This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
File: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft (raw, json)
Hash identifier: Vei4FU7yMnCCiwTrmA3b6DnAL1RUvwYWXrNZD0s2f5s=
Subject key identifier: 43:44:1F:52:FC:15:69:D8:C9:40:92:25:D6:90:E8:B9:7F:73:EA:F3
Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
Certificate issuer: /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Certificate serial: 0574
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
Manifest number: 0568
Signing time: Tue 30 Dec 2025 22:34:35 +0000
Manifest this update: Tue 30 Dec 2025 22:34:35 +0000
Manifest next update: Tue 06 Jan 2026 22:34:35 +0000
Files and hashes: 1: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl (hash: u566R3ZgLFguvoLdDWEAshy9Enadr8kC6souxFLZpYU=)
2: 9C09360E0C3411EDB8619843C4F9AE02.roa (hash: ECAgPm0goNWrUskhVC01nozAKTVudWlI1/zrxTY4T0A=)
3: D3A7743C19EA11EC9C11D95AC4F9AE02.roa (hash: g0hpjHR12ox9GBuE1AfrS2oF/EYCOY2rtHxfRiw2ckM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Jan 2026 22:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1396 (0x574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186B80, serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Validity
Not Before: Dec 30 22:34:35 2025 GMT
Not After : Jan 6 22:34:35 2026 GMT
Subject: CN=6954537b-0440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cc:af:38:a5:fb:43:f5:68:71:d7:ab:77:86:
10:cd:3e:9a:44:b1:24:51:73:d2:af:10:56:69:1b:
b7:d3:e2:84:e2:bd:bb:1f:56:ab:c1:c8:f5:6c:18:
d3:22:69:78:92:d4:ab:f9:a5:6a:c7:e5:e4:d3:f5:
10:e2:78:15:45:47:56:5e:68:c6:85:bb:53:88:01:
25:78:82:22:b3:64:d4:73:2e:c4:49:9c:ad:b6:db:
4d:5b:02:01:dc:c7:9c:80:39:9f:1a:f5:c5:fa:67:
7e:5a:29:83:e8:c5:85:f5:64:ad:6a:c0:55:87:5f:
08:d1:b7:26:ee:8a:b0:f7:bf:45:18:3a:b0:d3:17:
7e:a0:f5:51:a6:9c:95:eb:cc:56:bc:37:12:1c:68:
c2:3b:50:48:32:c1:53:b4:9d:e3:7c:79:78:ee:e2:
5a:e6:ee:56:a8:c8:90:b3:16:fb:ca:15:ee:10:ba:
ec:94:e0:65:2d:bd:db:90:e0:6b:de:3c:df:b3:3e:
49:b4:92:d0:4e:81:67:52:2d:51:34:9e:b8:56:2d:
6c:f9:b9:95:aa:c6:82:72:27:c1:41:11:aa:d2:89:
c4:51:3c:6a:a1:7d:b8:f6:19:7f:b2:ff:a1:cf:fc:
2d:f6:d7:a3:27:25:f1:c8:2e:0c:3a:29:05:bf:d7:
f5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:44:1F:52:FC:15:69:D8:C9:40:92:25:D6:90:E8:B9:7F:73:EA:F3
X509v3 Authority Key Identifier:
keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:85:36:5c:e4:a7:fe:15:d1:4e:04:b4:dc:f3:32:27:91:eb:
d5:8e:0b:38:f8:8a:bd:a1:81:f3:e2:03:b7:48:72:e3:57:ab:
bb:cb:c9:57:a7:74:bb:bc:f4:6d:63:0e:e9:19:b3:fa:c1:e9:
5d:7a:15:32:ce:9f:fd:b2:63:3d:88:a9:8c:4f:17:1d:69:88:
dd:88:9d:d3:cf:cb:21:2a:cd:4e:cd:e7:4a:97:ea:6d:ba:4e:
c6:ed:6c:e9:21:1b:18:95:12:ac:56:db:a6:fb:77:91:40:25:
c6:52:fe:ea:bd:8c:6f:2d:e9:aa:6e:9a:6b:75:1f:4b:a1:a4:
6e:2b:3d:88:79:4f:77:c6:e2:26:79:59:65:bf:e7:fc:1b:84:
39:0a:5d:01:f3:c3:d0:08:7b:0f:0b:9d:3c:10:0f:74:c2:f0:
d7:97:b4:09:49:57:63:4b:03:f0:f4:96:0d:d9:ff:50:2a:ed:
6a:71:67:78:73:90:65:fb:90:34:d6:5d:37:c6:bd:6a:33:95:
04:f9:ce:da:68:a6:de:d2:09:04:36:d4:7c:27:4c:7e:eb:a1:
43:ae:54:9a:e9:7e:7f:83:6d:1d:cc:34:5b:d5:1b:d4:fb:3e:
5e:56:57:e9:d6:a9:5a:2e:8d:9b:96:38:75:78:c8:c1:8f:8a:
a4:f8:8d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 05:42:05 2025 by rpki-client