This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.mft
File: qEiFS7_Ou01JgBuyrj2EQIscPSc.mft (raw, json)
Hash identifier: wppPpCGm8uwBkkK0PZoey4rdWK5sGOfgL+eAI8KxcQc=
Subject key identifier: 6B:A1:97:CC:54:C6:26:3B:DB:8F:49:30:E3:E2:0F:67:CD:5C:41:02
Authority key identifier: A8:48:85:4B:BF:CE:BB:4D:49:80:1B:B2:AE:3D:84:40:8B:1C:3D:27
Certificate issuer: /CN=A91BD939/serialNumber=A848854BBFCEBB4D49801BB2AE3D84408B1C3D27
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEiFS7_Ou01JgBuyrj2EQIscPSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.mft
Manifest number: 30
Signing time: Sat 27 Dec 2025 06:24:00 +0000
Manifest this update: Sat 27 Dec 2025 06:24:00 +0000
Manifest next update: Sat 03 Jan 2026 06:24:00 +0000
Files and hashes: 1: qEiFS7_Ou01JgBuyrj2EQIscPSc.crl (hash: 0edR6knGI9mYEc125mDiM1xN5HOvKkpt2AlfPhT1KeY=)
2: ABD937089D6511F0A6A3E74BC4F9AE02.roa (hash: Jkbb7HkAq8iDWnzG+rvThhFx1fDkJFLk00mNMZ+k2pU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.crl
rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEiFS7_Ou01JgBuyrj2EQIscPSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 06:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD939, serialNumber=A848854BBFCEBB4D49801BB2AE3D84408B1C3D27
Validity
Not Before: Dec 27 06:24:00 2025 GMT
Not After : Jan 3 06:24:00 2026 GMT
Subject: CN=694f7b80-5dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c6:5a:10:7f:d6:73:11:4a:ed:94:eb:aa:82:
96:71:6b:94:76:86:e9:04:c6:4b:5f:ab:aa:82:3f:
ab:2b:83:e2:aa:7a:c4:20:6e:03:0a:b9:23:b7:c8:
41:c7:39:a9:15:cb:e6:4b:34:6e:a0:cf:be:9e:e5:
85:a8:d2:2a:7b:7e:2c:ef:ca:7f:19:88:9e:27:d8:
e1:68:e3:bc:36:cc:7a:ff:18:20:a9:fb:5c:b8:dd:
a6:d1:95:28:8c:e2:7f:53:7c:11:09:42:37:df:9a:
92:76:05:8f:82:de:2f:2c:01:a3:fe:03:12:34:ee:
c2:eb:fe:8f:59:bd:99:e0:7d:97:49:d4:1e:27:a0:
a8:e2:52:9f:25:78:71:5d:c0:40:5b:af:f7:08:93:
e3:fb:df:15:45:eb:dd:21:32:82:61:05:e6:53:2c:
54:27:85:41:df:f2:18:1c:6d:06:b5:1a:9a:d4:72:
46:7e:94:65:95:03:96:60:8a:23:e1:f4:a9:e6:54:
37:68:ad:4a:01:b3:8a:a7:0a:6b:33:73:5f:c1:4b:
79:fa:4d:2e:94:ea:a0:40:96:ce:28:2a:61:8f:60:
86:c3:5a:6c:45:4d:42:f4:33:23:98:11:ef:a2:7f:
fe:0c:9b:c9:c6:66:48:e7:e4:6f:5d:e4:20:28:82:
e2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A1:97:CC:54:C6:26:3B:DB:8F:49:30:E3:E2:0F:67:CD:5C:41:02
X509v3 Authority Key Identifier:
keyid:A8:48:85:4B:BF:CE:BB:4D:49:80:1B:B2:AE:3D:84:40:8B:1C:3D:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEiFS7_Ou01JgBuyrj2EQIscPSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD939/D15DC08A9D6411F092799347C4F9AE02/qEiFS7_Ou01JgBuyrj2EQIscPSc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:b1:21:b3:36:39:43:d2:df:c4:8a:f3:13:ae:0d:a9:01:45:
c9:2c:7d:a7:6e:23:01:a6:69:61:09:d4:cb:c8:33:f7:b2:f9:
6f:d3:a4:de:0a:74:d8:96:e7:2b:75:b2:98:fc:d3:89:ee:49:
dc:96:53:43:34:4f:e1:11:d9:ec:db:e7:a2:26:c9:6d:f2:40:
ef:ad:53:76:f4:af:65:7a:ee:85:c8:64:5e:41:36:08:9d:e3:
14:a0:d6:42:f2:7e:ac:b6:de:99:2f:b8:8b:4d:9d:55:c5:02:
53:2c:fa:6b:95:d9:38:ce:32:1d:67:89:be:64:65:d9:38:9a:
ec:22:7f:ed:71:ac:f5:e5:d9:f2:5b:4a:89:cd:cc:9f:23:c6:
c7:5d:af:02:08:37:61:08:87:6a:04:10:84:b1:35:e3:f8:ce:
c7:92:cf:45:c9:e0:05:3b:fa:ef:20:7d:69:58:9c:78:b8:8a:
b9:63:86:6d:a3:e0:9c:20:72:6b:32:9e:a1:4d:64:3a:6a:4e:
db:24:f1:8e:c7:68:58:4b:a0:c5:74:35:70:8d:df:65:eb:67:
5e:f1:8a:0b:42:a6:84:6c:90:6b:f5:f9:c6:43:a5:77:83:f9:
aa:dd:d0:00:37:e9:ab:c9:aa:28:fa:d5:3a:60:33:87:cd:2c:
e2:09:44:1c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
RDkzOTExMC8GA1UEBRMoQTg0ODg1NEJCRkNFQkI0RDQ5ODAxQkIyQUUzRDg0NDA4
QjFDM0QyNzAeFw0yNTEyMjcwNjI0MDBaFw0yNjAxMDMwNjI0MDBaMBgxFjAUBgNV
BAMMDTY5NGY3YjgwLTVkZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDuxloQf9ZzEUrtlOuqgpZxa5R2hukExktfq6qCP6srg+KqesQgbgMKuSO3yEHH
OakVy+ZLNG6gz76e5YWo0ip7fizvyn8ZiJ4n2OFo47w2zHr/GCCp+1y43abRlSiM
4n9TfBEJQjffmpJ2BY+C3i8sAaP+AxI07sLr/o9ZvZngfZdJ1B4noKjiUp8leHFd
wEBbr/cIk+P73xVF690hMoJhBeZTLFQnhUHf8hgcbQa1GprUckZ+lGWVA5ZgiiPh
9KnmVDdorUoBs4qnCmszc1/BS3n6TS6U6qBAls4oKmGPYIbDWmxFTUL0MyOYEe+i
f/4Mm8nGZkjn5G9d5CAoguLJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUa6GXzFTG
Jjvbj0kw4+IPZ81cQQIwHwYDVR0jBBgwFoAUqEiFS7/Ou01JgBuyrj2EQIscPScw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEOTM5L0QxNURDMDhBOUQ2
NDExRjA5Mjc5OTM0N0M0RjlBRTAyL3FFaUZTN19PdTAxSmdCdXlyajJFUUlzY1BT
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcUVpRlM3X091MDFKZ0J1eXJqMkVRSXNjUFNjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE
OTM5L0QxNURDMDhBOUQ2NDExRjA5Mjc5OTM0N0M0RjlBRTAyL3FFaUZTN19PdTAx
SmdCdXlyajJFUUlzY1BTYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBABexIbM2OUPS38SK8xOuDakBRcksfaduIwGmaWEJ1MvIM/ey+W/TpN4K
dNiW5yt1spj804nuSdyWU0M0T+ER2ezb56ImyW3yQO+tU3b0r2V67oXIZF5BNgid
4xSg1kLyfqy23pkvuItNnVXFAlMs+muV2TjOMh1nib5kZdk4muwif+1xrPXl2fJb
SonNzJ8jxsddrwIIN2EIh2oEEISxNeP4zseSz0XJ4AU7+u8gfWlYnHi4irljhm2j
4JwgcmsynqFNZDpqTtsk8Y7HaFhLoMV0NXCN32XrZ17xigtCpoRskGv1+cZDpXeD
+ard0AA36avJqij61TpgM4fNLOIJRBw=
-----END CERTIFICATE-----
Generated at Sun Dec 28 19:13:36 2025 by rpki-client