This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
File: qB0VXKQErkFFeBrwXrU6Ehni4GU.mft (raw, json)
Hash identifier: T3+IwvuzcHlSFW1HslH+Azsfgd9kqRAK9hBVi+ZTgKs=
Subject key identifier: E5:06:EF:16:DB:0F:F5:A4:50:B5:E8:29:45:32:58:C4:31:3A:2A:CD
Authority key identifier: A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65
Certificate issuer: /CN=A91C31B7/serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065
Certificate serial: 012D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
Manifest number: 012A
Signing time: Sat 27 Dec 2025 03:36:16 +0000
Manifest this update: Sat 27 Dec 2025 03:36:16 +0000
Manifest next update: Sat 03 Jan 2026 03:36:16 +0000
Files and hashes: 1: qB0VXKQErkFFeBrwXrU6Ehni4GU.crl (hash: RZYXKg6X3lh40c8Po1uNYFCVACBAxtZUWM4TMU46EzY=)
2: 42C6F6041E6F11EF898C1E38C4F9AE02.roa (hash: WVfFVr8nZrz60GI+g0Deoi4qcsL8XuNjzkTeXFJeRz4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl
rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 03:36:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C31B7, serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065
Validity
Not Before: Dec 27 03:36:16 2025 GMT
Not After : Jan 3 03:36:16 2026 GMT
Subject: CN=694f5430-3260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:99:2d:fe:6b:8e:81:ad:31:da:b0:5b:44:6f:
24:98:74:42:10:0d:f8:d7:77:74:30:48:d8:ba:1c:
c6:60:5b:20:db:9d:65:1b:78:f4:84:6a:f1:48:6d:
6a:e3:8b:4a:c1:38:ff:fd:d3:07:ba:92:37:df:ef:
56:67:45:a5:15:ae:59:8c:cb:21:d4:7f:ac:7d:ec:
be:ed:67:b5:71:20:c6:66:77:9c:b8:8a:72:64:fb:
e4:6f:32:17:c1:11:86:25:e8:84:8a:d9:ea:46:ee:
76:6b:02:10:ca:9d:c1:5e:f4:ab:e4:d4:66:06:20:
c6:48:71:a6:7b:40:46:9a:66:11:74:20:a6:4c:5a:
d6:a0:02:ef:a9:76:13:2c:8c:af:89:85:b3:f2:7b:
07:5b:65:77:89:39:b0:6d:b3:6a:47:7b:c8:1b:f5:
5d:e4:06:45:14:78:03:9d:65:5c:f4:44:93:c7:5d:
d0:a3:e8:ed:ab:2a:ee:68:47:0c:c2:e3:76:9f:4e:
33:28:3f:50:2d:bd:08:2c:03:c8:66:09:56:8e:00:
74:d2:3f:c4:ba:70:0d:5a:19:e6:33:d3:64:62:6d:
f8:37:d2:2f:bd:c6:96:d2:3a:a8:07:b0:df:13:3e:
c0:d5:a8:64:ba:68:1c:7a:c4:4c:9b:a1:5d:a4:7e:
1f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:06:EF:16:DB:0F:F5:A4:50:B5:E8:29:45:32:58:C4:31:3A:2A:CD
X509v3 Authority Key Identifier:
keyid:A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:f0:49:5d:37:64:a5:a6:f0:0e:41:3b:03:9d:60:5a:82:18:
83:d1:63:16:6a:05:24:6e:95:5f:25:24:11:ca:30:1b:b9:b2:
da:70:28:23:3d:61:71:14:7c:50:a9:20:aa:11:8c:43:2c:b9:
59:d5:8b:0e:38:f3:7a:af:84:17:22:62:c8:1d:fe:07:af:9e:
c1:dd:42:89:5d:de:ce:fe:47:9b:8c:9a:2a:d5:dd:e0:e2:86:
f6:47:d2:21:71:da:63:9c:e8:66:3a:cc:00:10:ff:dd:5e:e2:
5d:0f:02:64:22:e5:74:fa:7f:65:ab:92:f1:3f:8c:87:a3:cb:
48:57:14:a9:22:c5:e3:2c:d0:7d:3f:28:3c:08:70:6a:9d:27:
fe:7b:22:3d:6e:04:45:7a:51:28:76:f6:84:fb:94:bb:47:82:
71:b9:b1:67:e9:8e:89:f5:9c:28:04:04:51:59:af:f9:38:e9:
24:d9:92:af:8a:87:25:1c:1f:0c:da:a8:ef:1a:e9:91:0b:48:
a0:25:f7:22:57:d7:62:12:1e:8b:f6:fd:86:30:e5:3f:af:3f:
b4:a5:a8:72:d6:90:54:33:1d:26:0c:60:22:56:4d:b9:cb:1c:
c8:da:80:0e:be:67:05:02:d2:08:f5:cf:90:ef:e4:7c:16:2e:
80:d5:26:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 08:02:24 2025 by rpki-client