This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
File: QnVRUgCwOWcq-g6Fh31OP-cNidc.mft (raw, json)
Hash identifier: 1QIISpzu4W+K8wO1D8Q6Pga/Ymvm/FQFOweMxu99iFQ=
Subject key identifier: 03:76:F6:A9:C2:F5:0F:DA:65:CB:49:66:09:E0:F5:13:BE:A4:F5:B4
Authority key identifier: 42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7
Certificate issuer: /CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
Certificate serial: 0783
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
Manifest number: 076B
Signing time: Thu 04 Dec 2025 20:36:45 +0000
Manifest this update: Thu 04 Dec 2025 20:36:45 +0000
Manifest next update: Thu 11 Dec 2025 20:36:45 +0000
Files and hashes: 1: QnVRUgCwOWcq-g6Fh31OP-cNidc.crl (hash: pbg5FGS0oZNHSiJYf3uJruxlMaZT78FosYwW3vLj10c=)
2: E91BDAD0D6DE11ED88F30263C4F9AE02.roa (hash: ZXePA84JDljtbAEZn3/lxD4z+5C1w39HTFWRfaNSPt4=)
3: 683CDAD0B4C411EE8F1E5D85C4F9AE02.roa (hash: r4yk1oLOO3dNlgYTUiXUyb073QjawtmJqJmMeRzkclU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl
rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:36:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1923 (0x783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127733, serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
Validity
Not Before: Dec 4 20:36:45 2025 GMT
Not After : Dec 11 20:36:45 2025 GMT
Subject: CN=6931f0dd-7664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ab:5a:17:7a:3d:83:86:4f:a2:68:78:48:09:
20:83:2e:be:bb:6a:d8:8a:2c:1f:8b:f3:e3:6c:0a:
3c:85:02:0c:39:bf:ce:0b:72:35:f5:cc:fc:5b:67:
4b:58:db:58:ac:8c:b0:34:4f:d5:38:bb:36:4a:0e:
f1:d9:72:af:29:21:b0:ae:84:e2:e5:2f:f0:54:0c:
77:cf:a9:2c:1c:a3:e7:d9:f2:e8:24:95:4c:17:af:
62:96:74:46:a7:8e:d9:d9:db:14:74:de:59:40:e6:
7d:bb:25:12:e4:36:65:68:7a:09:48:96:d1:6a:66:
4f:0c:01:1f:c4:fc:b9:20:72:f3:02:41:be:77:1e:
01:69:eb:b9:a1:22:f1:62:66:67:36:7c:01:12:d1:
55:c9:a6:e9:89:83:e4:fd:d7:0d:51:35:7b:5c:83:
4f:a6:74:af:1b:98:b1:50:58:60:03:12:7f:cc:12:
eb:cc:a4:e7:bc:ea:aa:b3:67:9d:99:cc:df:c0:80:
4c:da:1b:48:c7:ce:00:f3:de:0f:47:e9:db:07:12:
f6:a7:76:ab:3d:ed:df:aa:de:fa:4a:c7:36:61:7b:
fe:e2:c3:99:34:dd:3e:a0:49:1e:77:e9:03:55:b0:
38:68:ac:26:e9:81:7d:3d:f4:08:5f:69:05:5a:a0:
ca:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:76:F6:A9:C2:F5:0F:DA:65:CB:49:66:09:E0:F5:13:BE:A4:F5:B4
X509v3 Authority Key Identifier:
keyid:42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:63:03:3a:b4:a6:9d:94:f0:36:92:37:5d:38:a9:8e:9f:11:
64:81:fb:ad:0a:51:93:a2:8b:76:64:f6:8c:9c:2c:69:ee:ae:
f3:93:37:7a:14:7c:f9:8f:56:9f:14:79:71:73:b2:10:bf:47:
7b:e4:83:b2:ef:ad:1f:d2:bd:ae:19:cf:99:98:94:8f:3a:73:
ad:7d:f1:e2:a3:1c:93:4f:d6:dd:3c:c9:50:ed:15:fe:1f:45:
39:69:9c:4e:ec:0e:7c:23:3b:98:91:8c:77:4b:79:e2:6b:2f:
3b:da:d0:e0:4d:a6:8c:53:30:9b:ef:ed:be:e8:80:62:80:8e:
b3:54:77:bd:b4:f0:b4:4f:91:f6:8b:e2:e3:19:f8:81:ab:c2:
48:e9:c5:a4:f6:a2:12:14:78:5f:51:b5:4c:29:ca:f2:77:0b:
70:42:f7:fc:61:34:eb:77:62:a8:a7:96:6d:23:7e:59:b4:8f:
e0:20:db:42:4f:bf:2f:e6:2b:0c:52:70:24:b3:9e:ed:92:cf:
18:6f:38:d1:10:78:47:bc:cb:d7:ce:47:89:77:eb:3f:bb:51:
67:6d:2c:5b:75:da:31:c4:88:ce:fc:f2:be:7c:8b:82:be:c7:
fb:f8:a6:47:fb:01:85:9c:22:2b:92:37:18:0d:89:ee:26:f9:
de:3c:cd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:22:30 2025 by rpki-client