This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
File: QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft (raw, json)
Hash identifier: UFhewkjdbE4DnUctfBPt8RsTp7z38+tr+F+d1AUhzfU=
Subject key identifier: 56:25:EB:3E:04:C2:20:F5:C9:03:E6:FE:1C:29:80:21:AC:03:FD:47
Authority key identifier: 41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C
Certificate issuer: /CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C
Certificate serial: 01F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
Manifest number: 01EE
Signing time: Fri 05 Dec 2025 00:53:19 +0000
Manifest this update: Fri 05 Dec 2025 00:53:19 +0000
Manifest next update: Fri 12 Dec 2025 00:53:19 +0000
Files and hashes: 1: QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl (hash: QuiqZaf1/WUDwctmOwOp3YW+gOTrglVkGrYafIShHsI=)
2: 5BE1A39CDFF411EDAF183A6BC4F9AE02.roa (hash: kSko0IDUfwmI+eYoz/fG8AvnBwnpICm84IEH409J6Ko=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl
rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:53:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111C49, serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C
Validity
Not Before: Dec 5 00:53:19 2025 GMT
Not After : Dec 12 00:53:19 2025 GMT
Subject: CN=69322cff-e663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:3e:6f:cf:98:0e:91:d7:50:71:09:97:cf:
56:f7:66:ba:db:7e:3d:4f:d8:ec:95:75:e7:f8:9c:
29:94:ae:a1:1f:0a:d9:64:ed:d1:56:21:35:02:a8:
d6:ab:f5:09:77:59:53:19:cb:13:03:29:02:ba:84:
83:21:89:f3:ea:24:49:77:4a:3b:e8:c7:0a:fc:bf:
41:ab:fa:b7:1a:60:ba:b8:42:de:ff:8a:ed:c1:8d:
56:9d:24:1e:ec:8e:86:90:95:b8:5e:b2:31:51:83:
f4:ba:ce:1a:0f:5a:ea:22:df:28:34:0d:7d:0d:95:
c6:35:21:a5:18:c5:76:99:bb:7d:7c:68:92:fb:1c:
a6:fc:89:eb:72:ba:0d:d9:59:2a:d4:1b:5c:de:9b:
24:3a:39:ff:36:8b:f1:7e:42:13:67:4a:19:3f:fe:
98:ff:46:7d:17:4f:3b:c2:5d:bb:53:7e:c3:bc:9c:
19:16:56:85:d1:50:06:9f:bb:33:b5:00:d2:78:f1:
7d:69:76:28:b2:98:c9:45:96:d2:8d:e7:f2:28:51:
a4:4a:bb:81:e4:20:58:f1:f2:40:9d:9f:5b:71:9a:
70:2c:cb:5d:92:01:01:42:aa:16:1c:74:00:19:6b:
7c:c7:fa:72:55:15:6f:d3:32:7a:55:6f:3f:31:c3:
85:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:25:EB:3E:04:C2:20:F5:C9:03:E6:FE:1C:29:80:21:AC:03:FD:47
X509v3 Authority Key Identifier:
keyid:41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:80:fd:4a:1a:c8:14:f2:16:e1:7a:47:78:66:57:38:e1:8d:
5f:40:bb:34:45:d4:2e:3c:35:45:72:b3:3d:2d:60:ee:9e:a6:
94:cb:e6:15:e6:be:1e:b9:aa:71:40:e3:7b:5d:fb:2c:c3:92:
ae:bb:fd:30:a5:5c:a6:f0:3a:89:2c:99:9a:4f:d6:58:be:b2:
c0:06:5b:c0:3d:7a:2d:09:d9:31:fb:2b:d3:de:ed:ee:49:a8:
7d:e5:8f:ef:47:4f:27:5a:5d:33:fe:d3:ec:87:dc:82:9b:e4:
b3:cb:a3:9b:9b:49:38:a9:41:f1:d8:9c:4a:a8:44:98:0f:96:
4d:28:80:1e:e8:a7:79:36:b6:46:70:56:4e:f4:1d:a3:7e:6e:
52:74:81:15:c3:2a:93:1a:38:ee:c0:ea:ed:57:9f:c3:ec:a7:
b4:be:58:0c:06:8c:3d:78:d3:ce:a0:df:ce:33:10:b4:7b:c2:
2a:11:4d:63:2c:44:fa:a6:d3:1b:78:08:1f:71:16:c8:b3:1a:
7d:b2:84:be:e3:51:40:d8:5a:d3:f5:ba:95:8e:ed:42:cd:6a:
78:d4:77:9c:64:80:0f:26:6b:59:72:20:98:b9:10:23:e1:6d:
01:db:a5:2d:14:bc:ad:d5:3d:96:03:a5:fa:e1:df:3f:17:0e:
9e:10:72:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:21:21 2025 by rpki-client