This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
File: QgxcRJT5_6t6haNwv8Pklcz6S6M.mft (raw, json)
Hash identifier: abZu5SEQ2t4opkkSl2zc03tkCsd8RHdxQSRJrBZWPYY=
Subject key identifier: FA:5B:59:04:15:62:1F:60:47:A6:A0:EC:17:7F:CE:C5:78:AA:92:ED
Authority key identifier: 42:0C:5C:44:94:F9:FF:AB:7A:85:A3:70:BF:C3:E4:95:CC:FA:4B:A3
Certificate issuer: /CN=A9132F27/serialNumber=420C5C4494F9FFAB7A85A370BFC3E495CCFA4BA3
Certificate serial: 0161
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
Manifest number: 0161
Signing time: Fri 19 Dec 2025 03:10:59 +0000
Manifest this update: Fri 19 Dec 2025 03:10:59 +0000
Manifest next update: Fri 26 Dec 2025 03:10:59 +0000
Files and hashes: 1: QgxcRJT5_6t6haNwv8Pklcz6S6M.crl (hash: tV+1FwxezroBKHS25e9XVP4frzf2qRSmsF/nqS5TbN4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.crl
rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 03:10:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132F27, serialNumber=420C5C4494F9FFAB7A85A370BFC3E495CCFA4BA3
Validity
Not Before: Dec 19 03:10:59 2025 GMT
Not After : Dec 26 03:10:59 2025 GMT
Subject: CN=6944c243-f789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:35:6e:db:32:11:de:79:53:6e:0b:28:b3:ae:
58:74:92:90:12:d1:a3:fb:d7:dd:ce:af:cc:e6:2e:
ab:79:97:58:6e:26:a6:97:9e:86:b0:c8:f9:f6:dc:
c7:4f:9f:32:93:68:e5:1a:ef:80:f6:ee:ff:9c:2f:
f7:f7:1e:36:49:3f:17:54:40:a3:84:b6:92:08:b0:
32:0d:1f:cd:7b:7f:95:a9:41:2b:1c:82:80:92:6e:
71:2c:8d:52:c9:6d:5d:7c:f1:ec:2e:c6:43:e4:32:
b4:28:26:94:d3:32:ac:03:62:9f:49:a2:79:8d:6b:
e7:e7:31:70:a0:b3:59:d6:f7:94:a8:9d:b4:91:a3:
0d:1c:8a:c8:eb:cd:fc:ba:5b:fa:1d:af:d2:68:05:
58:6d:e0:e5:a1:55:5f:e4:03:8b:ee:0f:51:2d:59:
80:59:8a:21:fc:d7:07:e5:26:42:4e:77:ed:7f:cd:
d7:cc:a6:b3:83:53:67:2c:a9:02:e6:3f:09:42:14:
68:c8:bc:59:cf:11:94:09:bd:be:d7:2f:d7:8d:34:
7d:b8:f5:cf:99:1f:0f:a0:86:49:3d:50:41:c2:b3:
22:b3:0e:e5:1d:07:31:16:53:16:65:c5:31:f3:3c:
11:67:59:ab:91:09:ec:b1:f3:ea:ab:7d:1c:8c:37:
bd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5B:59:04:15:62:1F:60:47:A6:A0:EC:17:7F:CE:C5:78:AA:92:ED
X509v3 Authority Key Identifier:
keyid:42:0C:5C:44:94:F9:FF:AB:7A:85:A3:70:BF:C3:E4:95:CC:FA:4B:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:fe:ac:c9:5c:23:bd:ca:af:fd:15:2a:d0:f8:cf:e2:9c:9e:
69:02:a1:ab:f9:86:c2:b3:38:bf:93:7f:7b:9b:4f:fb:50:77:
20:ba:bd:e0:a3:41:70:e3:55:f3:b5:f3:1b:8e:c7:a4:07:51:
45:00:7a:8e:3c:ed:80:49:d3:96:44:cd:46:92:79:42:af:9f:
18:72:ef:16:50:a7:28:18:fa:7c:43:82:39:bd:9b:8b:e7:6b:
3e:4c:8a:84:6b:73:99:b4:b5:d1:22:08:3a:17:c3:28:68:b5:
e4:e1:0e:0b:1e:a3:fd:7c:30:6b:13:6c:b0:d6:33:e0:f3:f3:
ee:19:16:a0:93:5a:84:b4:2e:c9:09:d2:b8:e5:f5:bd:2e:90:
d9:6e:d0:15:a8:39:52:7a:ae:2a:8e:09:70:1e:e2:e0:a5:6e:
18:94:6b:ae:91:99:af:02:92:7e:81:4b:78:af:00:13:b2:b8:
b2:19:5c:f2:d9:94:4a:08:4b:83:e5:00:df:46:e1:f6:ec:da:
d9:d4:6b:fb:34:7b:91:f0:71:a1:e5:f1:cc:c1:7c:34:dd:ef:
32:8a:dc:ee:da:77:80:7e:f8:4e:d9:05:06:e7:b3:3d:73:e9:
04:96:ac:64:fa:10:ad:b8:c8:20:ed:4c:e2:39:3d:6f:70:0d:
d0:16:73:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:37 2025 by rpki-client