This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft
File: qjbeqgtIjXQ9MJajdNPOwwNOado.mft (raw, json)
Hash identifier: WnxB3AJfF0r4JMXnKbhcdaSpVP2N9FwbUS2QoWbU4XU=
Subject key identifier: 07:16:5D:ED:91:42:FE:4A:86:19:E7:90:35:28:F6:49:3F:8A:D3:9A
Authority key identifier: AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA
Certificate issuer: /CN=A91DC068/serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA
Certificate serial: 0160
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft
Manifest number: 015C
Signing time: Wed 31 Dec 2025 03:15:03 +0000
Manifest this update: Wed 31 Dec 2025 03:15:03 +0000
Manifest next update: Wed 07 Jan 2026 03:15:03 +0000
Files and hashes: 1: qjbeqgtIjXQ9MJajdNPOwwNOado.crl (hash: 6KkTplLhUyEAT07BPRtkdTQlYQrsp/FmLRPbzHJhrDI=)
2: 4C798C5AD5DD11EEA5B1C711C4F9AE02.roa (hash: UehIW4ne9/pa7E+bJ7b7vlEagKFtkPy1RDy9gQNG8w4=)
3: 4CFFF0A6D5DD11EEA5B1C711C4F9AE02.roa (hash: 39NjyNN95zMryV/4gipoP40hgOhWq2OieGFrOUrcjx8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl
rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Jan 2026 03:15:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352 (0x160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC068, serialNumber=AA36DEAA0B488D743D3096A374D3CEC3034E69DA
Validity
Not Before: Dec 31 03:15:03 2025 GMT
Not After : Jan 7 03:15:03 2026 GMT
Subject: CN=69549537-ef97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:2f:a1:87:3e:15:ba:3c:db:de:de:91:6a:
b9:2a:6b:20:1d:6f:d4:1f:94:74:7a:90:29:00:00:
95:b7:ab:55:48:73:7f:45:80:2d:82:fd:bf:f5:ea:
78:23:99:9f:98:4c:73:47:4a:f2:26:c9:80:cf:57:
75:c2:e6:08:46:d8:9d:a3:35:c7:7f:e5:77:f1:5f:
0a:ee:0e:88:5f:e5:c9:39:33:e6:bf:cd:77:1d:ea:
c8:7a:60:8d:5b:af:92:9c:91:6c:4c:50:70:b5:81:
cd:c1:e2:f1:3b:91:a8:0c:67:c9:2d:56:2d:fa:24:
c8:a6:14:da:a0:65:5f:52:09:39:9a:f0:d3:d9:e5:
bc:c4:fd:1a:8b:ce:c6:36:17:14:ae:5e:cd:e5:ed:
73:f0:63:20:bb:33:32:67:fc:3a:48:ce:57:6a:5a:
5f:35:9d:f5:c2:ef:66:d3:34:51:43:d3:bd:f9:5d:
e0:da:d3:6e:0c:39:07:53:c6:a0:e0:4c:af:03:71:
47:8b:25:18:b5:34:ff:c8:fe:a4:2e:85:41:0d:d5:
28:fc:60:59:05:e0:fd:0d:cf:85:1c:a0:1d:85:84:
0c:50:ae:dd:cb:e2:02:e9:08:27:64:85:ff:82:b9:
ae:a7:fd:a9:86:99:18:5e:f2:f5:66:40:4d:06:08:
16:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:16:5D:ED:91:42:FE:4A:86:19:E7:90:35:28:F6:49:3F:8A:D3:9A
X509v3 Authority Key Identifier:
keyid:AA:36:DE:AA:0B:48:8D:74:3D:30:96:A3:74:D3:CE:C3:03:4E:69:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qjbeqgtIjXQ9MJajdNPOwwNOado.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/781E7DC4D51611EEB35E6A60C4F9AE02/qjbeqgtIjXQ9MJajdNPOwwNOado.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:1f:e9:1d:7a:b1:70:e8:35:ad:fd:2c:fd:cb:9c:2d:bb:b8:
9a:25:68:5a:38:d8:80:e6:d9:1f:26:bc:f3:cb:e2:e9:82:e6:
fd:51:c4:bc:73:04:79:dd:15:d0:46:8c:0b:6b:7a:0d:71:01:
c4:da:df:a6:04:f0:09:fd:59:71:b0:8a:2b:9f:c4:8b:c8:e8:
84:3f:54:2d:5b:62:c9:92:99:df:2a:ae:f0:c7:2f:d1:ff:7c:
4b:49:5a:df:ad:7b:cb:ea:0b:c5:2c:54:09:62:1f:0c:fc:9a:
4a:d1:99:83:65:6b:1a:9c:36:45:9e:2d:d1:b8:2f:01:a2:90:
b2:7d:21:ee:d1:3c:02:4a:d1:91:03:15:0c:f9:d9:14:54:64:
e5:b0:b9:93:33:63:f6:2f:dc:4e:73:9b:2c:df:5f:08:7a:ac:
18:95:e2:3d:98:5b:6b:58:4e:c0:71:e7:9a:01:67:94:44:c6:
b4:fa:dd:40:c2:66:e6:35:c2:58:81:13:91:61:4a:3e:5f:57:
7b:bc:d0:f9:c3:3e:7b:a8:72:f8:43:cd:81:89:92:76:b4:4d:
ee:d8:40:78:42:63:5d:54:01:13:f4:04:e2:22:30:ec:2e:c9:
4d:ff:60:db:d7:82:2c:31:d0:ef:7a:8d:e4:dd:91:e6:12:a3:
f2:f1:78:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 11:49:11 2025 by rpki-client