This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
File: mCQhgadVSijnjBropzvieUUsy_Q.mft (raw, json)
Hash identifier: +VJ53Vqz+I9SoeMDQ6/JNgEiSIw6d5JswYNOxUc/R7M=
Subject key identifier: 50:1C:65:C8:B1:41:30:DA:D7:69:1C:E5:A1:3A:72:34:E0:F4:8F:43
Authority key identifier: 98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4
Certificate issuer: /CN=A91DEDC1/serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
Manifest number: 56
Signing time: Fri 19 Dec 2025 06:10:29 +0000
Manifest this update: Fri 19 Dec 2025 06:10:28 +0000
Manifest next update: Fri 26 Dec 2025 06:10:28 +0000
Files and hashes: 1: mCQhgadVSijnjBropzvieUUsy_Q.crl (hash: M4Xr2kVPchan1A1GmBmQNiaRNkThHICDJELAPPpPqIg=)
2: 5C5BA8365D6A11F081971E0DC4F9AE02.roa (hash: lMMp/Z5aJImzHek/MJHR1M6D45Ar+B1jRsvx5k7nHRk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl
rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 06:10:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEDC1, serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4
Validity
Not Before: Dec 19 06:10:28 2025 GMT
Not After : Dec 26 06:10:28 2025 GMT
Subject: CN=6944ec55-e525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:64:4b:a3:f4:78:94:53:11:22:43:c9:89:
cc:78:62:38:21:f1:ef:3e:ed:98:2a:dd:3b:b7:d7:
ad:58:c7:18:bd:33:09:3f:53:c9:e0:fc:25:1a:eb:
ab:47:94:b6:b0:63:6e:5c:bc:67:6a:61:14:9c:dd:
e8:12:b5:2e:a9:8a:7f:b3:7d:0d:14:9a:50:ab:d7:
5b:23:02:ff:1f:be:3d:28:1a:bc:43:67:b6:d2:fe:
0f:a6:8d:c8:50:06:31:ba:9e:21:62:09:f8:1e:bb:
1a:c1:c5:2c:6e:8a:0a:33:10:e9:5d:0a:f3:bd:ce:
3f:ba:bf:6c:61:47:64:26:8a:8d:ed:8c:31:44:7b:
37:58:54:0f:82:8f:52:8d:8b:2e:24:1b:f3:ca:f1:
e1:af:d2:bf:11:83:67:c6:27:ac:0e:19:8f:9f:f3:
87:af:c1:84:c2:b0:65:17:c6:7e:68:da:7c:08:95:
be:56:d3:69:70:ae:9f:07:31:a9:28:54:92:05:79:
02:35:ff:8d:5e:6c:ea:39:34:e8:d5:55:86:f7:a3:
f9:dd:11:e6:b9:be:45:08:01:5f:aa:eb:a6:a8:a3:
b5:1c:ec:c7:61:d8:02:c0:34:c0:d5:37:07:0a:6b:
91:c3:85:fa:47:dd:3e:4a:8e:9a:2d:1e:70:24:1d:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1C:65:C8:B1:41:30:DA:D7:69:1C:E5:A1:3A:72:34:E0:F4:8F:43
X509v3 Authority Key Identifier:
keyid:98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:88:03:cc:85:3d:cf:c4:6d:5d:63:a6:2c:89:42:09:bc:c2:
5a:fa:9c:cb:6a:45:d0:c4:37:c4:69:31:6f:0f:cc:09:0b:43:
97:83:19:9e:cc:9f:40:02:ac:1e:f0:48:d1:3e:6a:7f:e5:c9:
87:76:f7:d5:50:da:05:9c:28:76:dc:38:d7:b2:d3:9e:7a:91:
6f:40:91:d9:6a:9f:9b:73:98:e5:83:45:b7:18:38:d0:fa:ca:
2e:07:5d:a9:d1:49:b1:5c:bb:11:dc:67:72:f1:d2:7c:ad:40:
46:5b:5a:6c:e0:ab:90:12:e5:04:f0:da:a2:25:bc:24:ac:3e:
b2:c2:33:23:6c:3e:42:ae:d3:f0:c0:8e:cc:36:2f:d2:90:d5:
af:64:18:b9:a6:c0:d1:fa:29:02:93:65:94:d3:3e:fd:01:65:
8b:6a:82:aa:85:85:d7:6b:52:48:52:84:2b:ab:0d:2b:ee:c7:
76:4e:7f:e3:11:fb:0a:9a:49:2d:c3:ab:ad:65:47:aa:88:a3:
db:b7:f1:4c:f9:5f:d9:07:95:53:92:6f:b8:1c:f6:88:55:fc:
c3:45:a5:2e:a4:06:90:a8:14:b9:43:38:ca:79:54:e6:a3:61:
92:8b:b0:04:2c:9b:3c:99:9e:08:af:39:31:dd:62:c1:a0:cd:
03:86:06:82
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RURDMTExMC8GA1UEBRMoOTgyNDIxODFBNzU1NEEyOEU3OEMxQUU4QTczQkUyNzk0
NTJDQ0JGNDAeFw0yNTEyMTkwNjEwMjhaFw0yNTEyMjYwNjEwMjhaMBgxFjAUBgNV
BAMMDTY5NDRlYzU1LWU1MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4lGRLo/R4lFMRIkPJicx4Yjgh8e8+7Zgq3Tu3161Yxxi9Mwk/U8ng/CUa66tH
lLawY25cvGdqYRSc3egStS6pin+zfQ0UmlCr11sjAv8fvj0oGrxDZ7bS/g+mjchQ
BjG6niFiCfgeuxrBxSxuigozEOldCvO9zj+6v2xhR2Qmio3tjDFEezdYVA+Cj1KN
iy4kG/PK8eGv0r8Rg2fGJ6wOGY+f84evwYTCsGUXxn5o2nwIlb5W02lwrp8HMako
VJIFeQI1/41ebOo5NOjVVYb3o/ndEea5vkUIAV+q66aoo7Uc7Mdh2ALANMDVNwcK
a5HDhfpH3T5KjpotHnAkHfJ5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUBxlyLFB
MNrXaRzloTpyNOD0j0MwHwYDVR0jBBgwFoAUmCQhgadVSijnjBropzvieUUsy/Qw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFREMxL0ZEMTEyQjc2NUQ2
OTExRjA5MTFENzIwQ0M0RjlBRTAyL21DUWhnYWRWU2lqbmpCcm9wenZpZVVVc3lf
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbUNRaGdhZFZTaWpuakJyb3B6dmllVVVzeV9RLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF
REMxL0ZEMTEyQjc2NUQ2OTExRjA5MTFENzIwQ0M0RjlBRTAyL21DUWhnYWRWU2lq
bmpCcm9wenZpZVVVc3lfUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHeIA8yFPc/EbV1jpiyJQgm8wlr6nMtqRdDEN8RpMW8PzAkLQ5eDGZ7M
n0ACrB7wSNE+an/lyYd299VQ2gWcKHbcONey0556kW9Akdlqn5tzmOWDRbcYOND6
yi4HXanRSbFcuxHcZ3Lx0nytQEZbWmzgq5AS5QTw2qIlvCSsPrLCMyNsPkKu0/DA
jsw2L9KQ1a9kGLmmwNH6KQKTZZTTPv0BZYtqgqqFhddrUkhShCurDSvux3ZOf+MR
+wqaSS3Dq61lR6qIo9u38Uz5X9kHlVOSb7gc9ohV/MNFpS6kBpCoFLlDOMp5VOaj
YZKLsAQsmzyZngivOTHdYsGgzQOGBoI=
-----END CERTIFICATE-----
Generated at Sat Dec 20 19:07:01 2025 by rpki-client