This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
File: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft (raw, json)
Hash identifier: 7rKUw8CRTS83M6EjSMxsGHl01F7ELIbUPbpZHekhUMo=
Subject key identifier: 25:56:61:EA:30:A6:A1:A8:BD:6E:B0:FC:8E:19:37:29:E1:E7:00:40
Authority key identifier: AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B
Certificate issuer: /CN=A91E4EF7/serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B
Certificate serial: 1B8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
Manifest number: 1B82
Signing time: Sat 20 Dec 2025 16:04:03 +0000
Manifest this update: Sat 20 Dec 2025 16:04:03 +0000
Manifest next update: Sat 27 Dec 2025 16:04:03 +0000
Files and hashes: 1: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl (hash: cVsgHGQAiuzAzTAC7r0FVajMpd9esENxMnUMkmTtwMg=)
2: E24736EC9D9011EC89314083C4F9AE02.roa (hash: PfaBGPnkUgsWEXBDryvUqr89XZWDUPWxeZUL3rzB4xI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl
rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 16:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7054 (0x1b8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4EF7, serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B
Validity
Not Before: Dec 20 16:04:03 2025 GMT
Not After : Dec 27 16:04:03 2025 GMT
Subject: CN=6946c8f3-69de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:43:81:75:ec:d4:76:40:1d:d7:8c:c5:6f:
80:97:71:41:d7:88:85:81:73:45:44:28:b8:4b:d3:
e8:ab:98:33:86:ce:96:f7:96:10:99:44:48:f9:14:
da:cb:85:7c:32:8d:2f:16:a3:aa:d4:53:e3:af:a1:
3a:27:6a:1f:b0:b2:6b:be:9d:96:88:98:95:4a:cb:
bd:40:cb:6d:c5:eb:f6:dc:d7:a7:34:49:35:b5:c3:
93:05:41:84:a1:39:bf:a7:d2:5c:da:e6:e5:73:8b:
8c:d7:20:08:7b:b1:e0:70:37:9a:13:d8:86:59:9d:
29:b2:9b:1d:9d:34:13:83:64:89:7d:ba:b6:f6:23:
3c:c1:09:c3:8d:78:b6:54:8c:fa:70:bd:6c:6e:08:
60:39:8a:27:cc:b6:2b:e5:45:fc:ce:bc:e4:a1:6a:
b7:8e:f0:d4:6a:cb:14:6f:05:85:25:27:ba:ff:1b:
54:2c:06:1c:d1:67:ba:11:62:64:57:bf:3b:f9:91:
27:3d:cc:f8:d9:31:0e:3b:fd:ed:28:c4:9b:9e:bb:
3a:93:ce:9f:05:f6:7e:70:d2:0e:a1:60:9c:e9:79:
37:fb:65:54:ed:f8:96:1d:ee:45:ee:39:6e:95:97:
97:b4:c4:12:59:6b:42:46:1b:d8:b0:04:dd:0d:72:
df:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:56:61:EA:30:A6:A1:A8:BD:6E:B0:FC:8E:19:37:29:E1:E7:00:40
X509v3 Authority Key Identifier:
keyid:AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2e:1f:01:8a:b1:ae:40:af:47:4d:91:55:88:8f:22:aa:00:
ff:7e:25:a6:db:cc:ec:6e:f3:23:30:83:3e:68:5f:f7:3f:6a:
d5:2d:21:88:4f:4a:a7:b7:82:df:34:7f:5e:89:49:64:77:d0:
35:06:7a:44:58:72:6c:89:68:05:96:a7:7a:2a:d3:1a:90:e9:
93:d7:b6:a7:82:63:31:72:32:1f:d5:37:59:a5:50:20:ac:4d:
f7:59:31:9b:bf:b9:c2:05:75:be:0a:26:2f:0a:22:d5:37:13:
4e:64:24:c5:de:65:c3:a0:e1:1e:09:78:07:5c:c8:f0:9d:79:
0f:4a:47:9f:ce:0d:64:1e:3f:79:42:15:a1:45:dc:cf:ee:de:
b9:b2:e3:e3:3b:45:ba:7f:ab:cf:8c:f4:81:76:41:1e:53:f3:
bd:19:ea:98:23:80:f1:4f:07:59:32:30:a7:5c:da:be:d1:90:
5a:75:8a:81:67:c6:4a:a7:61:54:e5:45:72:f9:85:10:70:e6:
1e:cc:9c:22:60:db:62:d3:b7:fd:d1:96:62:2b:3a:06:08:1e:
3d:f6:d1:77:b9:d8:5b:50:db:1e:9f:df:e8:41:f2:06:05:05:
19:49:25:6f:79:53:50:7a:aa:f5:7b:65:40:1c:fc:2a:ed:a1:
8b:83:62:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:36:22 2025 by rpki-client