This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
File: QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft (raw, json)
Hash identifier: jJ3RXiseL2qbShhggiKJveQ9CcDAY5Pt7ovVqJPYHqM=
Subject key identifier: 63:CF:41:07:B5:F1:19:AB:D4:28:AA:70:15:0F:19:4A:80:CE:E2:69
Authority key identifier: 41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C
Certificate issuer: /CN=A91EC8C9/serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C
Certificate serial: 0417
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
Manifest number: 0412
Signing time: Thu 18 Dec 2025 23:42:22 +0000
Manifest this update: Thu 18 Dec 2025 23:42:22 +0000
Manifest next update: Thu 25 Dec 2025 23:42:22 +0000
Files and hashes: 1: QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl (hash: fd1HtBg1pMJ8NJkniKNyuHghzfcrTJmqFRgzXswjtFo=)
2: FFDA736894CB11ECA827746DC4F9AE02.roa (hash: pj2LnVj5JMKgQoW/CIO4SmTNgNuQfByzQiOUhiNM/dY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl
rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:42:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1047 (0x417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC8C9, serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C
Validity
Not Before: Dec 18 23:42:22 2025 GMT
Not After : Dec 25 23:42:22 2025 GMT
Subject: CN=6944915e-d52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:fc:00:5f:3a:c2:27:ff:46:c2:f9:11:ce:
c8:2a:e3:a1:09:0f:df:df:16:8a:1b:dd:31:83:58:
ea:a9:93:1e:2c:6b:54:bd:8c:1c:4f:94:90:21:c9:
16:53:06:ff:a1:c0:26:a3:a6:4e:17:80:d0:d8:22:
e3:97:9f:e0:00:ff:0f:70:fd:25:67:9b:13:7a:13:
eb:c5:1e:bc:3f:d1:d4:b7:75:70:39:a6:3b:bf:31:
a1:cc:56:2b:a9:71:85:50:82:d0:ee:a9:97:33:b8:
4c:04:60:82:22:78:15:3f:ec:66:52:42:26:3a:aa:
58:dd:9a:db:f1:c9:cc:be:4b:ba:e6:cf:0a:fa:45:
81:dc:15:2e:16:e1:18:61:84:c1:28:70:a4:54:2e:
b6:a7:4e:8c:2b:60:f3:7a:e4:0a:25:15:bb:0d:77:
82:87:6f:23:ef:13:b6:7f:bc:01:05:2d:a6:66:64:
67:60:d8:bc:e0:85:d9:a0:d9:69:24:fb:43:63:d4:
c9:98:8d:97:68:86:03:f2:c8:d0:26:58:1b:fa:4f:
20:2e:35:df:28:a7:36:ea:9b:92:d2:29:86:3f:83:
c3:28:6a:3d:6c:51:0a:64:3f:3b:01:ea:a1:78:0c:
d2:d6:d0:23:5a:34:11:25:d0:d2:c5:d2:a3:98:83:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CF:41:07:B5:F1:19:AB:D4:28:AA:70:15:0F:19:4A:80:CE:E2:69
X509v3 Authority Key Identifier:
keyid:41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:0b:7e:da:77:1f:ca:3c:8d:7f:e1:08:e0:9a:e4:0b:e2:54:
34:29:c0:70:b7:e7:86:39:3f:2e:00:03:26:d6:13:02:66:33:
d4:a3:ae:ec:72:8e:da:ce:e4:04:aa:38:13:ee:24:7f:36:72:
92:a9:30:c1:01:2a:fd:57:ae:58:6f:7e:9a:94:4a:3e:f7:f2:
30:a7:ae:da:cb:0f:78:40:f9:98:fe:0f:32:84:4d:83:94:05:
fd:57:2c:6e:8b:86:60:b9:40:7c:af:c5:5a:de:b0:c0:66:3b:
fe:9f:19:9e:3f:d0:96:3d:2b:74:41:f6:45:68:84:7a:33:8f:
89:dc:fc:b1:7f:28:7e:1b:e8:4f:2f:85:e3:89:1b:52:09:fc:
ca:62:74:2f:da:4b:d5:bb:6a:d6:78:02:ff:58:ff:90:2a:41:
5b:ea:64:34:4b:2d:60:a0:22:fa:f3:7f:47:70:5a:66:9a:15:
60:98:94:39:91:d0:8e:15:6c:4a:e9:4a:29:55:6c:27:69:8f:
4f:4f:ba:aa:20:cb:81:32:94:8c:89:a9:d0:0c:4a:e6:07:98:
e8:a8:cd:9e:54:5b:f9:03:60:da:0e:cb:e7:7f:e0:ca:21:33:
8e:bf:54:fc:f3:c5:82:fb:57:22:6e:63:60:b2:27:00:b0:fb:
1e:af:a9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:06:12 2025 by rpki-client