This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft
File: qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft (raw, json)
Hash identifier: 776sm4V7PO/3Mx2dBxCmqEv2nNbFvrg/TkE232R7rPA=
Subject key identifier: 5F:A8:D0:F1:43:A4:8D:00:79:EE:68:22:C6:37:2C:39:9A:60:80:20
Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39
Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39
Certificate serial: 36BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft
Manifest number: 35EA
Signing time: Thu 18 Dec 2025 14:27:04 +0000
Manifest this update: Thu 18 Dec 2025 14:27:03 +0000
Manifest next update: Thu 25 Dec 2025 14:27:03 +0000
Files and hashes: 1: qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl (hash: 2vAwxe06fhx/q4QvXMJDZtnOgz8D1Je6WsWRfoIbv2E=)
2: FDE510BCC2E511EBBDB1B180C4F9AE02.roa (hash: +oczTLjRD/tYfsYBFtIa6eRmdxZaKTBLayvz3HoGlWU=)
3: B8E7D994D00711EAB66A1255C4F9AE02.roa (hash: vea6+toj4YiyIQ3kah2JLdyvZ+cCoP4Yr2UZguv6xdk=)
4: FF09B6BEC2E511EBBDB1B180C4F9AE02.roa (hash: uDX3snF5KOLhQFZJb9NS91kFKiMHEVAq6if3Xq1rgsY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl
rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 14:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14014 (0x36be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191FA5, serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39
Validity
Not Before: Dec 18 14:27:03 2025 GMT
Not After : Dec 25 14:27:03 2025 GMT
Subject: CN=69440f38-25e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6f:2f:15:84:cb:cc:20:3e:a1:18:f4:78:57:
5a:87:96:dc:4f:de:e5:93:e7:a0:ac:69:40:61:9a:
dc:bc:50:d7:d0:76:03:92:57:46:98:71:af:17:72:
d5:0c:60:b9:c2:f4:ae:9c:34:16:50:54:69:0f:4e:
87:4c:a0:9c:0b:1f:74:45:1b:41:a1:f5:6c:3d:00:
92:c0:bf:7c:e9:44:b1:e3:69:12:38:0b:a2:02:48:
4d:a5:ae:62:4b:7a:a7:b0:a6:f6:27:17:bf:45:2c:
9f:d0:a9:28:e9:7d:84:0e:99:a7:e6:56:6b:ba:c3:
8c:98:bb:76:7e:24:5e:ad:1e:7a:30:f8:d6:25:9d:
f6:14:77:7b:ef:2b:86:62:11:52:bf:4e:65:2a:4f:
1e:52:81:51:d5:b1:16:ed:a8:91:90:0b:cb:93:b4:
e9:44:af:af:0b:be:7c:79:0c:2e:b9:b6:69:1e:80:
5f:f6:07:4f:ad:66:38:a8:8c:86:f3:a8:46:fe:43:
76:01:75:31:9f:88:e9:83:3a:ad:63:a9:1e:fc:0c:
5d:64:78:c4:87:96:bc:9c:f7:22:3a:81:bb:7b:74:
ff:42:6a:a9:83:93:18:22:1f:28:4b:46:0a:42:5e:
ff:74:e4:75:4a:ee:53:6e:c7:11:62:33:67:bd:fb:
c1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A8:D0:F1:43:A4:8D:00:79:EE:68:22:C6:37:2C:39:9A:60:80:20
X509v3 Authority Key Identifier:
keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:fd:c3:f4:76:23:78:5f:e8:65:1c:11:df:f0:bd:7b:c5:8b:
e3:7f:6f:bc:52:42:a8:b8:e5:a4:35:3e:c9:d7:2f:06:4a:b1:
0d:94:81:f2:c0:27:b8:ef:08:da:a1:d9:94:ec:a2:25:77:96:
ee:e1:15:b7:d1:03:00:38:52:93:0f:76:16:53:0f:5f:71:8f:
13:01:c3:61:3b:2d:15:82:ee:7f:3a:09:54:31:e2:56:24:6b:
3e:c0:dc:f4:94:61:65:84:00:f5:14:6b:58:07:51:cd:6e:46:
d3:bb:98:e8:fb:70:e1:a3:6f:09:a6:35:d7:cc:89:d3:1c:64:
e4:e4:11:3c:39:d8:22:af:7e:2a:b1:b4:fd:96:dc:0c:d7:e5:
42:df:4e:26:07:91:c7:5f:ab:ae:99:f3:32:83:11:86:41:3f:
27:f0:c5:46:a3:51:4d:d9:36:a4:23:bb:81:ed:05:83:e2:ad:
b0:10:e4:7c:b6:a2:f3:1b:41:4b:37:77:c4:84:6b:ed:19:03:
5a:f0:ce:a2:d9:5b:d5:bd:cb:56:89:f8:a1:5b:8b:df:ff:6b:
a3:03:c2:dd:c4:df:2a:59:fa:a8:c9:47:4a:9b:96:c1:a5:8b:
3d:52:f1:6c:40:98:d8:6d:27:9e:21:22:06:e3:ef:d1:ad:a0:
46:f2:7f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:18:08 2025 by rpki-client