This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
File: quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json)
Hash identifier: 9moDmgNNCzPNHhvcK33u/VeOARAs2LMoT2P/mgNnatw=
Subject key identifier: 79:F7:84:4C:86:B4:4A:03:F5:11:44:AD:7C:AD:C4:09:C7:1D:22:41
Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
Certificate issuer: /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Certificate serial: E9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
Manifest number: E1
Signing time: Fri 19 Dec 2025 04:44:30 +0000
Manifest this update: Fri 19 Dec 2025 04:44:30 +0000
Manifest next update: Fri 26 Dec 2025 04:44:30 +0000
Files and hashes: 1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: 4L3qWE9ls7Ln666pgb88UW5WRvHxMUlXpPqhtMovs7s=)
2: 7CEBE3D254CC11F0A18D9383C4F9AE02.roa (hash: qKLJuhiSt6ziSLB7uhD7HeaslWaCM3j6cyeFP9vZtrs=)
3: 0A6CBB6E54CD11F0A3E48084C4F9AE02.roa (hash: J4JwOCVNeHLcNgzC2WuOU4UTLpubXvEJF1TWPMAPsrE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233 (0xe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Validity
Not Before: Dec 19 04:44:30 2025 GMT
Not After : Dec 26 04:44:30 2025 GMT
Subject: CN=6944d82e-b174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:26:33:c2:87:14:4f:d5:35:48:71:70:93:
96:eb:6f:e8:08:af:fc:e8:41:b2:48:69:90:47:79:
75:70:a4:2d:50:3b:78:f5:31:7f:36:cf:09:49:a9:
c6:13:f2:8e:7d:51:7a:d8:b8:27:f8:13:32:6b:4b:
35:a1:1b:fc:2b:7e:92:77:2b:50:0d:bc:7a:42:24:
d7:f4:c0:06:eb:f3:5f:b1:72:43:1c:ef:ad:d3:a5:
9a:9e:cc:e8:d8:dd:65:e0:08:0f:e4:28:47:b9:8c:
ac:3a:ca:28:ca:48:f9:1e:94:87:a7:50:12:c7:d6:
69:26:e1:19:63:db:85:8f:e7:1f:ac:45:0c:2f:6d:
6f:41:98:82:93:f9:3a:55:80:32:b0:0e:12:1f:59:
7d:66:b3:7b:c0:86:7d:92:74:d7:2f:67:1a:e2:98:
ca:6b:b9:bb:55:8d:b7:3e:78:8b:83:89:dd:25:14:
ed:b8:e2:e9:bd:04:78:99:fb:be:f9:68:48:07:f7:
65:89:48:c4:65:f2:d5:8e:a0:98:1b:cb:89:26:74:
e8:a5:79:06:5b:91:fc:c0:d5:64:b3:0e:c2:02:88:
c3:6a:95:08:a8:0f:e9:66:b7:e3:d0:c7:a3:2e:a0:
ae:76:39:bf:90:a0:ea:8b:52:05:5a:1e:2a:fb:8a:
6b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F7:84:4C:86:B4:4A:03:F5:11:44:AD:7C:AD:C4:09:C7:1D:22:41
X509v3 Authority Key Identifier:
keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:cd:2a:d6:a3:ae:23:99:38:8f:00:64:78:19:14:8c:c7:5e:
16:30:72:bb:e6:82:af:04:4a:f6:74:20:6c:fd:5e:b3:81:8e:
6e:23:b7:e9:bd:b5:d2:6d:4a:1b:24:72:50:4a:40:b3:b2:83:
42:50:dd:8d:c2:98:15:f4:38:93:25:66:e7:28:f5:be:21:11:
3d:e2:1c:8b:90:3c:d8:96:06:62:76:96:20:ad:c4:df:84:8e:
eb:97:3d:e4:a2:bb:31:c5:4f:81:74:43:c5:4c:c7:02:cd:0a:
65:a2:3c:94:ec:62:68:c7:82:30:91:a3:d6:78:1e:b1:40:79:
4d:e6:13:6e:1b:93:51:25:78:86:2c:26:94:bc:8f:c2:49:2d:
63:b7:f4:08:76:32:66:e6:1f:75:2c:92:e8:8b:4e:c5:e4:22:
67:f7:b0:08:65:2a:29:27:ad:ad:60:aa:5d:7b:0b:74:c3:c3:
44:76:1b:fe:1b:de:0f:42:35:df:27:c4:21:9c:ae:6a:6a:f4:
27:f7:8e:d2:d7:12:db:8f:28:30:18:9c:b0:e6:7a:88:df:12:
1e:5a:2c:88:03:73:ab:34:37:cf:b3:e9:62:95:f9:4a:b8:22:
da:85:96:cd:81:f7:a5:f8:80:c8:a7:89:d2:67:da:f5:d3:5e:
51:13:11:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:55:31 2025 by rpki-client