This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
File: qjJWJCn4lsCly95WRDFIAzm-upc.mft (raw, json)
Hash identifier: cLzeXBPz7Yk/ySrDDSPcCfq24xwcBOHYa4prf+Wmyrw=
Subject key identifier: 89:3C:63:5D:C5:14:39:03:8D:0E:8C:D7:BB:97:27:62:5D:BF:D5:87
Authority key identifier: AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97
Certificate issuer: /CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
Certificate serial: 1B0D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
Manifest number: 1AF8
Signing time: Thu 18 Dec 2025 15:35:10 +0000
Manifest this update: Thu 18 Dec 2025 15:35:10 +0000
Manifest next update: Thu 25 Dec 2025 15:35:10 +0000
Files and hashes: 1: qjJWJCn4lsCly95WRDFIAzm-upc.crl (hash: EhDLXBrbrcQcjUTmZgWzW+8VGB9xyhQ5Nhp4KclGqaw=)
2: 753F0A48CFB611EE83724A58C4F9AE02.roa (hash: Y0zJtnbzpmd90X17sv9yMGgLuPfyz+VuYGcqduHEde8=)
3: 7A1D009C0EB611ECB5408277C4F9AE02.roa (hash: OAplGjEOMAWR+zChRVlz8SiE1O7bb/QPXcg3VkFMFkA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl
rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 15:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6925 (0x1b0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150F66, serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
Validity
Not Before: Dec 18 15:35:10 2025 GMT
Not After : Dec 25 15:35:10 2025 GMT
Subject: CN=69441f2e-fe8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:28:f5:f6:92:23:a5:58:84:dd:a6:3b:58:d0:
c9:a2:fe:59:84:bb:f5:ae:8d:e4:fb:06:e3:cb:0e:
9f:85:44:ae:c5:f9:37:9a:39:0c:e8:f7:14:e6:7d:
9d:17:4e:e2:fa:a0:15:80:c3:67:e5:f0:3b:1a:95:
d7:31:38:9d:19:eb:5a:ae:a1:e4:ff:7c:bd:ce:fc:
55:98:47:08:4c:4a:0b:81:11:7f:5f:a7:f5:a3:f5:
cf:d3:e7:93:43:fe:4d:10:21:78:88:c6:5a:48:36:
59:0a:ad:8a:e1:01:ef:fd:7a:b0:4d:75:6b:b3:34:
97:11:97:ae:5c:91:1e:2d:50:b4:48:4a:9e:27:bd:
4c:8f:e8:ec:cc:28:16:12:5c:04:cf:de:69:9c:11:
5d:17:68:3f:91:4b:20:7c:0f:11:5e:66:5b:13:dd:
92:93:0f:d6:55:25:ad:9f:7c:12:97:b0:f6:85:a2:
13:e5:64:ab:d0:7b:09:86:cb:b3:f5:20:32:02:d8:
2f:a3:3a:1d:bf:5a:1b:7b:b8:5f:af:cd:9d:22:c4:
8f:28:4c:2b:0e:83:de:35:03:59:1d:97:9a:80:e2:
2f:07:47:99:5a:95:d9:1c:1d:77:c7:c5:af:1d:c8:
8b:bf:3d:6d:95:6a:b6:e6:a8:17:eb:74:ab:69:d7:
28:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3C:63:5D:C5:14:39:03:8D:0E:8C:D7:BB:97:27:62:5D:BF:D5:87
X509v3 Authority Key Identifier:
keyid:AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c4:87:c0:b2:57:99:33:aa:d7:04:8d:df:24:e4:b1:94:19:
01:5d:17:88:1c:15:47:4a:e4:8d:41:43:e2:82:be:08:0a:b8:
c4:bc:32:4f:2a:ec:73:eb:16:c3:29:00:6c:e9:96:70:bd:15:
f0:6c:2b:83:cd:ba:43:80:fb:17:be:63:17:4d:75:5d:30:62:
e5:1c:5e:13:7a:2d:0f:79:0b:92:54:22:c7:e8:8c:18:bf:b0:
e9:7c:ae:34:d5:04:28:0e:13:bb:a6:b0:8f:39:88:1c:f7:8a:
c2:99:fd:7c:63:70:1f:ac:fe:b3:cb:73:92:e1:69:17:ad:56:
ef:32:64:2e:9a:00:bd:af:4b:45:ac:cd:6c:6f:78:3b:f3:7e:
bf:67:b1:ea:7d:0e:23:b8:a6:e5:1a:67:fc:f7:56:c3:42:b3:
12:fe:07:e3:3c:fc:6e:74:23:c4:73:8b:be:0a:64:2c:ef:5b:
bc:a8:fe:78:42:90:7a:28:57:2d:f9:87:6a:55:b3:0f:ed:04:
6f:d6:1d:99:bf:19:47:4e:87:8d:51:e8:9e:5d:16:3e:34:26:
bf:17:cb:3a:c6:2d:b5:49:e5:57:33:72:bb:b0:07:a4:a9:92:
97:02:3c:61:67:f0:fe:f0:74:b6:e6:90:7b:90:83:2e:49:3a:
37:2f:fa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:53:10 2025 by rpki-client