This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
File: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft (raw, json)
Hash identifier: qNND4yzBti6eBevCvxTg4xHROdILGhT/Qay9RGvyR6o=
Subject key identifier: A4:59:95:9F:FD:C6:6E:3F:83:12:FA:E0:FD:C7:BF:58:55:6E:C1:E9
Authority key identifier: 42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96
Certificate issuer: /CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
Certificate serial: EB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
Manifest number: E7
Signing time: Fri 05 Dec 2025 03:29:10 +0000
Manifest this update: Fri 05 Dec 2025 03:29:10 +0000
Manifest next update: Fri 12 Dec 2025 03:29:10 +0000
Files and hashes: 1: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl (hash: 8P//zZBn1YhgxFQTM96r6GqA+K++ADInlN6WgtvClT0=)
2: 5F18EB127A7E11EF932E0B3EC4F9AE02.roa (hash: VWRRCd4nJbWD0TRBP58eY5MdXn/pUrD+aCnAKKgYqGE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl
rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140436, serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
Validity
Not Before: Dec 5 03:29:10 2025 GMT
Not After : Dec 12 03:29:10 2025 GMT
Subject: CN=69325186-9175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:34:40:34:7f:e3:0f:3e:dc:1c:95:3a:7b:
7a:d3:55:e3:3e:c4:f9:3b:f0:bd:bd:eb:7b:7a:f1:
37:7e:1e:09:40:21:38:6b:f7:24:b3:fc:7c:2a:93:
76:b0:ef:3c:0b:b0:98:4d:c6:a0:06:8a:7b:da:55:
aa:f8:cf:bf:57:88:66:6f:9b:49:71:9c:96:79:98:
6b:9f:81:74:67:b2:e0:fa:6e:81:59:f0:8c:10:c7:
ff:fc:b8:91:99:33:a3:65:59:37:7a:e6:ca:15:e0:
71:56:20:93:c9:8e:77:9b:be:d6:63:de:3d:8a:21:
d2:73:81:79:17:10:ec:eb:fd:72:5e:0d:53:9b:56:
d8:35:43:4f:15:06:ab:29:c6:f1:5e:f8:83:63:fc:
06:24:ac:3f:8d:72:cc:c4:25:a5:b7:17:14:b5:bf:
5f:7b:6e:02:03:64:2c:77:1e:55:1e:68:76:e0:a3:
eb:3c:65:70:97:29:4a:03:af:b9:5f:81:bc:e0:c9:
b3:94:af:9b:05:b7:26:f0:11:2d:e9:2b:ad:d8:77:
2a:6e:ad:9d:a2:07:3a:b5:a5:8a:88:4e:5a:53:d8:
62:49:06:92:b7:8f:17:7e:19:36:58:9a:12:fb:15:
9e:e5:bd:47:d4:cf:d0:a6:3d:98:8f:43:ba:66:17:
ab:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:59:95:9F:FD:C6:6E:3F:83:12:FA:E0:FD:C7:BF:58:55:6E:C1:E9
X509v3 Authority Key Identifier:
keyid:42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:71:80:ef:d7:be:d5:6d:fc:c2:d7:90:af:89:1f:af:fa:bb:
d1:c6:e5:97:54:6e:d6:fd:04:c5:c9:91:ac:f5:7f:1c:9a:f6:
15:bc:6d:17:8b:40:7a:60:96:db:5b:95:17:05:76:dc:c8:87:
b7:62:cc:5f:20:0b:67:7a:0d:9f:f5:3a:a3:37:53:fe:5f:10:
18:20:3b:92:b8:14:59:96:73:a7:ed:81:3e:4f:ff:56:99:84:
13:a3:1d:c1:3a:92:9b:3f:ca:96:4d:fc:31:4b:b8:a2:38:54:
8d:7a:8b:40:9d:28:5a:87:91:36:15:78:b0:e1:07:74:66:a6:
61:52:3b:5c:bb:e8:2b:b0:ed:3b:c3:7d:80:b1:45:fa:9e:bd:
cc:10:19:db:41:e7:fd:1f:7b:6b:a9:a8:4c:ba:0e:3c:94:52:
45:12:d7:20:50:a8:57:38:91:97:56:5e:85:d9:10:3e:4c:3a:
a3:f3:b6:c0:7a:6c:ea:8c:3c:f0:68:79:18:56:80:46:4b:fc:
54:eb:93:7f:42:1b:d1:54:4e:30:d9:76:62:56:37:0d:48:ea:
8d:8f:bf:18:53:6f:04:fc:7b:de:90:d7:8a:01:03:5e:2a:f5:
e1:4c:64:51:78:9f:c0:4b:63:67:3d:ff:98:ab:dc:ec:3c:4f:
9c:5e:a3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:11:34 2025 by rpki-client