This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
File: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft (raw, json)
Hash identifier: CbODbspgYyAsMFhcv0I5mdzUDKNau7RTXTv+2XbX1VE=
Subject key identifier: B6:91:0C:E3:51:22:0A:0C:E2:6E:01:A3:AA:60:3E:24:49:BF:45:9D
Authority key identifier: 7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F
Certificate issuer: /CN=A91971CB/serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F
Certificate serial: 0BEC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
Manifest number: 0BE5
Signing time: Sun 28 Dec 2025 15:05:56 +0000
Manifest this update: Sun 28 Dec 2025 15:05:55 +0000
Manifest next update: Sun 04 Jan 2026 15:05:55 +0000
Files and hashes: 1: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl (hash: LouBK6OHQgy3pDhjIyEcHngz9/7Fj90iV8Rz5+HaTqw=)
2: 99D18D463C0211EAA729693AC4F9AE02.roa (hash: /8fEEtPdMyUdjQ1z+LPnGcbnmSc1TogzrljlPk/+Zoo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl
rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Jan 2026 15:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3052 (0xbec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91971CB, serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F
Validity
Not Before: Dec 28 15:05:55 2025 GMT
Not After : Jan 4 15:05:55 2026 GMT
Subject: CN=69514754-8c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ce:68:5b:bf:55:db:27:12:08:56:0a:12:2b:
36:7c:9f:e0:eb:58:bd:51:d3:d7:80:f7:e0:b4:8f:
10:a7:96:8f:a5:50:c3:48:93:80:b4:bf:5e:f2:f0:
b0:6f:78:b7:1a:08:8f:af:25:13:0f:ee:1f:88:e9:
91:70:69:a7:93:af:03:b0:2a:3e:3a:dd:fa:21:29:
c5:24:80:6b:b1:14:be:3d:1e:8f:ce:e2:06:34:b0:
94:97:24:de:be:2b:a3:0d:34:fc:66:c1:93:2e:18:
10:1a:10:0c:e0:d5:9f:db:54:b4:5d:ee:3e:85:4b:
ef:8d:c2:9c:9e:49:96:de:b4:7c:5e:1d:d1:92:bb:
9f:9e:4e:22:54:93:24:f2:a7:97:23:ce:ba:a5:96:
07:42:b2:97:c6:14:62:93:ad:58:7f:c5:30:2c:6d:
85:c1:9e:0a:5b:8d:17:0c:72:38:5b:08:e6:ac:d7:
3a:9d:e0:40:d3:56:b2:a5:f4:78:f3:66:52:36:35:
d3:53:31:a8:84:aa:a2:81:f4:4e:68:17:eb:5f:8f:
1e:86:bc:94:0e:a9:3d:77:bc:3c:0b:cf:d7:b2:b0:
82:c2:ca:2f:84:08:28:3a:c0:9c:f3:93:9b:43:7e:
95:98:40:d7:33:c4:1f:b4:75:bc:6e:0e:5e:f7:77:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:91:0C:E3:51:22:0A:0C:E2:6E:01:A3:AA:60:3E:24:49:BF:45:9D
X509v3 Authority Key Identifier:
keyid:7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c0:9a:31:5c:92:3d:92:37:dc:21:c0:32:b9:6d:96:79:42:
5b:94:5f:51:0d:a7:7a:f5:c9:20:ed:f6:b2:e8:86:38:68:6e:
db:77:e7:5e:2b:8f:24:ad:0e:64:cf:d0:b8:ee:02:ea:2f:16:
70:76:5c:a2:8c:40:b6:e1:76:bc:4b:9c:f4:ec:66:f0:e4:ac:
7d:76:10:09:5e:8e:82:eb:4c:c9:e2:cd:d4:5f:bc:d2:0d:51:
4e:a7:82:2d:66:14:f8:f2:35:19:db:5d:84:3e:25:cb:26:23:
3e:87:00:a9:fa:63:4b:73:b9:03:6b:c5:98:a7:1d:f0:30:60:
0d:a9:e5:37:2e:33:df:fb:84:a8:be:60:c0:67:d4:42:20:0e:
fe:db:ad:3f:d6:fd:3a:66:3d:93:7d:cf:73:36:17:7b:89:f7:
a5:d9:a2:d6:81:f7:ae:7a:ea:00:82:b9:35:22:b4:78:f0:28:
82:dc:d8:d0:61:14:6f:db:02:77:16:7c:be:48:9c:1e:6c:3e:
64:e4:47:db:74:76:e2:69:88:c0:07:63:63:1d:9b:d5:96:0d:
46:87:4d:78:c5:a9:eb:53:8e:95:01:b7:da:37:cb:a5:b8:11:
a6:65:e1:9d:a0:b3:d1:92:bb:64:c0:f2:ee:c5:ee:73:8b:f1:
ed:04:91:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 14:58:53 2025 by rpki-client