This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft
File: qjXi-Xe1XnL5FjW_fVO861NHmDs.mft (raw, json)
Hash identifier: vyVAb6EhPw6+p5qhpMrMx3KhBFixqlXBwxYdra7qmpk=
Subject key identifier: 82:1A:99:C1:CD:07:EE:C9:E6:CA:DF:EA:A1:15:5A:D6:5E:DA:52:0A
Authority key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B
Certificate issuer: /CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B
Certificate serial: CB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft
Manifest number: C9
Signing time: Fri 19 Dec 2025 04:55:32 +0000
Manifest this update: Fri 19 Dec 2025 04:55:31 +0000
Manifest next update: Fri 26 Dec 2025 04:55:31 +0000
Files and hashes: 1: qjXi-Xe1XnL5FjW_fVO861NHmDs.crl (hash: dUv/29HbY6ziel3YZo9fZ1SixI2/zhcM1qHcBdJJjQY=)
2: 8D6B6D86A98C11EFAAC0F364C4F9AE02.roa (hash: im2ulDC6TuJxDzTWTDZh2iCRPtHb9EQEE+xjYBtaU3w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl
rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:55:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2C38, serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B
Validity
Not Before: Dec 19 04:55:31 2025 GMT
Not After : Dec 26 04:55:31 2025 GMT
Subject: CN=6944dac4-c93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d8:cc:c5:32:13:6e:28:0e:01:3b:82:5e:f4:
10:46:2e:eb:f4:07:b9:a0:78:88:45:1f:cb:49:d9:
07:dc:43:5c:a7:09:12:3a:95:2a:d6:74:56:5e:90:
14:7d:e6:e7:0a:a0:0f:5f:5a:26:c9:a6:22:e6:8b:
53:4c:a0:37:99:d1:20:4f:1a:a5:77:11:28:ee:a9:
43:9b:b9:7b:cc:71:24:5f:ec:11:5c:14:df:2e:b7:
5f:9d:4b:a8:7b:7a:ea:21:67:55:c8:fd:4a:91:af:
90:b3:45:ad:64:61:28:58:e1:1a:7a:9c:8b:99:2d:
94:20:5c:d4:84:bf:e7:2f:cf:5c:6f:94:7e:98:c5:
50:00:93:59:a5:4e:6e:d1:bc:e1:1e:d2:de:da:4d:
ef:0a:23:0a:c6:c2:71:ee:e8:76:ba:0a:85:bd:51:
60:45:b6:4b:94:9c:81:d8:37:b8:87:15:a6:58:e5:
9b:7e:05:15:be:38:c2:2e:31:6f:95:c2:2f:ba:d6:
2f:fa:ab:40:1a:cc:22:6d:0c:3c:6e:56:ec:56:7a:
cd:d2:ae:e0:1e:f9:ba:a6:f6:02:b3:36:39:94:a6:
ab:be:e4:12:1e:c8:a6:7a:50:54:f7:ce:c0:b9:1e:
8a:fd:1e:b5:be:e8:23:9e:70:56:2c:43:7d:3b:95:
ed:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1A:99:C1:CD:07:EE:C9:E6:CA:DF:EA:A1:15:5A:D6:5E:DA:52:0A
X509v3 Authority Key Identifier:
keyid:AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:6a:e5:b1:39:e3:55:58:18:c9:e5:7a:06:49:8b:d3:72:f9:
17:a2:48:b5:b0:ae:20:70:43:a6:58:13:24:10:d9:04:87:fa:
ef:26:40:60:0c:ed:76:71:58:11:ae:22:1c:7c:a6:07:b8:fd:
89:4e:d8:00:1b:2d:51:a8:85:ab:77:90:3b:93:ba:11:68:14:
df:40:4d:de:a2:54:bd:1c:47:03:15:18:d1:c0:c2:d0:b9:bb:
5a:b9:63:1b:76:bd:7b:78:7b:34:5f:51:8b:70:fb:28:3d:46:
bb:7d:9d:4a:59:63:f7:d6:17:88:cd:dc:d0:73:c2:82:47:f8:
8d:d7:8e:2b:ef:3e:51:68:38:b9:ea:05:38:1b:15:75:18:9e:
1c:9c:da:02:2a:a6:aa:0b:e4:8d:36:38:a5:54:ac:4c:42:30:
d0:5b:b4:ca:81:c9:ab:93:c9:9c:ac:84:1d:82:6d:60:86:3e:
e4:07:c6:e4:b4:54:01:08:21:19:72:38:d4:7a:b6:d9:90:0f:
4c:b1:87:11:63:90:47:92:1b:f3:bc:6e:39:50:2c:77:bd:64:
d9:13:bf:8f:9c:62:7a:0f:eb:1a:08:48:52:a1:f3:3a:b9:63:
03:a0:34:e7:ca:04:47:fb:c5:a6:45:45:cd:2a:f7:74:0b:3c:
b5:ad:f8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:56:51 2025 by rpki-client