This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
File: qXEsy37uAkrriHZ7di4Qk7FA_24.mft (raw, json)
Hash identifier: Doq/nyUTykmGMPttNbvobl3XeRtzxhHsze9o7MbSCL8=
Subject key identifier: 82:70:22:B7:46:C5:C6:15:1B:84:CB:30:E9:F2:30:42:84:56:E1:77
Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
Certificate issuer: /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
Certificate serial: 1075
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
Manifest number: 1061
Signing time: Mon 22 Dec 2025 17:04:35 +0000
Manifest this update: Mon 22 Dec 2025 17:04:34 +0000
Manifest next update: Mon 29 Dec 2025 17:04:34 +0000
Files and hashes: 1: qXEsy37uAkrriHZ7di4Qk7FA_24.crl (hash: yTwag3RxwXa78l/jNMfCwIUNQTArYPkSNLys7IPVwy8=)
2: 1BCA5982656311ECA4E81323C4F9AE02.roa (hash: sZSppAngvswKy+MC+ed/ihAoI4UmVi4rfOBl63CnJSc=)
3: 07FF4ABC5A1011EAA8B1B456C4F9AE02.roa (hash: IUlp+gDqr57RNOajUBGFHWRBVgY+RKfJ4rWS/pMC4Tc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl
rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 17:04:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4213 (0x1075)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
Validity
Not Before: Dec 22 17:04:34 2025 GMT
Not After : Dec 29 17:04:34 2025 GMT
Subject: CN=69497a22-05c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:08:ec:58:8f:21:bf:91:17:f6:ad:a6:21:
95:68:1c:15:44:1a:04:7e:23:e3:aa:8e:76:a4:4d:
46:23:be:fb:79:7a:ef:b3:85:db:6a:3b:27:f3:f3:
70:b8:26:0e:70:f6:42:a6:4a:0e:d7:a0:a6:f7:ee:
0a:36:9a:0e:3b:70:f5:d3:13:d3:12:ac:2f:2b:d1:
3c:28:0a:82:e1:bc:be:a4:c4:cd:a0:49:dc:47:db:
a4:d9:d4:7f:ae:2c:c5:5c:e6:a0:2b:95:23:06:eb:
ba:20:b6:67:bd:28:81:6c:4c:e8:2b:7b:c8:04:4d:
08:85:c0:19:02:e8:59:18:83:88:88:4d:3c:85:8a:
67:f4:01:7d:7d:8b:43:f7:fa:16:0b:36:f4:c3:0c:
e7:c2:78:fa:d1:fe:f6:21:47:99:f5:13:01:21:fd:
fb:4d:01:29:1e:ad:83:32:7d:a7:b9:3c:c7:3e:1a:
7b:6f:61:c3:68:b0:66:02:d5:62:2a:57:93:bb:ff:
8c:b7:a4:55:34:01:67:91:09:59:35:0d:73:88:14:
ea:37:39:3a:6b:f8:cf:37:94:5e:c0:d9:e3:8d:59:
f3:1e:1e:bb:70:43:80:ff:ea:bc:d1:ba:bd:5f:88:
01:7b:0a:ff:df:cf:3d:8b:3c:d2:45:ed:89:81:e2:
46:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:70:22:B7:46:C5:C6:15:1B:84:CB:30:E9:F2:30:42:84:56:E1:77
X509v3 Authority Key Identifier:
keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4b:37:d1:ec:e0:e8:64:d3:d4:8e:39:2e:ba:7f:6c:84:d6:
59:2c:93:09:5b:51:4b:56:40:21:4c:aa:b6:41:75:5e:56:92:
c4:b5:6a:9e:62:b6:94:f6:54:b2:58:4e:c0:62:0b:d4:9a:e9:
2b:e1:83:a2:9e:b7:44:99:81:cc:7a:23:7a:9c:9c:22:f7:80:
8e:9b:6f:a0:46:81:1c:dd:7c:97:29:94:e9:70:ca:94:16:38:
e9:d8:c1:46:33:d2:91:17:4d:bb:3a:77:a2:82:50:77:db:83:
ef:0f:82:d1:d1:f2:af:a0:d6:24:dd:b7:49:5d:aa:4b:68:fa:
7c:6b:c2:05:15:db:5c:c2:1e:4d:25:76:89:10:58:d5:9d:aa:
7c:9d:92:c3:22:29:f0:6d:e0:0b:47:3f:40:03:b0:b5:b4:ec:
c9:0c:7d:f9:34:6e:f7:63:51:41:23:54:e9:ea:e8:c8:f5:29:
b8:a4:8d:38:27:28:df:a5:02:d3:6d:c9:d5:7a:08:29:69:2b:
98:88:d0:9f:39:2c:9f:57:fe:8b:d1:36:eb:e1:7b:61:23:0f:
77:6f:17:fe:15:bd:f7:c9:83:e3:5d:30:4a:6d:9c:ce:38:83:
14:5c:7a:c1:d8:45:39:57:57:ed:83:06:e5:09:a0:da:e7:ea:
88:49:0c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 02:41:59 2025 by rpki-client