This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
File: qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft (raw, json)
Hash identifier: N0g/1Pwvfl/ghjPQXen4dAhf1/RvsGaOoO6a1nFX5sQ=
Subject key identifier: 5C:5A:8A:6B:35:7D:C6:9E:81:FC:F2:33:D8:BB:CA:EE:A4:9F:D6:56
Authority key identifier: AA:CF:FA:B8:80:4E:7D:62:2F:43:B5:25:49:83:3D:30:87:D9:F9:C8
Certificate issuer: /CN=A919FADC/serialNumber=AACFFAB8804E7D622F43B52549833D3087D9F9C8
Certificate serial: 0828
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
Manifest number: 0821
Signing time: Fri 26 Dec 2025 20:13:31 +0000
Manifest this update: Fri 26 Dec 2025 20:13:31 +0000
Manifest next update: Fri 02 Jan 2026 20:13:31 +0000
Files and hashes: 1: qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.crl (hash: 90K0H/x+tcanV5KmGyFQNK2Pm4K+g1ExyQwtyZicuRw=)
2: 773C48F6FCB511EAA35BDA0AC4F9AE02.roa (hash: PD6vxM8HPQ1TRKqqISE6gvRSXeLWouSMokRSjCqVFPI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.crl
rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Jan 2026 20:13:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2088 (0x828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919FADC, serialNumber=AACFFAB8804E7D622F43B52549833D3087D9F9C8
Validity
Not Before: Dec 26 20:13:31 2025 GMT
Not After : Jan 2 20:13:31 2026 GMT
Subject: CN=694eec6b-ebc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b8:fb:c9:5e:0c:5f:7c:81:02:bf:5f:56:73:
3c:e9:ab:99:ac:03:8a:9e:bd:e3:b9:69:a9:42:c6:
11:03:53:40:ec:41:dd:14:b4:5c:e7:60:e9:26:b7:
7e:ef:11:40:91:3a:48:3f:fa:82:39:e8:9b:32:7c:
a8:26:b5:26:87:55:05:ea:76:4c:cd:99:cb:b9:5d:
be:aa:4c:c7:9a:6c:20:62:f8:15:c8:c9:b0:b5:ed:
58:c2:b2:03:03:d6:f1:b2:fc:3b:da:81:5b:c3:bb:
91:a9:b0:4a:b6:32:6f:2f:44:64:d2:d7:26:2d:87:
62:9e:6d:cd:31:13:e0:f7:50:97:0a:da:8f:24:6a:
f0:76:3e:e7:0e:5b:b1:f5:42:3b:27:50:20:18:af:
00:59:1f:18:83:eb:95:ad:1a:31:9c:d4:10:a6:f6:
3d:3a:e6:23:1e:51:f8:a0:85:fc:01:bd:9e:88:34:
c0:67:82:73:8c:8c:c7:1a:24:c1:a0:6d:61:cc:8f:
10:67:1b:8b:a3:ea:57:d1:00:c5:d8:a4:47:29:6e:
9f:15:f4:8c:40:bb:90:1e:7f:df:f0:a4:27:0a:5a:
aa:a5:0b:7c:47:c0:20:dc:a8:aa:72:d6:1a:69:df:
0b:cf:3a:83:ab:ca:83:ed:b4:db:a0:47:31:a4:d6:
10:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5A:8A:6B:35:7D:C6:9E:81:FC:F2:33:D8:BB:CA:EE:A4:9F:D6:56
X509v3 Authority Key Identifier:
keyid:AA:CF:FA:B8:80:4E:7D:62:2F:43:B5:25:49:83:3D:30:87:D9:F9:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FADC/4C4D6F86FCB411EA84638009C4F9AE02/qs_6uIBOfWIvQ7UlSYM9MIfZ-cg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:8d:61:19:ba:06:f5:cc:ff:b3:a7:a9:80:a9:cc:10:ea:4a:
b4:9a:5b:80:d2:a7:17:1b:e2:3c:9a:c9:54:4f:b3:f9:6c:9d:
34:1e:ec:9b:db:a1:88:71:2c:94:46:0c:71:e9:80:0d:d7:8f:
70:6e:48:99:cc:dd:a7:d9:04:cd:17:57:e7:62:a7:ad:77:e4:
ed:93:9f:d0:dc:09:93:c8:5d:18:72:6a:eb:a5:fc:99:04:66:
82:0f:45:ba:b4:07:06:9d:80:2f:39:59:49:39:7f:47:5f:61:
49:af:2d:70:8f:c1:3d:db:95:a0:11:04:22:8e:c8:a0:b4:e2:
da:85:cf:5d:3a:a1:77:0e:3a:79:5d:3b:7f:39:52:53:09:1b:
93:ca:40:52:9a:a8:c0:14:82:d8:8c:87:c8:fa:f7:d8:89:a2:
8c:d9:34:54:50:b3:63:6f:0e:9e:e3:c2:b2:b0:2f:97:c2:4f:
f1:bc:52:20:84:46:63:d5:a4:7c:f9:ee:3a:0e:81:d5:00:c2:
39:45:2a:63:b7:d2:84:3c:ca:2a:e7:10:68:16:09:b3:ec:da:
7c:7b:d6:26:32:9b:5e:8d:8e:c7:47:d0:73:26:99:2e:da:c1:
f1:29:ce:69:00:43:36:c2:7b:c7:41:9c:12:a7:52:58:88:6e:
b2:6e:b8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 01:04:08 2025 by rpki-client