This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
File: QgxcRJT5_6t6haNwv8Pklcz6S6M.mft (raw, json)
Hash identifier: zHKkG2+TbKEZ6abxYnHwq1VMwehMSvX2FujBx9upJhU=
Subject key identifier: 4E:22:0B:5A:D8:C1:A6:33:CB:A4:6E:36:72:61:80:FA:21:27:B2:98
Authority key identifier: 42:0C:5C:44:94:F9:FF:AB:7A:85:A3:70:BF:C3:E4:95:CC:FA:4B:A3
Certificate issuer: /CN=A9132F27/serialNumber=420C5C4494F9FFAB7A85A370BFC3E495CCFA4BA3
Certificate serial: 015A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
Manifest number: 015A
Signing time: Fri 05 Dec 2025 02:14:31 +0000
Manifest this update: Fri 05 Dec 2025 02:14:30 +0000
Manifest next update: Fri 12 Dec 2025 02:14:30 +0000
Files and hashes: 1: QgxcRJT5_6t6haNwv8Pklcz6S6M.crl (hash: OldZXrHYLI0XHONOpUs44jvTH1FKoaL/6B1LWyiZMgM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.crl
rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:14:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132F27, serialNumber=420C5C4494F9FFAB7A85A370BFC3E495CCFA4BA3
Validity
Not Before: Dec 5 02:14:30 2025 GMT
Not After : Dec 12 02:14:30 2025 GMT
Subject: CN=69324007-c855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fc:bb:a8:db:91:d4:bf:58:69:4d:e8:ec:b2:
0f:8e:e3:4a:8f:12:1c:43:c4:ba:39:0d:72:45:75:
31:8a:66:87:a3:3c:f7:4e:ae:7c:13:2e:56:ae:2c:
cd:1f:7d:39:b0:3e:56:09:b3:d0:04:68:36:f8:a2:
2c:47:b9:9d:ce:60:e3:57:30:18:a5:0b:14:39:ae:
d5:6f:1d:f9:56:be:50:e3:26:65:46:a1:86:0f:ff:
2d:e0:f8:39:19:e6:2d:85:b1:5a:f6:b9:a2:ee:2c:
66:70:78:b3:1a:c2:10:73:ef:c6:b8:20:c8:fc:24:
d9:a1:82:ae:44:e1:fe:6f:d0:4a:cf:fc:d2:fb:8c:
a0:39:46:2d:d5:b5:78:8a:70:e4:c9:b1:53:8e:2c:
7b:df:dc:c1:8f:8f:ab:0f:58:7b:7e:94:d4:64:37:
20:c0:8b:28:f6:5b:39:3c:73:50:97:4b:0e:37:c3:
39:08:d4:0e:f2:e4:92:3b:86:29:65:8a:41:1a:bf:
a8:a3:93:61:4b:fa:51:32:24:be:6d:04:72:ed:51:
7a:a9:d2:44:42:22:8c:49:5a:69:b2:77:ca:3d:db:
5c:e1:49:88:c2:95:5f:02:0c:0b:49:fe:41:d6:fa:
79:1e:c7:07:fd:a5:99:c2:c6:bb:11:cb:50:a4:09:
d1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:22:0B:5A:D8:C1:A6:33:CB:A4:6E:36:72:61:80:FA:21:27:B2:98
X509v3 Authority Key Identifier:
keyid:42:0C:5C:44:94:F9:FF:AB:7A:85:A3:70:BF:C3:E4:95:CC:FA:4B:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgxcRJT5_6t6haNwv8Pklcz6S6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F27/84098F5CBB6C11EEA680AE6DC4F9AE02/QgxcRJT5_6t6haNwv8Pklcz6S6M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:f6:36:9d:b3:be:a3:2f:b7:04:7a:89:b7:a5:00:5b:e8:66:
f5:ee:bc:4a:bc:00:47:8a:54:6a:40:a0:85:43:c5:63:88:8e:
0f:66:8a:9d:2f:98:5c:af:85:70:c3:35:bf:da:21:c5:ed:f5:
bd:4a:ae:14:d1:ce:3d:1d:27:ef:c9:b0:e5:9d:66:4c:9f:4f:
99:73:32:ec:f0:38:43:1b:44:dc:1c:a7:45:e5:e5:c4:1c:38:
64:e7:88:6c:5e:47:6a:af:e1:9c:40:22:0c:f8:91:0f:6b:76:
a3:b7:af:eb:e0:fe:b9:68:41:e5:21:b7:f9:9b:3e:de:4f:f4:
55:c6:e4:18:1f:52:7c:2e:de:82:68:f8:6a:61:5a:10:a9:00:
70:27:3d:4f:40:d0:64:d4:6b:62:ab:e3:61:af:05:39:15:2e:
2c:6e:35:f3:0f:6f:7c:ff:8c:1c:16:2c:66:42:1e:bb:4e:ea:
11:21:d4:d2:d4:49:0f:84:09:a8:8f:aa:07:54:f9:b7:bb:63:
2a:0d:e6:a0:ba:ed:b5:2c:26:c6:0d:ac:e6:ca:45:aa:69:77:
51:d5:99:69:74:3b:f1:54:fe:e7:21:6f:0c:70:a0:27:c5:39:
c4:06:f6:e5:5d:e0:dc:34:27:4d:54:4d:64:68:04:10:b5:75:
41:11:a3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:53:38 2025 by rpki-client