This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
File: Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft (raw, json)
Hash identifier: oYvVic8HiIFbtvmwHHkUHbj13FmtJ4sx7bMIA4qhYdY=
Subject key identifier: 3C:4E:AE:59:CA:AA:F5:EE:EB:B4:53:7A:B9:8C:B1:39:2F:5D:68:F4
Authority key identifier: 42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0
Certificate issuer: /CN=A9113B62/serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0
Certificate serial: AF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
Manifest number: AE
Signing time: Fri 05 Dec 2025 04:06:23 +0000
Manifest this update: Fri 05 Dec 2025 04:06:23 +0000
Manifest next update: Fri 12 Dec 2025 04:06:23 +0000
Files and hashes: 1: Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl (hash: mWULJGHo8W0cq/zvJJ7Kahzp99qD0XcO2lu0JJ/jVLE=)
2: 01238706C86211EFBDCCC22AC4F9AE02.roa (hash: sqsd36HvdOtJGpobxnch2UziqlMaZAChQP7HevqvsWs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl
rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175 (0xaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113B62, serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0
Validity
Not Before: Dec 5 04:06:23 2025 GMT
Not After : Dec 12 04:06:23 2025 GMT
Subject: CN=69325a3f-10d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:50:5a:4b:eb:29:4d:be:25:a1:42:28:2a:
95:8e:15:63:4a:80:50:bf:6f:78:50:3d:c0:c8:53:
4b:06:a2:9f:cb:52:4b:73:ad:06:3c:70:ca:5b:0c:
7b:b7:ce:7b:31:65:f5:e5:06:b2:a1:6e:51:19:36:
df:6a:60:47:cf:b1:39:e1:1a:53:cb:f5:44:a1:1a:
32:9a:63:c7:09:78:22:4e:cb:2c:16:bc:5e:27:42:
2c:1a:08:1f:93:07:40:f0:e5:6b:05:8d:c3:42:e7:
69:00:0d:96:b1:90:a0:8c:19:cd:3c:03:17:10:55:
4d:0b:ad:8a:09:cd:5c:55:83:14:35:fd:cf:3d:a6:
bc:42:30:46:1a:74:4e:35:85:a0:c8:a2:6d:c0:67:
16:c3:7b:c8:42:55:8e:0d:23:3f:49:d4:44:cc:e5:
0c:7d:35:2a:64:b0:6b:6c:72:d7:0c:7c:5d:b0:de:
0a:b4:2f:03:ec:ba:f3:5c:32:2f:3e:3a:72:6e:7d:
a4:f5:0f:c0:d7:3c:3f:be:a7:46:9e:15:1b:e5:53:
27:5d:d2:e0:11:0b:ad:46:af:58:71:b0:e8:67:82:
31:f2:91:61:02:8b:6a:c5:ce:a9:64:38:1b:6c:69:
a6:56:41:a3:10:fe:ef:0a:11:f7:39:fb:70:b1:1f:
ca:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4E:AE:59:CA:AA:F5:EE:EB:B4:53:7A:B9:8C:B1:39:2F:5D:68:F4
X509v3 Authority Key Identifier:
keyid:42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5f:a9:4d:96:89:b4:36:47:b0:8a:4f:35:19:d7:74:96:d6:
e7:e3:34:ff:f2:71:f5:75:f7:86:0a:fb:9e:7a:29:2d:c0:1f:
8e:55:47:9f:47:3e:10:1a:cb:cd:17:2f:26:ab:4d:40:35:8c:
65:c1:ee:4d:14:0e:61:3a:32:35:b4:ab:ad:73:ca:58:8e:9c:
98:cf:cc:d0:3f:a1:6e:96:d4:9b:4f:4e:53:d3:97:a0:c8:d5:
8e:cb:9a:fe:5f:c9:6b:c3:eb:08:88:d1:e5:e2:30:3d:f7:61:
2b:71:ad:ea:41:be:b4:e3:2a:e3:53:dc:ee:df:49:79:34:e5:
bb:17:5d:2e:76:c6:81:fa:95:8a:3b:c6:0b:b7:fc:32:00:69:
38:56:b0:c8:9f:4c:9d:95:df:ee:a0:a3:8a:18:3f:aa:13:e5:
33:32:92:9a:7f:98:e7:cf:64:ff:c7:40:be:6a:89:b7:1a:84:
c1:2c:28:3c:21:3a:e0:5e:ec:7a:5b:59:e2:ad:db:ab:3e:0a:
f9:3c:9c:0a:cd:57:54:b9:15:04:f4:37:7b:3a:94:5f:da:c6:
77:c3:2c:c6:6b:bc:e6:05:d0:46:5a:3d:d3:24:50:bc:62:b8:
5f:ec:9d:bb:24:56:a2:28:e5:59:a5:95:94:3f:f1:87:b5:f5:
0a:04:ca:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:03:14 2025 by rpki-client