This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft
File: q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft (raw, json)
Hash identifier: 9XWKgY4BShBRF0h0MhYIRsHF+7ZHxmldbUEelx2kp0Y=
Subject key identifier: 78:C8:2D:A0:95:6C:4D:14:12:2C:C1:F8:B3:23:D6:7E:8E:8A:3E:7B
Authority key identifier: AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0
Certificate issuer: /CN=A912B6D9/serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0
Certificate serial: 77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft
Manifest number: 75
Signing time: Fri 05 Dec 2025 04:44:25 +0000
Manifest this update: Fri 05 Dec 2025 04:44:24 +0000
Manifest next update: Fri 12 Dec 2025 04:44:24 +0000
Files and hashes: 1: q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl (hash: qkvK8JtnY74j33igsLaMhrUtcsQWvZHepm4kLVX6DHw=)
2: 330409804CCE11F08ADD6485C4F9AE02.roa (hash: +dV37J5QvSU/dK4QNejnv7Wrgq2vQb6M7wMOUqieLws=)
3: 0E4F46F2532E11F0B87D127CC4F9AE02.roa (hash: yqs+JmvVfah6ccKpTMqR5g/XTPvwlMJtSP63XH6g7ak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl
rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B6D9, serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0
Validity
Not Before: Dec 5 04:44:24 2025 GMT
Not After : Dec 12 04:44:24 2025 GMT
Subject: CN=69326328-5e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d0:cf:95:a3:c7:6a:39:52:4d:9c:61:23:11:
fd:af:5a:61:89:cc:ea:1f:90:c3:49:22:f5:0c:55:
ec:3b:e2:c7:10:19:7c:88:78:ea:ab:2f:c7:eb:e7:
ae:b2:21:61:03:d8:ab:bc:8d:0f:79:13:14:51:c8:
42:f3:41:67:c8:2f:d6:fe:08:0b:ad:80:af:8f:3f:
16:9f:7d:a5:50:59:86:12:16:8f:c3:d6:23:c2:23:
2c:f8:c8:dd:e1:8d:dc:07:dc:da:c6:4c:70:5c:fd:
de:0e:01:fc:30:79:4f:53:da:44:f6:e5:5d:7b:56:
92:bd:e3:c2:61:fe:08:9c:80:ac:8b:39:64:0d:5f:
7e:c3:68:fd:69:6d:96:ce:2e:c3:24:6c:a6:31:05:
bb:dc:b4:79:d1:80:9a:d9:a0:dd:6e:15:e9:09:44:
67:ff:ed:83:58:7a:82:7a:01:4b:78:0b:75:ed:df:
b8:ec:d9:f1:a3:ca:01:2b:cc:11:65:14:69:a5:8a:
61:76:86:a5:20:8f:c9:d5:eb:c2:6e:dc:9d:a0:a3:
3f:e4:e9:6a:dd:a6:24:04:88:b4:e9:52:d1:34:68:
8e:29:81:0c:06:9f:50:67:af:09:a8:a1:1c:08:0f:
e8:b1:89:e2:42:44:13:e2:9f:46:d7:81:2f:bb:4d:
9e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C8:2D:A0:95:6C:4D:14:12:2C:C1:F8:B3:23:D6:7E:8E:8A:3E:7B
X509v3 Authority Key Identifier:
keyid:AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:12:52:10:34:90:48:63:00:c1:ce:2a:8b:50:2a:cc:1c:04:
25:54:10:a1:b9:53:84:90:af:8b:8b:64:a5:b8:d6:7f:4b:fe:
06:6e:fe:01:11:6e:d6:48:dd:36:26:4b:bd:47:eb:dd:04:2f:
17:23:14:eb:ee:cd:d0:25:92:56:d6:92:7f:cb:48:a4:5a:60:
ee:36:4a:4b:c5:62:bf:c2:3a:bb:bd:33:16:b3:f8:4a:5d:07:
41:80:b7:50:ea:ff:4d:c1:ba:75:e2:2c:e8:1e:3a:c6:82:c0:
54:d0:c5:2f:de:17:09:8b:95:2c:52:a0:61:66:be:32:dd:69:
c3:54:4d:75:98:73:c7:17:02:4a:47:ec:e4:82:ee:79:74:f8:
d6:94:ba:6d:ec:75:10:74:f0:f5:2b:c1:74:79:08:1a:87:04:
a3:93:e0:a7:14:7d:b9:39:d6:87:c8:4e:39:40:75:04:b6:8e:
27:37:ec:f4:ae:1c:01:34:ff:19:5d:72:53:34:63:76:d1:10:
70:ea:1d:61:c4:f8:3b:2c:a8:b5:90:29:89:15:f3:ba:39:ae:
b5:b3:cc:8c:04:68:ff:c4:62:6c:dd:28:d5:9e:cb:7a:a3:9d:
a2:a5:2f:c0:87:01:04:88:19:ff:2f:c9:54:ce:10:12:6e:ff:
37:75:e2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:10:56 2025 by rpki-client