This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
File: AF-qrSrjDndSVq-7uyi2JJFyq-M.mft (raw, json)
Hash identifier: G0UK+yHdiB/kzOSXSafhhnujU8oFNxYHTUj2iUIfX0I=
Subject key identifier: 52:C3:5B:C5:4F:07:A8:A3:37:7D:91:A6:DC:D1:48:A6:6A:94:5D:79
Authority key identifier: 00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3
Certificate issuer: /CN=A9110AAB/serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3
Certificate serial: 085E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
Manifest number: 0856
Signing time: Thu 04 Dec 2025 19:48:14 +0000
Manifest this update: Thu 04 Dec 2025 19:48:14 +0000
Manifest next update: Thu 11 Dec 2025 19:48:14 +0000
Files and hashes: 1: AF-qrSrjDndSVq-7uyi2JJFyq-M.crl (hash: L8iHu+rES915UDCrQsJfWGx5rU14nxeAf34FB0jz0sk=)
2: F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa (hash: UfZS2K3maG4LNqHTiPHXDFG7crLVwGTXsGf24GudMzI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl
rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2142 (0x85e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110AAB, serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3
Validity
Not Before: Dec 4 19:48:14 2025 GMT
Not After : Dec 11 19:48:14 2025 GMT
Subject: CN=6931e57e-4dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:07:31:32:a5:1f:99:94:27:ac:83:68:b2:ae:
29:84:11:35:0d:30:d9:b3:75:0c:c0:f1:c8:c4:0b:
8b:73:f0:cf:5c:63:2b:61:f0:f0:b2:e9:02:d0:10:
94:bb:6b:fe:57:0b:fa:f0:38:82:0f:d9:01:3c:23:
85:bf:f6:5c:0f:db:12:9f:d1:94:d7:30:fe:e8:9a:
2a:78:bd:af:6e:bd:62:83:4a:3b:a5:0e:a4:83:d6:
3b:ff:f5:40:6f:89:ba:80:93:7d:2e:03:c7:3e:12:
11:d0:36:c6:02:56:dc:c7:b3:57:91:61:c6:2e:b0:
a7:e5:9c:03:98:ea:ea:31:f5:98:61:b0:9c:2c:9f:
a9:f1:be:d6:23:a4:59:68:ba:d5:21:87:2f:e0:08:
a4:c5:14:f3:8a:8c:65:f3:31:f8:a8:f5:ce:5e:6e:
ff:27:40:2f:0e:b8:88:70:24:7f:ac:8c:f2:c2:65:
b5:01:eb:79:cb:a2:b7:d6:fe:85:4a:7d:6d:6e:fa:
02:5e:eb:8b:a8:a7:08:cc:be:af:25:07:6c:06:54:
1b:9f:47:23:54:1c:67:cd:d1:44:61:d0:40:fb:64:
37:f5:67:67:12:6d:fc:5e:ea:5b:61:fd:9d:18:3d:
78:fd:95:85:c8:ca:85:2b:59:a1:42:ca:a4:cb:ce:
02:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C3:5B:C5:4F:07:A8:A3:37:7D:91:A6:DC:D1:48:A6:6A:94:5D:79
X509v3 Authority Key Identifier:
keyid:00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:77:8e:84:aa:8c:c1:03:d6:b6:f5:c8:48:e8:1b:13:9a:93:
b7:20:65:6c:31:18:e0:32:e3:fa:ed:08:9a:d6:ba:ff:2b:0c:
ff:a8:64:f4:21:c1:3c:56:13:cd:b2:8a:fb:4d:ea:d1:ee:ec:
b2:92:f2:19:8e:6a:12:20:a3:2d:6a:f5:c4:f5:95:dd:83:bf:
88:7d:d7:a1:d9:aa:6b:8d:dd:bd:ef:f4:f4:1b:b3:4b:3e:47:
88:7f:2a:87:9e:53:b7:3e:e0:6b:1b:f1:34:e5:ed:bc:4f:df:
d2:2c:1d:5f:46:7c:39:bd:26:6c:de:9f:eb:da:ca:5b:d8:bb:
ed:ce:db:60:63:b8:d8:eb:02:7c:e3:ef:97:dc:90:a5:49:7b:
ad:19:eb:1b:1f:ff:77:09:88:ba:65:47:6a:c3:47:7e:b3:2d:
94:3c:b2:04:c0:b0:22:b7:20:bb:37:20:38:8b:cf:10:40:42:
f7:b1:7b:fe:2e:ad:93:f6:55:ab:df:ef:7c:4d:67:1a:c3:d4:
d6:69:48:8b:bf:46:d4:5e:24:58:9d:92:34:ef:74:a8:93:5c:
6c:4b:40:3b:04:39:b3:72:db:cd:b0:0f:d4:bc:de:89:7e:18:
b9:6c:b6:4d:ab:59:aa:4d:d8:6e:20:de:3f:5d:5f:87:3b:bf:
1a:e3:49:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:24:58 2025 by rpki-client