This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
File: QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft (raw, json)
Hash identifier: 1+xRpFl1mpK6sHwJIQZZmEjkBkx9+Q4dgD4ILViJfuk=
Subject key identifier: 95:C5:41:68:2A:5F:46:9E:8D:F7:7A:7C:AD:20:6C:11:0B:24:BC:F9
Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31
Certificate issuer: /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31
Certificate serial: 3500
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
Manifest number: 34F4
Signing time: Sat 06 Dec 2025 14:34:16 +0000
Manifest this update: Sat 06 Dec 2025 14:34:15 +0000
Manifest next update: Sat 13 Dec 2025 14:34:15 +0000
Files and hashes: 1: QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl (hash: 3ew7Hp2uniCpKL8oqrGH/AMWBA0CJQarGowdSNbLWmM=)
2: ABE8518A18DA11F08FC68386C4F9AE02.roa (hash: 06z9d5fjWqhjFaZliDpCRNH7Mjl/zpi5d4kXWnQYoQw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl
rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:34:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13568 (0x3500)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D306, serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31
Validity
Not Before: Dec 6 14:34:15 2025 GMT
Not After : Dec 13 14:34:15 2025 GMT
Subject: CN=69343ee7-de7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:85:4a:d8:31:8b:48:7c:21:97:3f:e7:71:71:
1f:0e:bf:17:8b:5c:4a:b2:7c:03:13:87:7e:26:f8:
63:d0:bb:fe:d1:8a:2b:2d:39:e5:64:e8:a3:4d:6e:
79:dc:86:41:36:9b:e1:d3:68:57:14:32:59:99:0a:
c6:79:21:2c:c9:58:9b:55:0b:a9:97:2b:8f:38:c1:
20:4d:b2:d4:28:68:54:fd:ab:fe:b4:30:fc:50:d0:
50:b7:f2:7c:4e:bd:e5:dd:56:fd:fd:7c:ac:9d:87:
9a:47:7f:67:bd:c6:ae:0f:ab:a1:1e:a7:e0:96:a6:
d2:52:f9:55:38:bc:e9:3d:bf:a9:7e:2f:8b:91:99:
21:c7:8d:4c:3c:c0:ff:40:dc:11:37:74:bc:87:71:
0d:50:03:84:85:c8:8e:96:39:01:77:db:a5:d6:66:
b7:90:63:b0:09:7c:c9:37:11:d0:bd:be:02:dc:7a:
9c:ad:2d:36:68:be:65:e1:3d:b8:ae:ea:d3:f2:f9:
55:48:fa:ac:33:2c:b2:40:3a:8e:46:9b:05:88:16:
2b:3f:db:67:3f:48:c8:bf:e1:e6:7e:a3:14:14:79:
56:19:b4:36:1e:39:86:62:48:1f:47:a1:ac:0f:e7:
97:2d:df:1e:99:96:26:be:db:07:22:03:fd:49:1c:
a3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C5:41:68:2A:5F:46:9E:8D:F7:7A:7C:AD:20:6C:11:0B:24:BC:F9
X509v3 Authority Key Identifier:
keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:ac:00:af:6c:a6:77:5f:fb:c1:cf:dd:2f:28:79:f7:43:16:
37:cc:54:8f:0f:76:2a:09:8b:78:71:8d:0d:03:22:97:b9:70:
6a:2a:7f:ef:10:84:1c:fe:bf:4c:f8:25:8c:f8:87:c0:bd:00:
de:b4:2d:b7:fb:0a:c2:6b:58:74:58:b4:43:22:8c:21:eb:ea:
fe:32:f1:6f:d3:4d:70:e7:d6:56:a2:7a:be:10:ac:32:f1:a2:
a0:9c:30:e8:a8:51:d7:24:e8:10:37:0d:e1:6f:b0:52:54:14:
d4:0e:23:db:3d:24:3d:4d:22:c2:68:2a:49:2a:2b:72:c0:d0:
35:43:ed:ae:08:93:f9:7f:42:d9:1a:2e:61:df:80:09:9e:99:
be:ce:50:f5:d6:5d:ba:26:aa:59:ec:0e:36:c2:cf:c0:55:77:
ab:2d:4f:b6:23:bd:46:8f:d3:4f:b9:0a:f2:5c:3b:d7:bc:ee:
a4:94:8c:41:5a:4c:c8:fe:f5:ba:50:14:51:13:2d:de:8b:13:
0a:fb:75:19:d1:0c:23:db:51:c1:75:31:0b:89:6a:14:fa:8f:
2b:8a:06:c1:95:45:ab:79:35:d6:5f:33:48:e8:0b:69:2f:83:
ef:cd:d4:cd:b6:36:cc:42:2d:e2:d0:d5:3f:43:82:a2:b2:98:
c1:df:a2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:45:24 2025 by rpki-client