This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
File: qpoNy1ExOS1xlqhEGKioRkVTH5c.mft (raw, json)
Hash identifier: a16F4m+yBYb9A5g6SDGq6jD67V8Q26NYHI6mq7CmF2g=
Subject key identifier: D8:BA:56:BB:09:18:6D:45:3C:0B:08:24:2C:12:9B:4F:9B:0A:BA:80
Authority key identifier: AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97
Certificate issuer: /CN=A91EF66D/serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97
Certificate serial: 019F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
Manifest number: 0199
Signing time: Thu 25 Dec 2025 02:33:35 +0000
Manifest this update: Thu 25 Dec 2025 02:33:34 +0000
Manifest next update: Thu 01 Jan 2026 02:33:34 +0000
Files and hashes: 1: qpoNy1ExOS1xlqhEGKioRkVTH5c.crl (hash: mkZf3BpbJpSyr/jTKRM1LDvQ8oA+o4m+S38xVCunJmM=)
2: C2D66F8271A911EEAEEE351CC4F9AE02.roa (hash: 182Ac4fyaiVrniCYLGV61RP5qpWrfJewUwg3lX5zumg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl
rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Jan 2026 02:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415 (0x19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF66D, serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97
Validity
Not Before: Dec 25 02:33:34 2025 GMT
Not After : Jan 1 02:33:34 2026 GMT
Subject: CN=694ca27e-0039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c4:90:30:6b:3e:0e:b2:7b:41:fa:85:5c:aa:
23:a2:ac:8b:73:84:be:21:4d:87:22:a7:20:96:7c:
5f:d9:ed:cd:31:0b:98:c8:db:c0:51:9c:be:a7:ec:
6c:7f:51:a3:ee:1e:79:9b:b0:66:34:2a:9c:e0:b7:
7b:53:c8:e3:b2:29:c9:f5:0f:c9:d4:e3:fe:74:38:
ab:43:f5:85:33:85:33:76:94:2d:09:3f:1b:17:12:
23:32:d3:ea:20:0a:d6:8a:5b:c5:25:e0:57:d5:ff:
b4:ff:ac:8a:8f:b1:87:9c:b3:c9:b9:b5:15:b2:08:
ef:4d:f0:1e:37:aa:7a:40:b9:8f:c5:3c:97:9c:06:
c3:69:3c:1e:b3:8d:45:b5:a0:fa:06:7f:42:a5:2e:
40:a4:34:ac:e8:7b:42:0d:1b:ce:95:73:ba:6a:cb:
76:ed:f9:ce:b7:e3:86:e7:6b:d4:6c:75:5b:9d:09:
15:8e:d6:07:dc:54:a5:d7:36:dd:f2:1c:03:86:06:
b1:b4:f7:80:b8:0b:cd:99:17:86:89:62:36:a5:e9:
0a:76:33:07:6e:58:c4:dd:0e:ad:6b:82:f7:ea:d4:
64:45:8f:2e:03:c2:6e:39:bd:d2:21:4e:26:14:c7:
f8:26:98:f1:ef:17:5c:b7:19:10:00:32:f3:79:f6:
f7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BA:56:BB:09:18:6D:45:3C:0B:08:24:2C:12:9B:4F:9B:0A:BA:80
X509v3 Authority Key Identifier:
keyid:AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:6f:c9:f3:35:9b:68:86:ea:db:56:08:e4:6d:20:ce:7b:f9:
b3:c2:03:86:89:28:a4:a8:06:16:61:d4:3f:b1:0e:70:41:a2:
92:8f:05:bc:45:51:94:7a:66:bf:45:53:45:68:89:aa:7e:0d:
71:83:93:d6:82:7c:03:ab:ae:6a:3b:c1:47:dc:f0:bc:1d:b9:
72:78:65:c3:5c:95:78:f4:d4:fb:d5:b7:29:44:1b:76:3e:1c:
c7:e4:9d:e3:07:96:62:c7:2d:74:77:fc:20:d2:18:41:d8:20:
09:af:3f:4a:e2:07:d7:fe:af:94:68:f8:1d:cf:99:bc:6b:5b:
cd:c3:7b:e6:52:15:cb:b9:91:0f:11:b3:a1:92:70:d1:0f:d3:
85:9b:e6:87:fb:fb:65:63:6d:11:37:70:10:f0:42:e1:29:ec:
0d:34:89:a4:4e:82:11:08:3b:3f:75:ce:af:01:9d:d8:a8:84:
1c:c5:98:cf:49:32:0a:7e:b3:81:f7:e8:6e:18:ff:a1:62:55:
fe:26:6c:f2:59:c1:8c:4b:94:eb:6c:4d:11:b4:3d:61:fc:c3:
74:b0:0c:99:04:af:24:3f:6f:f7:61:fd:cc:85:5c:e0:e0:99:
7e:61:e9:68:db:dc:ec:f0:9b:ea:23:dc:9c:24:b4:67:90:85:
c0:97:d8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 04:08:20 2025 by rpki-client