This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
File: Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft (raw, json)
Hash identifier: acW4zvFO1vtpz8LJ5lJbO1K1iUmz+3fpqQRUooScJ3w=
Subject key identifier: 0E:CC:79:3C:F3:34:60:F2:EF:53:81:CF:3E:D5:BD:E4:C6:E3:9E:77
Authority key identifier: 42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22
Certificate issuer: /CN=A91DF9B9/serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22
Certificate serial: 01C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
Manifest number: 01C5
Signing time: Sat 27 Dec 2025 02:02:01 +0000
Manifest this update: Sat 27 Dec 2025 02:02:01 +0000
Manifest next update: Sat 03 Jan 2026 02:02:01 +0000
Files and hashes: 1: Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl (hash: w5AL/8H91wP3sO8sC+vjvIWauzFK1SxZMaiKZ/T23sY=)
2: F3484DBA34CE11EEBBA9D046C4F9AE02.roa (hash: quzgA63SpLjcb7xHGEjv3O11w0qxKCOwrlK8xFLHM54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl
rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 02:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF9B9, serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22
Validity
Not Before: Dec 27 02:02:01 2025 GMT
Not After : Jan 3 02:02:01 2026 GMT
Subject: CN=694f3e19-c49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:91:98:35:b0:50:4e:cf:35:cf:78:4f:f1:22:
4f:29:a1:49:e1:22:7e:98:e9:c6:f5:94:d8:8a:d7:
5b:f7:b2:3f:8d:f8:58:d6:d7:a4:64:59:f8:fc:5e:
a0:57:1f:07:96:9d:08:d1:ce:f7:d0:38:1e:b8:fa:
40:25:5a:e0:01:c0:cd:6d:c7:0e:d4:e8:a1:fe:1a:
71:17:97:ec:8b:6d:fe:9d:bf:8d:b6:c1:6d:11:ed:
e0:0e:44:33:7e:f3:93:49:b8:c1:fb:4c:3d:0a:95:
0f:4f:0e:06:df:84:47:6b:ad:9f:a7:21:26:59:da:
2b:80:ff:3a:df:8f:18:1b:89:51:d7:67:58:a6:81:
10:08:19:48:df:46:b6:55:36:6d:ab:5e:6d:1d:7a:
04:40:63:fd:45:d7:82:98:1b:db:e4:c5:53:4e:b6:
a3:bc:01:89:83:64:f0:4a:b7:63:75:21:25:56:35:
44:58:af:a8:63:c8:93:ba:82:72:83:09:24:5b:5c:
74:59:f6:d3:30:e5:2a:10:f1:75:2a:99:d4:75:d4:
a1:c9:a1:8f:e0:fc:e7:86:c7:1b:04:6a:63:3e:90:
14:ed:54:fc:c8:b9:be:e7:98:f7:5d:d5:ef:12:47:
bf:bf:cf:d9:28:bd:b9:1c:c0:33:cf:cd:2c:1b:0f:
4d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CC:79:3C:F3:34:60:F2:EF:53:81:CF:3E:D5:BD:E4:C6:E3:9E:77
X509v3 Authority Key Identifier:
keyid:42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:9e:56:8b:61:6c:c5:fd:24:21:8c:5f:22:12:73:a2:5a:74:
cb:67:04:66:c5:bf:f1:80:0b:87:5e:71:ea:8a:c5:ff:6b:68:
99:21:98:86:62:65:5b:04:49:4d:45:54:3e:b4:da:49:f4:30:
03:e4:35:d7:90:f0:ee:68:36:e2:fa:fb:a7:28:40:b0:fd:19:
ab:a8:c7:ec:9d:11:cd:37:90:ed:e8:f0:15:19:b6:42:02:ee:
d7:45:ab:a6:f6:ff:74:6a:ac:b0:80:86:38:59:80:56:0f:21:
66:44:e7:79:ab:c8:9d:9f:6b:64:86:21:04:de:ed:b4:72:ca:
40:22:7f:64:fe:71:2b:49:45:62:73:e4:a9:29:6d:15:6a:1c:
f0:1f:02:5b:44:97:c7:80:93:eb:32:6c:01:a3:7f:2f:3d:0c:
45:37:4a:80:65:2b:1f:95:d8:44:6d:bb:c9:14:68:6c:0f:05:
94:5a:a0:3c:a7:e4:ec:f6:f4:72:b0:67:91:30:70:cb:f1:20:
93:3b:f0:f4:15:30:4a:34:26:5c:e1:eb:49:19:21:11:31:d0:
c7:38:e9:94:34:97:70:9b:ef:80:b1:25:2e:20:8a:82:64:41:
fb:f6:46:5e:83:33:6a:a8:40:96:bb:3d:d4:ea:23:16:0f:77:
9a:a2:7e:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REY5QjkxMTAvBgNVBAUTKDQyQ0U1MEUxQUM3MzNENUExNjZCNTQyQzNDNDkzMDlG
MzY1NkJGMjIwHhcNMjUxMjI3MDIwMjAxWhcNMjYwMTAzMDIwMjAxWjAYMRYwFAYD
VQQDDA02OTRmM2UxOS1jNDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAupGYNbBQTs81z3hP8SJPKaFJ4SJ+mOnG9ZTYitdb97I/jfhY1tekZFn4/F6g
Vx8Hlp0I0c730DgeuPpAJVrgAcDNbccO1Oih/hpxF5fsi23+nb+NtsFtEe3gDkQz
fvOTSbjB+0w9CpUPTw4G34RHa62fpyEmWdorgP86348YG4lR12dYpoEQCBlI30a2
VTZtq15tHXoEQGP9RdeCmBvb5MVTTrajvAGJg2TwSrdjdSElVjVEWK+oY8iTuoJy
gwkkW1x0WfbTMOUqEPF1KpnUddShyaGP4PznhscbBGpjPpAU7VT8yLm+55j3XdXv
Eke/v8/ZKL25HMAzz80sGw9NewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7MeTzz
NGDy71OBzz7VveTG4553MB8GA1UdIwQYMBaAFELOUOGscz1aFmtULDxJMJ82Vr8i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjlCOS85NTFGOThFQTMy
RDIxMUVFODY5RkRCNzFDNEY5QUUwMi9RczVRNGF4elBWb1dhMVFzUEVrd256Wld2
eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FzNVE0YXh6UFZvV2ExUXNQRWt3bnpaV3Z5SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RjlCOS85NTFGOThFQTMyRDIxMUVFODY5RkRCNzFDNEY5QUUwMi9RczVRNGF4elBW
b1dhMVFzUEVrd256Wld2eUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCQnlaLYWzF/SQhjF8iEnOiWnTLZwRmxb/xgAuHXnHqisX/a2iZIZiG
YmVbBElNRVQ+tNpJ9DAD5DXXkPDuaDbi+vunKECw/RmrqMfsnRHNN5Dt6PAVGbZC
Au7XRaum9v90aqywgIY4WYBWDyFmROd5q8idn2tkhiEE3u20cspAIn9k/nErSUVi
c+SpKW0VahzwHwJbRJfHgJPrMmwBo38vPQxFN0qAZSsfldhEbbvJFGhsDwWUWqA8
p+Ts9vRysGeRMHDL8SCTO/D0FTBKNCZc4etJGSERMdDHOOmUNJdwm++AsSUuIIqC
ZEH79kZegzNqqECWuz3U6iMWD3eaon6Y
-----END CERTIFICATE-----
Generated at Sun Dec 28 07:29:37 2025 by rpki-client