This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
File: qeq8JGURbtEdbIza4gESN88fWd8.mft (raw, json)
Hash identifier: wKWXdh9djubb6I1joT4C2u0a9N98GQSaopGmDRxa4ns=
Subject key identifier: D4:59:1C:54:95:97:E9:BD:F3:CB:96:21:A2:3C:70:1B:CF:88:70:A9
Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF
Certificate issuer: /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
Certificate serial: 07CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
Manifest number: 0794
Signing time: Thu 18 Dec 2025 21:11:57 +0000
Manifest this update: Thu 18 Dec 2025 21:11:57 +0000
Manifest next update: Thu 25 Dec 2025 21:11:57 +0000
Files and hashes: 1: qeq8JGURbtEdbIza4gESN88fWd8.crl (hash: gZI4NvWt2IGGyDvdOxcdbt+huDqtjGFysnwMd6hDryM=)
2: F30B07CE705011F0A5A44E86C4F9AE02.roa (hash: kwV8hhlNLXw0fqo5GXhukzzyuE6LyZO1Y35yZzYd4Pk=)
3: C5465290559C11F0BBD2D127C4F9AE02.roa (hash: kAk6kjL+iK4SBo72pkG0PU0h0fM1Y3JSaas9S8BeqPU=)
4: BA4083F84CEF11F0A46DCE81C4F9AE02.roa (hash: lXMyXIdfvbwQROqw/pE3PgGn2BRu07uMklJZGHe93PU=)
5: B43753D005AC11ECB86F694EC4F9AE02.roa (hash: 4k+rKheNnbTveN1MujuQeZF7WX147LGgGeCmhBGihc4=)
6: A5307E284CEF11F092F69C81C4F9AE02.roa (hash: N+wwXOK9gDgn7rK/IyLVoV5vGXUsHM3EL0gIoN4TwM4=)
7: C446B484559C11F0BBD2D127C4F9AE02.roa (hash: xcv2mpFGfangjKYY2vbEm6RbSQ1lS7sMyZ3S+/1HCdM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl
rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 21:11:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1998 (0x7ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91871C2, serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
Validity
Not Before: Dec 18 21:11:57 2025 GMT
Not After : Dec 25 21:11:57 2025 GMT
Subject: CN=69446e1d-8813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:58:94:fa:8b:56:1f:bf:43:73:f0:07:c2:98:
a6:59:61:b5:77:0e:8e:e2:76:67:21:5a:31:6b:8d:
48:27:7f:bd:b9:62:ed:ba:31:5c:c2:0e:fb:04:c0:
93:42:5f:da:e1:58:02:b5:79:30:df:ad:2a:07:ae:
a5:41:a9:18:93:e3:c5:67:01:93:01:d7:2c:4d:e1:
36:56:52:ae:de:54:74:13:4a:67:54:53:6f:a1:19:
d2:67:c0:0f:00:64:47:7d:58:1e:6e:e1:08:83:bc:
5d:a7:5e:7f:77:7a:ff:9b:05:43:8f:a2:39:0d:86:
50:36:1b:28:57:e0:70:a6:84:c7:88:eb:2c:b7:f7:
47:b4:7f:a4:82:85:ea:4e:8f:81:6b:4c:9e:b6:5e:
9f:3d:9a:96:b1:42:f5:80:69:30:b7:9e:72:ae:97:
88:56:11:27:1f:65:58:b6:ba:2f:0e:c3:5c:94:33:
6a:ed:9b:fb:d8:29:80:85:02:cd:a6:ab:7c:b1:a6:
2e:55:26:ae:7e:a1:8d:a4:8b:05:28:ac:36:ad:88:
a1:44:97:87:fd:9b:91:e2:ab:51:5d:96:13:94:29:
8a:41:d2:3b:fd:6a:1e:70:a1:74:82:aa:d7:96:14:
68:6d:b4:ea:0c:bc:14:2d:06:53:fd:d4:3d:be:8a:
c0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:59:1C:54:95:97:E9:BD:F3:CB:96:21:A2:3C:70:1B:CF:88:70:A9
X509v3 Authority Key Identifier:
keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:77:16:4a:1e:07:6c:d3:3e:ca:ce:b6:9c:cb:d0:8a:c2:5c:
55:38:3e:87:a2:19:86:a3:61:4e:5a:e6:fb:98:cc:3c:f7:a5:
9d:87:0a:7a:8a:89:ff:da:d1:19:94:39:a0:dd:db:c4:4a:72:
17:95:06:b0:1b:0c:2c:61:e7:1a:b0:e4:2e:17:8d:4a:a4:11:
73:6a:46:75:f9:9c:5c:07:dd:8c:f6:1c:22:ee:3f:1d:14:7e:
5d:6d:9a:f8:eb:eb:7e:24:b2:42:8b:38:81:2d:f3:d1:fd:38:
df:55:84:2f:81:11:1e:00:8b:85:89:04:28:01:ba:68:e9:e7:
69:c2:f0:21:0f:72:bd:53:e4:c2:d8:ee:dc:c7:93:b0:6a:84:
fa:f1:cc:d2:c0:ba:2f:ef:ff:6a:d9:15:31:70:da:21:00:84:
c6:3f:96:e4:04:14:92:3a:c8:af:79:25:d2:01:08:ff:95:83:
89:03:8b:29:dc:ff:fa:d9:f6:74:25:a0:52:ee:a4:19:15:d0:
6e:26:d0:c4:6f:08:27:e0:81:ff:c3:2c:1b:f6:cc:fe:af:4c:
6f:cc:24:3b:1b:f1:6f:73:29:d8:78:35:c2:51:6d:ce:50:f0:
63:57:44:30:c9:14:cc:d1:70:b7:24:be:d7:ee:53:cb:f1:9d:
5c:0c:f6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:15:52 2025 by rpki-client