This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
File: cQnPztTUjL9WSOoHl6fHNH1o_xI.mft (raw, json)
Hash identifier: xPG/abpdJQFgBOX3b5t4ptZpsPwhcdAI29ywaxqQK80=
Subject key identifier: D7:4C:78:34:C3:C4:EE:DB:8C:CB:90:71:16:85:46:C3:DF:BD:37:46
Authority key identifier: 71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12
Certificate issuer: /CN=A913132A/serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12
Certificate serial: 34E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
Manifest number: 34E3
Signing time: Sat 06 Dec 2025 15:04:32 +0000
Manifest this update: Sat 06 Dec 2025 15:04:32 +0000
Manifest next update: Sat 13 Dec 2025 15:04:32 +0000
Files and hashes: 1: cQnPztTUjL9WSOoHl6fHNH1o_xI.crl (hash: FJj3u7Zim0cZML+mC/AEdJIkMMFZmF4/o0z5Z2Uu13g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl
rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:04:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13539 (0x34e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913132A, serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12
Validity
Not Before: Dec 6 15:04:32 2025 GMT
Not After : Dec 13 15:04:32 2025 GMT
Subject: CN=69344600-e14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1c:68:66:aa:cf:cd:1c:6f:f6:46:07:57:9c:
dc:cb:49:25:38:13:f2:c4:7f:46:03:bd:bd:35:e4:
6a:d1:cb:35:a9:1b:39:74:75:c2:8e:37:0d:5b:91:
34:d6:ea:b4:0c:d3:a8:89:a8:1a:4e:b1:30:22:72:
f7:54:51:57:0d:d5:ec:84:43:f3:85:86:df:74:f0:
53:9f:e4:9e:ea:56:84:5c:b4:27:be:77:d1:f8:00:
3a:cd:5b:28:b1:1c:20:b7:cb:56:99:ea:62:e3:34:
d0:67:81:e6:21:24:55:dd:b8:15:ab:d4:61:51:c4:
e5:1b:b9:9b:61:30:c8:6f:fe:29:0e:b5:4a:a9:21:
f2:88:8c:02:c5:64:31:f8:71:81:f8:79:6b:74:e9:
01:09:98:30:6f:4a:56:b1:32:9e:47:c5:7a:ac:0d:
c6:f7:06:aa:59:24:08:63:b6:c1:a4:22:f9:47:41:
dc:62:37:87:1e:90:30:eb:ed:82:a1:77:4f:90:63:
47:76:19:c0:b3:6e:c9:d1:d4:fc:00:59:78:4a:96:
7d:70:b5:db:9d:a7:1a:d4:ee:b2:4b:ae:d7:22:f8:
f5:79:b9:25:fc:f3:78:0f:0c:8f:a9:11:92:65:b9:
f3:23:6b:45:96:24:e5:9f:3e:26:4f:08:6c:42:8b:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4C:78:34:C3:C4:EE:DB:8C:CB:90:71:16:85:46:C3:DF:BD:37:46
X509v3 Authority Key Identifier:
keyid:71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:a8:3e:21:a2:a9:96:d5:23:5a:61:87:ef:95:14:6f:17:5b:
02:37:82:d7:95:68:6a:ae:c9:d7:b6:fc:93:48:7c:0a:3f:4c:
88:e8:65:51:f1:0a:73:b9:0f:28:e7:62:e4:27:92:2e:af:a1:
76:d8:c1:5a:31:64:f0:c3:ea:c5:70:c9:d7:cb:90:e5:06:33:
a9:f8:d3:a5:19:33:24:ff:26:f6:b9:cd:35:77:bd:a8:32:15:
5d:bd:73:88:89:bf:c3:1a:f6:d7:44:45:4b:ab:b7:d0:53:d5:
4b:63:1a:9d:79:d1:67:92:d3:a0:3c:ca:bc:4d:d9:43:a3:4a:
f9:37:7f:10:9f:43:c2:66:98:7a:12:9a:b2:bc:94:ac:ff:4c:
e6:fb:50:f7:f6:f1:6f:6f:43:cf:ca:ea:cc:b5:aa:c9:fa:c8:
10:ec:9c:38:28:e0:67:8b:97:6f:72:51:7d:66:c0:7b:f2:19:
d7:ea:f0:13:41:67:c0:3a:94:b9:b0:29:e2:dd:99:db:b5:db:
aa:22:0d:61:03:86:63:c4:d6:36:1c:5e:6a:81:0d:31:53:75:
76:55:c7:e5:fc:d5:ff:23:17:93:33:5e:ca:44:70:11:57:e5:
86:6b:f6:25:2c:90:0a:35:7d:2d:63:5c:8e:1b:be:d7:a2:ed:
6b:2d:3b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:19:18 2025 by rpki-client