This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
File: qtagvMTbBX4UafHdswGbFlMwzkI.mft (raw, json)
Hash identifier: Tj2zbfhLO/e91wXr0+bh67maxZSI2lT/rJJ9/DHR40w=
Subject key identifier: 14:31:FB:43:11:C9:09:C4:2C:5A:46:C4:F0:A5:60:72:EC:C3:80:F3
Authority key identifier: AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42
Certificate issuer: /CN=A91585F0/serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
Certificate serial: 59
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
Manifest number: 55
Signing time: Sun 21 Dec 2025 06:18:33 +0000
Manifest this update: Sun 21 Dec 2025 06:18:33 +0000
Manifest next update: Sun 28 Dec 2025 06:18:33 +0000
Files and hashes: 1: qtagvMTbBX4UafHdswGbFlMwzkI.crl (hash: cHhpZg8E9QZdui1gfxAwrfpu7wUJD7urnjjmTZdm0eI=)
2: 1096927A646E11F08C8F9173C4F9AE02.roa (hash: Vi+X8eC77LW+19x04LHYzDEZAgS3KYmTg+MI+Li5Sts=)
3: 4282D1FE646E11F0B9817D36C4F9AE02.roa (hash: wD0psrpZ8N2yh6yYDhmlPC1nQhfBRq0VtHwYcpyvMJM=)
4: A73E47B6646611F092E66D56C4F9AE02.roa (hash: R9MuPEXmcb9QPVduJszFJZ3jI05Vo9fUIK/CYjPl3pQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl
rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 06:12:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91585F0, serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
Validity
Not Before: Dec 21 06:18:33 2025 GMT
Not After : Dec 28 06:18:33 2025 GMT
Subject: CN=69479139-2718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:dc:99:a4:88:1e:43:2a:e1:6a:65:d2:42:6e:
fd:4e:3f:12:1c:c1:a4:59:52:1f:bd:dd:29:8a:7f:
93:56:96:7b:98:a7:50:9e:2d:f7:48:90:68:0a:3f:
3d:44:be:dc:d8:86:49:34:02:05:8a:8e:cc:da:fd:
d0:71:a7:a7:2c:50:42:13:ad:39:01:4c:cf:a5:dc:
e3:68:f3:8f:d4:06:58:24:5d:3e:c9:cd:7e:36:ff:
4e:05:3e:86:fa:86:6f:f7:c2:06:68:2b:ed:c0:83:
a1:57:5b:3c:6f:27:18:b1:49:99:e2:cf:bc:5c:84:
3e:a9:c8:e2:5b:3c:c4:64:66:19:8e:ef:ee:4f:54:
6a:c8:a4:29:e8:00:81:65:a0:73:d3:90:e1:a1:1c:
2f:22:6a:42:ec:9b:2f:72:2c:c7:ba:c1:13:57:e1:
31:17:4e:65:20:86:4f:11:6a:86:50:84:a3:62:ad:
e9:a5:d6:1f:80:af:d8:a8:57:5b:de:ba:c1:08:d9:
35:28:58:07:84:0f:d9:32:92:43:76:3f:13:02:be:
87:a5:dd:12:c3:03:c2:b1:b3:ba:a8:04:20:05:3b:
f0:18:4f:96:01:e2:dc:dc:85:15:a1:19:67:92:50:
03:0f:94:99:67:37:45:06:7f:3b:4e:17:26:4d:09:
d3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:31:FB:43:11:C9:09:C4:2C:5A:46:C4:F0:A5:60:72:EC:C3:80:F3
X509v3 Authority Key Identifier:
keyid:AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:d8:db:6e:cf:16:b9:a7:c1:7b:0a:03:49:df:d5:e6:92:d6:
e6:42:9d:cd:44:3d:0a:b8:ab:87:60:8e:cd:ad:9e:e3:a7:5d:
f8:79:ad:4a:bf:ec:1f:e6:dd:8c:c3:6b:d5:0d:ee:26:cc:8d:
c4:e9:12:57:1a:0d:5a:67:e2:10:08:4b:67:ee:5e:7c:1b:76:
a8:2a:80:f2:85:6f:92:b4:07:9e:18:af:99:6b:f4:21:be:ea:
84:c1:40:64:f5:cc:7f:62:0d:74:0b:b8:a0:1d:83:ec:14:61:
e0:95:45:47:3c:4b:75:42:a6:63:ae:b3:d1:16:17:8a:27:b9:
ae:ad:85:e8:7d:c2:68:49:a9:fd:59:cb:10:67:2b:63:1c:fe:
dc:ed:47:9e:ac:c0:d6:ac:e7:ec:03:fc:1b:14:76:79:8f:33:
7c:29:1e:79:c5:0c:eb:40:6e:e4:dd:82:6b:5f:4e:d4:7e:de:
b2:02:47:9e:35:f2:b8:47:76:fc:b3:a1:a3:f6:d8:d2:cc:00:
c3:b3:fa:36:ef:c2:0e:fc:3e:2d:69:b8:ab:f8:f0:79:45:e5:
49:d5:9b:d1:3e:f8:35:95:3c:58:36:f8:68:af:06:bb:a6:d5:
fe:ff:1f:e4:aa:f5:8f:c7:08:14:89:29:27:85:b0:b4:54:1d:
36:85:d3:d4
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
ODVGMDExMC8GA1UEBRMoQUFENkEwQkNDNERCMDU3RTE0NjlGMUREQjMwMTlCMTY1
MzMwQ0U0MjAeFw0yNTEyMjEwNjE4MzNaFw0yNTEyMjgwNjE4MzNaMBgxFjAUBgNV
BAMMDTY5NDc5MTM5LTI3MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDp3JmkiB5DKuFqZdJCbv1OPxIcwaRZUh+93SmKf5NWlnuYp1CeLfdIkGgKPz1E
vtzYhkk0AgWKjsza/dBxp6csUEITrTkBTM+l3ONo84/UBlgkXT7JzX42/04FPob6
hm/3wgZoK+3Ag6FXWzxvJxixSZniz7xchD6pyOJbPMRkZhmO7+5PVGrIpCnoAIFl
oHPTkOGhHC8iakLsmy9yLMe6wRNX4TEXTmUghk8RaoZQhKNireml1h+Ar9ioV1ve
usEI2TUoWAeED9kykkN2PxMCvoel3RLDA8Kxs7qoBCAFO/AYT5YB4tzchRWhGWeS
UAMPlJlnN0UGfztOFyZNCdOtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFDH7QxHJ
CcQsWkbE8KVgcuzDgPMwHwYDVR0jBBgwFoAUqtagvMTbBX4UafHdswGbFlMwzkIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4NUYwLzRCRTY5RDAyNjQw
MDExRjBCMUExRDU3RUM0RjlBRTAyL3F0YWd2TVRiQlg0VWFmSGRzd0diRmxNd3pr
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcXRhZ3ZNVGJCWDRVYWZIZHN3R2JGbE13emtJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4
NUYwLzRCRTY5RDAyNjQwMDExRjBCMUExRDU3RUM0RjlBRTAyL3F0YWd2TVRiQlg0
VWFmSGRzd0diRmxNd3prSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADTY227PFrmnwXsKA0nf1eaS1uZCnc1EPQq4q4dgjs2tnuOnXfh5rUq/
7B/m3YzDa9UN7ibMjcTpElcaDVpn4hAIS2fuXnwbdqgqgPKFb5K0B54Yr5lr9CG+
6oTBQGT1zH9iDXQLuKAdg+wUYeCVRUc8S3VCpmOus9EWF4onua6theh9wmhJqf1Z
yxBnK2Mc/tztR56swNas5+wD/BsUdnmPM3wpHnnFDOtAbuTdgmtfTtR+3rICR541
8rhHdvyzoaP22NLMAMOz+jbvwg78Pi1puKv48HlF5UnVm9E++DWVPFg2+GivBrum
1f7/H+Sq9Y/HCBSJKSeFsLRUHTaF09Q=
-----END CERTIFICATE-----
Generated at Sun Dec 21 13:24:40 2025 by rpki-client