jan 2026 18:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2882 (0xb42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120A29, serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5
Validity
Not Before: Dec 28 18:44:57 2025 GMT
Not After : Jan 4 18:44:57 2026 GMT
Subject: CN=69517aaa-f385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ac:a9:d3:81:02:88:0f:c8:e1:7e:e1:1e:bb:
65:18:aa:4a:9f:0a:eb:4f:41:10:9f:95:31:2f:74:
3b:40:2e:b2:79:d0:29:e3:ce:14:f9:ec:8c:32:80:
7d:4b:31:a2:d3:ae:d0:6f:5d:06:bd:91:df:bb:09:
9f:f7:ae:c3:3a:ec:88:1d:ec:a3:73:5e:ad:f6:32:
8b:73:1a:2d:d6:f0:c7:89:08:f3:7a:d5:25:5a:ca:
19:b3:89:48:97:8c:e4:5e:38:48:ba:fa:6d:f4:fa:
3c:bb:98:78:7e:92:85:bb:b6:b9:eb:c8:21:dc:f0:
fe:dc:c0:7d:59:1a:ce:a7:8d:1a:25:6f:89:1f:b4:
a5:ff:0e:b8:06:1d:6a:2a:e8:d6:c6:57:e1:6b:aa:
11:56:08:78:9e:4a:a8:b6:57:81:32:06:97:cf:e7:
cf:92:dc:fe:82:6c:c2:e6:2e:7d:a0:0d:ee:e7:30:
38:a8:9e:d2:a3:e4:78:16:e5:3a:8e:88:98:bf:5b:
50:f1:58:8e:82:08:94:8b:9c:32:08:9d:4c:62:e8:
25:5d:fa:75:ef:01:44:fb:4e:00:98:0d:66:39:86:
55:62:30:aa:18:46:28:c0:61:e7:74:0a:65:0f:b2:
bf:a3:75:01:7b:c9:18:03:04:19:c3:c4:b4:4b:fe:
d2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:01:0E:3E:4C:E5:6C:94:05:3E:71:57:69:37:62:CC:E6:3A:5B:21
X509v3 Authority Key Identifier:
keyid:41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:4b:82:9b:92:c4:d1:07:22:c3:40:97:51:41:5a:41:eb:91:
e8:53:e7:81:d3:54:fb:4d:6c:04:f2:60:8a:76:1e:50:10:a7:
dc:23:93:eb:31:6c:af:ff:c8:e4:ef:e6:2e:e4:18:2d:79:99:
6c:a1:28:40:35:89:4d:e6:0a:e8:39:1e:bb:46:16:fc:39:3e:
5f:ea:88:e3:bf:09:60:23:a1:37:20:43:5f:63:ce:5c:39:2b:
a5:03:98:a1:6e:a9:3d:31:1a:db:35:4d:b7:90:08:ce:52:4e:
d8:ff:39:28:50:1e:30:cb:2b:24:e5:c9:b0:1d:60:6f:70:b0:
58:fc:95:0a:35:ae:c6:9a:5e:ac:57:81:b7:ed:f0:4c:74:13:
4f:a5:c5:c8:d4:6e:bc:d3:f5:6b:7a:83:e3:80:c0:4d:dc:0a:
bf:2c:10:99:9c:88:6f:47:ad:b2:fe:1a:67:6c:cf:36:15:ed:
14:36:5c:42:e4:fd:28:c3:b5:3c:72:b9:ee:d4:a0:8c:d1:e5:
84:ac:0d:96:9a:81:eb:ea:cf:1c:c6:43:d6:42:83:0d:45:8a:
90:a0:e9:c1:1d:52:e3:a3:12:5c:c2:01:9b:41:1f:a3:76:c7:
b9:eb:ee:2a:4c:15:18:04:7f:47:d4:71:29:d2:6e:37:52:c2:
92:4a:a9:4e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjBBMjkxMTAvBgNVBAUTKDQxQjMxQTY4QzkyNzhBNEQ0NDc0OEUyREY4QzZBQ0E4
MTU3OEVDQjUwHhcNMjUxMjI4MTg0NDU3WhcNMjYwMTA0MTg0NDU3WjAYMRYwFAYD
VQQDDA02OTUxN2FhYS1mMzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw6yp04ECiA/I4X7hHrtlGKpKnwrrT0EQn5UxL3Q7QC6yedAp484U+eyMMoB9
SzGi067Qb10GvZHfuwmf967DOuyIHeyjc16t9jKLcxot1vDHiQjzetUlWsoZs4lI
l4zkXjhIuvpt9Po8u5h4fpKFu7a568gh3PD+3MB9WRrOp40aJW+JH7Sl/w64Bh1q
KujWxlfha6oRVgh4nkqotleBMgaXz+fPktz+gmzC5i59oA3u5zA4qJ7So+R4FuU6
joiYv1tQ8ViOggiUi5wyCJ1MYuglXfp17wFE+04AmA1mOYZVYjCqGEYowGHndApl
D7K/o3UBe8kYAwQZw8S0S/7SgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcBDj5M
5WyUBT5xV2k3YszmOlshMB8GA1UdIwQYMBaAFEGzGmjJJ4pNRHSOLfjGrKgVeOy1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEEyOS8wRTA2REJBMjRE
NUMxMUVBQTgwODhBNjZDNEY5QUUwMi9RYk1hYU1rbmlrMUVkSTR0LU1hc3FCVjQ3
TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FiTWFhTWtuaWsxRWRJNHQtTWFzcUJWNDdMVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MEEyOS8wRTA2REJBMjRENUMxMUVBQTgwODhBNjZDNEY5QUUwMi9RYk1hYU1rbmlr
MUVkSTR0LU1hc3FCVjQ3TFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCTS4KbksTRByLDQJdRQVpB65HoU+eB01T7TWwE8mCKdh5QEKfcI5Pr
MWyv/8jk7+Yu5BgteZlsoShANYlN5groOR67Rhb8OT5f6ojjvwlgI6E3IENfY85c
OSulA5ihbqk9MRrbNU23kAjOUk7Y/zkoUB4wyysk5cmwHWBvcLBY/JUKNa7Gml6s
V4G37fBMdBNPpcXI1G680/VreoPjgMBN3Aq/LBCZnIhvR62y/hpnbM82Fe0UNlxC
5P0ow7U8crnu1KCM0eWErA2WmoHr6s8cxkPWQoMNRYqQoOnBHVLjoxJcwgGbQR+j
dse56+4qTBUYBH9H1HEp0m43UsKSSqlO
-----END CERTIFICATE-----
Generated at Mon Dec 29 05:22:18 2025 by rpki-client