This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
File: fqwMLLJ6MKE47kdbB_6X6Okz_co.mft (raw, json)
Hash identifier: GZMCQbr/r6g5AZMim7Ptp3DbUcn2Km6C1OAsCaouTrk=
Subject key identifier: 83:18:4F:97:E8:21:90:8D:04:99:4E:13:67:46:AE:CD:F5:02:09:F7
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial: 2937
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
Manifest number: 28B6
Signing time: Thu 18 Dec 2025 15:32:52 +0000
Manifest this update: Thu 18 Dec 2025 15:32:52 +0000
Manifest next update: Thu 25 Dec 2025 15:32:52 +0000
Files and hashes: 1: fqwMLLJ6MKE47kdbB_6X6Okz_co.crl (hash: y7aPL4jJh3VefCQE7ZO0+IV3vDgyngo86UObFPzfX7U=)
2: BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa (hash: AGeEiq7USDpmKzktvODn9IUhC/OYAfI+o7JYSyD+iMw=)
3: F9B7A3BEB0A911EF8706BE26C4F9AE02.roa (hash: 98UF+myQFYiUCU4A+4AledYcZLsw/iBfENB29yOjRE8=)
4: BF6664C04C1211F0949D8B25C4F9AE02.roa (hash: SYVpgpgSK/nXZhDHIbtXA4pZD4YgNxbTaK5KwHSB1Fo=)
5: BC85BF12986611F099AC837DC4F9AE02.roa (hash: 4T5wpB6getHv74Vs17fIaT93jGRKPndQ2Hva0yiHyxM=)
6: 46E91B3AB31211EFA6BAAF1EC4F9AE02.roa (hash: b6/17IHmfruCEiR6p/M2eZlPFy6KYLkqGlsr9DlXeXk=)
7: 83CECDE2F37711EFB7DF5759C4F9AE02.roa (hash: 0KaVGkZL/0Y7KpNtGIJZTIpqNjGhGiAxIqFaPkT8PBU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 15:32:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10551 (0x2937)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Validity
Not Before: Dec 18 15:32:52 2025 GMT
Not After : Dec 25 15:32:52 2025 GMT
Subject: CN=69441ea4-0ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:11:1e:71:b2:cb:48:46:cd:5f:fa:14:de:86:
f4:44:74:4b:43:62:9c:ac:f2:7f:da:ac:ba:0e:db:
9a:9e:1b:c9:c6:14:bb:c5:03:1d:21:7c:43:6b:a0:
58:58:27:27:27:6b:a4:c9:50:09:52:1d:22:48:c0:
66:fa:65:72:44:a9:af:4b:f1:94:1c:7f:1a:f0:2d:
49:95:86:cc:62:ec:e1:55:f4:1a:5c:fd:d5:3b:d4:
eb:bd:c6:94:22:f2:2a:e4:37:37:c3:5c:6e:ac:a6:
87:68:67:36:18:d6:55:93:2f:f3:35:92:ed:7e:f9:
73:b5:a9:26:43:fb:00:65:eb:28:58:36:31:e9:e3:
71:5c:d6:8d:1a:20:ef:13:3f:78:a6:87:da:d7:12:
39:0a:b3:42:d7:0d:7c:fd:1e:dc:6c:65:14:2d:ed:
6b:e4:99:fc:f8:cb:33:b6:1c:9b:aa:a2:74:e1:df:
11:92:61:91:71:89:ec:af:aa:28:19:d5:64:4f:12:
71:4d:65:26:d9:3c:f4:7a:6f:0d:07:5f:78:3b:22:
f5:09:36:33:19:26:82:8a:81:d6:cc:57:d2:6d:8c:
0d:a7:3f:44:26:7d:f9:e8:56:30:2f:51:39:8c:e3:
23:28:12:98:8e:5f:b9:f9:bc:83:7b:ff:dc:d2:2b:
73:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:18:4F:97:E8:21:90:8D:04:99:4E:13:67:46:AE:CD:F5:02:09:F7
X509v3 Authority Key Identifier:
keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:3d:be:50:72:ce:0e:4e:84:c2:13:3d:33:b4:eb:fe:83:8d:
a3:33:99:bd:01:63:3d:4a:00:62:a2:8e:fa:78:45:45:58:80:
bf:f6:6b:8d:fd:b5:04:ea:0b:87:26:20:a1:aa:58:55:f9:37:
bb:9e:b0:23:a9:14:bb:6e:bd:6b:b1:92:d0:73:6f:12:c6:be:
67:1e:90:8e:3b:d5:06:2c:42:81:49:c4:3f:a0:c9:f2:ae:f7:
99:07:42:27:35:a7:96:96:d8:f7:d9:0a:53:dc:b9:96:89:5d:
35:d4:de:5d:24:a7:ad:1a:40:ce:87:1d:ea:35:f0:ab:15:33:
26:87:10:dc:fb:1d:7a:df:a7:c8:3f:b8:f8:0d:05:79:ce:1e:
48:fa:d1:8f:2b:09:f2:46:6d:89:3a:bd:3c:2e:e0:e0:7d:8b:
bf:fa:69:c3:8d:08:50:0d:af:3f:c1:12:69:51:83:92:f1:e8:
23:2c:89:d3:cd:8c:67:6e:a0:69:32:07:30:b4:05:c1:cb:6c:
b1:40:7b:01:e5:e0:29:04:7c:f9:1e:c3:dc:04:81:9b:9c:ce:
cd:d2:81:55:58:4f:6a:14:a6:39:4a:ca:75:5b:38:ec:91:3e:
7d:02:61:df:0d:f2:1e:5a:88:dd:28:fe:fa:c1:ee:82:7e:1b:
df:ce:83:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:58:08 2025 by rpki-client