This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft
File: qHH05sNy2xC2TfOZX6FR77OfmYs.mft (raw, json)
Hash identifier: k/tSCY3xoFFXgXS1TlIFVT6jdr+F8uNkbx59FZHmt/w=
Subject key identifier: E8:A8:19:D9:2F:51:1B:23:76:BF:8A:3F:7C:16:7F:97:D0:43:09:08
Authority key identifier: A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B
Certificate issuer: /CN=A9195F49/serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B
Certificate serial: 0495
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft
Manifest number: 048E
Signing time: Thu 18 Dec 2025 23:26:44 +0000
Manifest this update: Thu 18 Dec 2025 23:26:44 +0000
Manifest next update: Thu 25 Dec 2025 23:26:44 +0000
Files and hashes: 1: qHH05sNy2xC2TfOZX6FR77OfmYs.crl (hash: MGIXkWTPHcpdrvyd2oTKZ6JoGIPT6pClUpkZZte0zX0=)
2: 5FC75DCC66A511EC9C199341C4F9AE02.roa (hash: jsVFzS1V8/4nPs0LiSJz70mLYAraQYwRrwx0A1zMdZQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl
rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1173 (0x495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195F49, serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B
Validity
Not Before: Dec 18 23:26:44 2025 GMT
Not After : Dec 25 23:26:44 2025 GMT
Subject: CN=69448db4-9a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:be:00:b6:54:ef:3d:26:7d:32:4d:4b:6c:
5a:6e:7e:65:16:19:3b:18:bc:72:ab:da:94:a6:88:
4d:68:e0:0c:14:f8:c9:56:53:01:ba:5e:3a:12:10:
95:c5:85:03:e9:4a:80:85:81:b2:db:d0:fb:9e:10:
bf:34:9c:f2:f7:c2:86:a9:7c:8f:7e:5c:7a:f8:44:
18:88:4c:34:4c:51:b0:29:f5:8f:fb:7b:28:92:3d:
8b:49:a1:c4:e0:35:bb:a1:1d:cc:3f:75:10:05:2d:
ba:ea:14:3c:76:a4:86:7f:5d:3c:c6:fb:c1:7a:15:
c5:44:9f:73:68:4c:ee:ca:98:af:04:44:c9:64:ab:
da:2c:b2:46:69:4c:2f:04:f5:bf:98:1e:55:47:af:
93:bb:f0:56:c8:de:b0:a2:b9:24:7b:5b:7a:a5:1a:
05:eb:ce:92:6e:41:56:51:4a:1e:81:d1:70:7a:ea:
f7:46:74:10:c1:23:62:43:a1:34:a8:68:f2:ce:0f:
0b:06:0f:f0:85:19:b2:52:5d:7e:b4:c8:75:e0:29:
1c:1b:c3:fb:e8:6b:bd:04:ee:7a:88:2c:46:d5:6c:
3d:8e:86:f4:03:a7:57:98:f3:4e:e4:71:d8:12:21:
e0:de:42:c3:e1:49:2e:7b:17:07:fd:3d:70:80:6b:
2e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A8:19:D9:2F:51:1B:23:76:BF:8A:3F:7C:16:7F:97:D0:43:09:08
X509v3 Authority Key Identifier:
keyid:A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:cd:3a:22:73:48:20:7e:0d:e8:f8:08:3a:8d:a7:8d:46:0b:
cf:4f:65:25:c3:3e:21:23:2d:3d:90:74:c4:c5:f6:84:00:19:
a0:c8:57:49:1f:94:73:86:87:f7:17:0a:b0:0b:3d:81:d2:1e:
91:00:a0:de:20:1b:a6:f3:b5:f1:06:24:70:53:5d:7f:e0:a6:
6d:6b:e8:9b:fb:b4:1a:46:f7:55:2a:ca:d0:da:98:56:82:2b:
46:6c:b1:db:c5:60:eb:f0:7a:3c:c4:65:f5:27:61:ea:ac:2b:
43:8e:41:3b:11:82:73:cd:31:58:4e:b6:3d:19:18:3a:60:63:
3d:f1:10:5e:84:91:04:c5:81:04:49:a7:7b:2d:a2:56:3a:d9:
b0:41:f1:52:6e:88:2f:56:a3:6d:ba:e1:05:33:6d:8c:1d:7b:
45:37:dd:7f:a9:09:56:25:f0:93:50:2d:97:03:52:ba:2a:f6:
33:60:a5:5a:00:cb:ca:1e:51:7c:1f:06:fd:c2:c8:1d:72:5d:
b2:4e:cd:c1:47:b3:74:ea:ed:8b:84:43:96:0f:d8:f2:a1:c6:
9d:b5:0b:e8:f3:9e:3e:3c:07:59:4c:ea:08:cc:bc:02:87:cf:
e1:18:af:9c:05:c2:13:a2:39:75:75:ae:19:ee:6b:64:67:23:
37:9d:5a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:50:23 2025 by rpki-client