This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft
File: hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft (raw, json)
Hash identifier: T9xJkYrtCRfeCE8tBJ81VzaCl7PQLnmLoW7zHh+TlFo=
Subject key identifier: 10:50:1D:19:4A:F9:59:7E:E9:55:5A:6B:FF:02:09:E6:C3:3A:15:2B
Authority key identifier: 86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3
Certificate issuer: /CN=A91973D2/serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3
Certificate serial: 0639
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft
Manifest number: 0632
Signing time: Wed 24 Dec 2025 22:01:26 +0000
Manifest this update: Wed 24 Dec 2025 22:01:26 +0000
Manifest next update: Wed 31 Dec 2025 22:01:26 +0000
Files and hashes: 1: hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl (hash: tCcDZBYc2uhxyeC9/cwH7slZ6Bcnf/mQ1zAVPdh+6aY=)
2: 6959BDA8C05B11EB9540776AC4F9AE02.roa (hash: an7WXAxX+jv7oF31g7hZpPAQEGzXt/L0AOIi2ZabL2I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl
rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1593 (0x639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91973D2, serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3
Validity
Not Before: Dec 24 22:01:26 2025 GMT
Not After : Dec 31 22:01:26 2025 GMT
Subject: CN=694c62b6-6c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:fb:8b:6f:dc:02:70:d9:cc:d3:fe:71:f0:
d8:ea:53:81:dc:01:07:a9:93:2e:d8:46:aa:7d:b8:
95:26:ff:c0:b9:12:9c:fd:1b:c8:06:32:6a:43:9d:
11:1a:37:99:3f:0f:ea:08:14:b4:f9:92:8a:a2:41:
a9:e4:be:ef:21:8a:1d:36:04:91:2a:65:9e:98:6a:
18:95:6b:1b:28:08:6d:ec:23:16:f7:23:ac:b7:35:
df:c5:e3:dd:b8:ed:e6:03:55:9a:d9:60:77:c0:cd:
d7:a1:72:15:77:ce:2d:d8:44:73:50:f5:14:df:c3:
8c:83:2c:e7:74:d3:55:f1:46:81:7d:e5:b4:ac:fa:
84:ae:e6:9c:72:79:13:64:60:5f:48:23:13:c3:29:
0a:e9:9d:69:ff:bc:74:61:f9:dc:6e:b2:64:f3:6f:
8a:8c:60:86:9c:12:95:c3:9f:e9:d8:fe:b9:77:21:
30:d2:39:f2:49:d7:22:0f:eb:f3:86:b8:37:2a:3a:
c7:68:1c:5b:e1:6c:a3:70:ac:49:99:af:8c:e8:8b:
5e:39:55:84:b3:4d:80:01:70:f0:59:06:b9:3d:98:
11:8b:8e:bd:6e:24:48:a3:e1:90:03:10:67:86:b5:
10:42:37:fd:4b:8c:d0:56:0d:0a:3e:9a:2f:d3:22:
66:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:50:1D:19:4A:F9:59:7E:E9:55:5A:6B:FF:02:09:E6:C3:3A:15:2B
X509v3 Authority Key Identifier:
keyid:86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a6:e1:b7:4c:c0:6e:f6:1b:f2:80:ec:18:df:f1:66:6f:c9:
d0:40:8f:c6:18:b4:99:4e:52:2a:cd:19:8e:da:92:84:7b:1c:
ef:b7:96:27:bd:55:29:a0:a3:a6:a5:6b:20:62:e2:27:8d:76:
77:bd:6f:41:42:f0:81:eb:d3:37:83:81:be:4b:d5:0a:65:3d:
c2:34:dd:09:d3:79:54:9a:cf:ea:ab:b0:2a:6a:72:ce:4b:8f:
fc:8a:ab:e7:3f:0f:11:d6:21:95:9b:15:f1:81:14:b1:d0:29:
15:03:5a:28:ac:76:4a:30:47:3d:e7:8c:fe:c1:f5:17:3d:8a:
28:9a:82:0a:12:df:f2:ac:c6:95:30:f2:9f:50:7a:19:7a:b0:
aa:a6:e0:00:e1:05:fa:2d:1b:e6:b0:84:7d:63:e5:74:8e:4f:
fc:88:1a:58:4b:6c:d7:f6:01:84:87:a3:ca:1c:50:03:19:60:
b4:08:83:5d:40:96:72:ee:bb:ef:c8:78:3b:33:30:e8:35:ab:
63:fd:6b:08:d1:df:ac:ca:c9:c4:f8:d9:3d:d2:1d:89:a0:2c:
c8:be:6e:89:5d:c4:d2:b1:00:37:16:27:6b:89:54:6d:61:38:
b9:2b:33:74:4b:df:2c:92:2e:a3:a0:a4:76:c7:f5:22:f4:27:
1d:26:59:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 13:40:06 2025 by rpki-client