This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft
File: cqGfa6-m7u5m3DsabGeCLlMwz3g.mft (raw, json)
Hash identifier: rDpDXVU4PH2iQuoluk/v8AV4T5ga1VquYlWnGVAj/EE=
Subject key identifier: E3:62:26:9D:55:92:02:C3:B1:C8:8D:8E:4B:43:2B:86:84:67:FE:ED
Authority key identifier: 72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78
Certificate issuer: /CN=A916A703/serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78
Certificate serial: 0767
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft
Manifest number: 075F
Signing time: Sat 20 Dec 2025 21:01:05 +0000
Manifest this update: Sat 20 Dec 2025 21:01:04 +0000
Manifest next update: Sat 27 Dec 2025 21:01:04 +0000
Files and hashes: 1: cqGfa6-m7u5m3DsabGeCLlMwz3g.crl (hash: CL734hcLc5mKslH3zZjaI4MPkTbaYEg2zsKYf5NRuJs=)
2: D3B421A2366811F0A18FF40AC4F9AE02.roa (hash: m0A4bmKYQpyQxbJtwty9jze7vG5EqP7rfA85eJFYPgg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl
rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1895 (0x767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A703, serialNumber=72A19F6BAFA6EEEE66DC3B1A6C67822E5330CF78
Validity
Not Before: Dec 20 21:01:04 2025 GMT
Not After : Dec 27 21:01:04 2025 GMT
Subject: CN=69470e91-466f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5e:ed:fd:56:09:dc:e1:a9:68:7f:a6:de:1e:
7e:56:ef:85:d0:23:06:53:57:e1:42:9e:93:92:05:
be:e1:70:9a:39:4c:dc:69:ce:56:f9:d4:e2:1f:62:
2f:bc:de:42:df:50:24:4c:2b:51:e6:c5:da:60:d6:
c6:98:e5:40:b9:4c:09:10:99:5a:fd:dd:26:cd:51:
8d:03:84:bd:ba:7b:1a:bf:02:bb:00:fb:3a:1f:96:
cf:e8:07:df:2d:fc:e5:54:cd:f5:fd:d0:df:54:b4:
5c:80:6c:32:f9:bd:33:20:27:67:86:27:bb:61:84:
ae:ac:4c:12:df:89:a6:cc:aa:bf:8f:23:1b:db:e7:
2a:e2:0c:f2:ba:76:31:0c:ca:67:f5:ba:11:74:a2:
56:0e:2c:e4:f6:70:d4:4d:0c:b9:07:f4:c7:11:c3:
47:b5:1f:08:75:8c:9c:60:50:ef:af:bf:25:c6:ee:
e3:13:ed:b7:4e:9c:85:0d:da:67:17:1d:07:12:6c:
ed:82:de:8b:d9:d8:4b:b4:c0:12:41:69:34:8b:2b:
a3:72:d6:a0:96:46:90:c9:10:58:04:6c:fb:15:58:
9a:08:09:e8:de:ed:fd:03:38:93:3f:dd:65:71:8f:
b4:41:54:5b:89:c5:ca:f5:e9:a5:56:ec:e9:40:e2:
1a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:62:26:9D:55:92:02:C3:B1:C8:8D:8E:4B:43:2B:86:84:67:FE:ED
X509v3 Authority Key Identifier:
keyid:72:A1:9F:6B:AF:A6:EE:EE:66:DC:3B:1A:6C:67:82:2E:53:30:CF:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqGfa6-m7u5m3DsabGeCLlMwz3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A703/7C83BDEA490311EB8447B26BC4F9AE02/cqGfa6-m7u5m3DsabGeCLlMwz3g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:80:7a:dc:cc:e7:01:45:0b:d9:15:3f:e1:a3:4c:36:21:8d:
99:c0:a6:7f:fb:6a:d4:e7:de:93:52:09:f6:b5:dc:ea:1c:39:
fd:69:f4:31:c2:60:15:f4:e9:7c:50:53:9b:c7:ba:49:6f:35:
b4:ae:49:7f:9c:7d:23:68:b9:55:62:d4:01:af:e9:84:a9:b3:
ec:70:a9:22:12:cb:43:d8:ac:fb:ea:a9:2b:e4:a4:68:91:39:
f1:9d:3f:c2:88:bf:c5:30:ce:2b:e9:e5:35:88:a4:06:09:d6:
ec:09:42:f8:54:e8:9a:39:6b:ad:4b:7f:78:e0:d1:ea:ec:a2:
6f:8b:49:43:b2:58:d6:37:09:e8:d2:ad:de:db:53:1b:75:73:
ad:f9:57:24:b4:43:7f:97:84:bb:c8:7c:7c:a2:2f:4b:c8:f8:
56:29:65:c4:b1:33:58:0b:04:ff:19:26:fe:18:6d:e6:73:86:
0e:13:92:36:8c:29:d7:2f:05:11:a3:0d:88:63:3d:2d:9c:31:
ec:48:38:12:d3:0a:46:1b:da:4e:c0:b3:0b:68:a7:a4:0b:ee:
0c:dd:e4:09:15:f5:d4:d4:03:01:cb:31:e6:25:e7:41:10:fd:
d0:0e:40:f8:0b:7d:22:d1:c6:ce:33:2b:d1:ac:58:87:0e:f5:
67:87:b4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:43:52 2025 by rpki-client