This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
File: qoXM0t0-HAA79y_1PljHIA588Kg.mft (raw, json)
Hash identifier: R+r3ZY+9NGpmzD0A4L0rh3QuSmaRLR3izLb0KMldpz0=
Subject key identifier: A0:4E:13:07:83:CC:93:B4:D1:A8:92:0E:AE:11:21:C9:A6:8F:F6:58
Authority key identifier: AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8
Certificate issuer: /CN=A916D29F/serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
Certificate serial: 0F09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
Manifest number: 0EE5
Signing time: Wed 31 Dec 2025 17:24:39 +0000
Manifest this update: Wed 31 Dec 2025 17:24:39 +0000
Manifest next update: Wed 07 Jan 2026 17:24:39 +0000
Files and hashes: 1: qoXM0t0-HAA79y_1PljHIA588Kg.crl (hash: v7NncdigFIgnTJY6dzVv5iqX6hTaHDYRoVAwDMbKxGE=)
2: 8D655C9656A511EA8FAB974DC4F9AE02.roa (hash: 8zgED/u5BJ4UZdNgGr2psVcwZmXJQhr/Sce32Chr/as=)
3: FA9D67D07C5711F0AD80C25CC4F9AE02.roa (hash: IfHyorIOQ7bueAyQaemWspNEc+/bGan7gB84RC3Kv/Y=)
4: AA135886D75411EFA0D6BE34C4F9AE02.roa (hash: FL9RyjoTD6DVuuRd2ISuSk98bbRopCzPxXp8wZNKZas=)
5: 3FCD146C97D911F080901462C4F9AE02.roa (hash: zFjZk2S9ws5t5ZdI9szHa+nHw5gtdNKIsc6poD8Md0k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl
rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Jan 2026 17:24:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3849 (0xf09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D29F, serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
Validity
Not Before: Dec 31 17:24:39 2025 GMT
Not After : Jan 7 17:24:39 2026 GMT
Subject: CN=69555c57-be60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b3:c4:ce:da:6a:7a:fb:29:e5:32:32:8d:78:
88:43:f4:0c:21:a9:db:f7:9a:89:87:d8:f4:68:84:
90:4d:f9:44:42:a4:25:25:af:79:38:57:a9:a5:cd:
bd:60:69:4a:eb:56:6c:74:bd:6b:f9:b4:4e:0c:07:
f4:6d:4d:79:75:62:1d:5b:7d:db:2e:46:a4:b6:b5:
8f:53:76:7b:84:1c:c4:18:4a:94:73:e1:ff:35:6d:
55:8e:d1:3b:6a:cf:2f:a9:a5:6d:21:31:a6:27:38:
ce:6c:72:83:76:14:8b:ee:fd:94:30:ef:04:f1:d2:
61:ce:0f:a8:94:d3:21:54:64:6f:3c:06:e6:ad:68:
17:9d:b8:92:f5:b6:37:2c:12:a7:9b:8a:b6:43:0a:
20:53:e7:3a:27:92:44:b1:43:df:11:06:da:66:c8:
9e:fb:27:c1:00:df:a0:23:6a:47:03:2f:d3:56:27:
ac:f7:c1:bc:e8:1b:3d:9e:61:46:d2:d5:93:57:d3:
3a:6b:99:a6:43:c3:99:c0:80:d4:b7:9d:d8:19:3b:
98:82:3d:57:46:2a:ec:d3:f6:17:07:61:81:30:a2:
68:13:81:aa:12:2f:ff:42:c0:1b:6f:48:d0:ed:44:
b0:e7:ba:57:a4:66:2a:c9:eb:a4:f0:40:ea:71:d3:
95:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4E:13:07:83:CC:93:B4:D1:A8:92:0E:AE:11:21:C9:A6:8F:F6:58
X509v3 Authority Key Identifier:
keyid:AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e4:3f:e2:73:ca:6d:01:07:42:c3:cb:ea:73:e3:15:8b:94:
47:f4:c2:f3:10:95:35:4c:37:42:01:16:37:7b:0e:10:75:09:
ae:2a:fe:8c:e1:d5:6f:0c:66:bc:c2:ea:f4:26:cf:1f:95:7b:
0c:7a:67:c3:b3:30:ca:30:43:8b:ae:36:63:db:19:9c:fd:5e:
26:ba:29:8e:ad:30:21:cb:21:19:a5:f2:65:85:a9:c7:da:fc:
60:fb:a3:93:9f:85:7f:fe:cd:53:b7:1c:a3:71:e0:53:65:0a:
ed:6d:0a:59:69:93:b6:37:34:bf:e1:60:7a:49:4d:ac:44:f6:
7d:c2:2a:f1:c0:ab:eb:72:c5:2b:46:69:cd:98:93:3e:23:d7:
c4:99:7b:e5:c4:38:a8:aa:75:27:5d:ab:7e:21:73:4e:22:66:
7d:9e:6c:e7:c9:ba:ef:eb:bb:43:2a:50:e3:7b:6b:7b:5e:15:
25:95:23:fe:6f:27:b3:b9:c0:49:cc:38:6e:be:2e:ea:87:a3:
84:fd:11:61:37:82:7e:29:2c:58:07:aa:e1:e7:4c:f6:6c:41:
e5:d5:7d:9d:d5:c1:e8:ef:e4:d1:44:a4:a5:7c:05:5f:df:bb:
02:1f:b1:0e:75:63:b0:e5:46:46:a4:07:d4:db:b8:90:19:85:
33:5f:dc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 03:54:29 2026 by rpki-client