This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
File: 1QTYGQKxg4soKun0XE3D-BeOJO4.mft (raw, json)
Hash identifier: TAvikYPpeaYNe50xZdd62psppkL9/dy3y/HIU8TecQw=
Subject key identifier: 37:E9:D3:F1:2B:6E:CB:14:34:E9:4C:DB:0A:9F:31:26:6C:51:AA:C6
Authority key identifier: D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE
Certificate issuer: /CN=A913A74D/serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE
Certificate serial: 08CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
Manifest number: 08C8
Signing time: Sat 20 Dec 2025 19:52:19 +0000
Manifest this update: Sat 20 Dec 2025 19:52:19 +0000
Manifest next update: Sat 27 Dec 2025 19:52:19 +0000
Files and hashes: 1: 1QTYGQKxg4soKun0XE3D-BeOJO4.crl (hash: UdPAtXglmR0+4bCbYZ46wrEtpDYjS+NLNlYxEjtJc1k=)
2: 833D8D9AC72711EA8890F311C4F9AE02.roa (hash: Fp3IoCNith1vGTf69ryDz+R4pr7DX4NONp6q1LMxCoo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.crl
rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 19:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2255 (0x8cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A74D, serialNumber=D504D81902B1838B282AE9F45C4DC3F8178E24EE
Validity
Not Before: Dec 20 19:52:19 2025 GMT
Not After : Dec 27 19:52:19 2025 GMT
Subject: CN=6946fe73-2d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:98:3b:01:eb:37:6d:2f:ce:58:6b:d8:5f:06:
66:8b:62:0f:c5:95:e4:36:7e:a1:e4:95:15:4a:27:
42:12:a7:03:f2:41:bb:8c:a2:ed:3a:20:09:f2:81:
47:eb:64:08:95:34:a6:15:83:2c:91:4d:10:2b:1b:
28:5c:5d:77:ab:15:f6:28:d0:c6:45:87:a1:dc:6e:
71:bf:32:9c:48:08:40:ad:0d:1b:71:ca:d1:f0:73:
22:65:d8:01:f6:34:80:54:27:65:44:a5:80:c7:c3:
ee:dd:f7:35:e1:09:eb:17:75:d3:b5:3f:04:8a:0c:
07:ce:ab:11:30:f8:19:1f:14:3c:2f:c9:99:7c:3c:
33:e0:90:a5:de:f2:2a:71:61:f5:76:42:47:a4:23:
70:e2:42:22:e3:51:f5:13:f1:ba:ff:02:3a:f3:cb:
f1:2a:61:4b:9c:44:6c:ab:ab:52:c2:bb:1b:ec:6d:
5e:16:fb:cd:b0:a9:68:b8:b5:00:49:eb:61:d5:64:
fd:e6:65:90:03:55:0a:2b:0e:26:9e:f3:00:2f:c2:
4f:c2:64:9a:14:3e:e7:1b:66:99:2b:98:88:c6:f8:
78:bf:dd:a9:a3:3b:be:23:2f:7e:5e:dc:6a:2d:11:
4b:ac:21:a8:3d:92:e3:80:8f:6b:14:3a:5c:72:31:
fc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E9:D3:F1:2B:6E:CB:14:34:E9:4C:DB:0A:9F:31:26:6C:51:AA:C6
X509v3 Authority Key Identifier:
keyid:D5:04:D8:19:02:B1:83:8B:28:2A:E9:F4:5C:4D:C3:F8:17:8E:24:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QTYGQKxg4soKun0XE3D-BeOJO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A74D/68A1D55AC72611EA9955E410C4F9AE02/1QTYGQKxg4soKun0XE3D-BeOJO4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:f6:15:ef:db:d0:d2:46:13:68:88:1e:af:f5:6b:61:16:7a:
2e:95:9b:6c:a3:0f:11:d2:1d:f4:0c:a0:66:10:b4:ee:68:13:
05:10:cf:50:6f:4a:cc:78:d2:34:e5:00:83:13:24:ec:a7:76:
54:35:8d:a0:99:a3:00:56:17:b1:d7:da:a5:a0:ee:85:98:34:
4c:6d:49:f4:02:e0:84:64:2d:f9:cf:c7:fa:8c:dd:2e:3c:35:
1e:f1:be:19:68:f0:0b:d8:68:c3:4c:b1:1f:d6:b2:b9:f5:e4:
20:c4:d6:47:ec:40:ef:8d:c0:fa:c3:b8:9b:02:0b:78:62:bc:
5f:17:24:ad:62:2e:00:b2:e6:b2:27:6a:b3:f6:b3:f9:f3:93:
c7:db:b5:d4:a8:d1:73:18:cd:90:6a:99:8d:e1:21:74:ac:ac:
88:57:30:1c:5b:a5:11:70:d9:d9:8a:e1:d3:48:61:f7:61:2d:
14:83:4e:de:01:0d:37:fe:f9:9f:03:45:07:5f:2a:40:28:07:
40:3b:fc:d3:5a:bc:8c:99:67:20:6b:8a:51:cb:46:77:a4:f7:
da:28:6d:8b:73:5a:e7:e0:b2:75:bf:dc:16:f4:37:60:39:11:
4f:a5:bf:6f:26:17:df:f0:4b:2d:50:bd:57:2b:f4:05:2d:bf:
51:f5:a2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:47:37 2025 by rpki-client