This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
File: _qutkjWu8XAjzc-xYZAm887bLH8.mft (raw, json)
Hash identifier: +blqMAaaUdbuNo8aU/q31fnSqyUvhuycuTRgxH9CIYg=
Subject key identifier: 89:3F:AA:C0:E4:D8:EF:AE:84:A3:D4:C9:0A:A7:CD:55:B7:22:F6:EF
Authority key identifier: FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F
Certificate issuer: /CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
Certificate serial: 0123
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
Manifest number: 011A
Signing time: Sun 07 Dec 2025 03:10:46 +0000
Manifest this update: Sun 07 Dec 2025 03:10:46 +0000
Manifest next update: Sun 14 Dec 2025 03:10:46 +0000
Files and hashes: 1: _qutkjWu8XAjzc-xYZAm887bLH8.crl (hash: 57nBGHXyQlAHPlQA4UjGLYkE3/Bwzc5AGh8PqFhvWkg=)
2: 557F3136DCA511EF98B72959C4F9AE02.roa (hash: SrRGCeTkPcXvi63UKXsEnuqePLRhHVKqBX2soL9amKI=)
3: C06D45B6961611F0870D4413C4F9AE02.roa (hash: w0+vj4aVz0K4Becg/iBGdIuc8dYR3B+infU6zn+iFnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl
rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 03:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91443DC, serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
Validity
Not Before: Dec 7 03:10:46 2025 GMT
Not After : Dec 14 03:10:46 2025 GMT
Subject: CN=6934f036-bb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:94:84:45:26:03:6a:f0:5b:8b:1f:f5:57:be:
6b:4d:16:07:32:54:43:08:89:03:f6:e6:0b:02:2b:
63:f6:f5:55:75:c1:98:ca:35:5e:5c:5b:f7:b7:6f:
5e:99:5f:1a:82:79:4b:95:12:c9:2b:f0:c8:c6:d9:
57:46:5c:c1:83:50:3e:1e:3a:bc:b4:20:aa:97:84:
ca:fd:f8:82:98:d7:42:b1:40:53:a3:35:18:d1:3e:
39:ce:47:72:95:8e:e4:b8:a7:80:80:bc:30:50:17:
3d:71:45:a1:cb:c5:21:f2:6b:da:7a:1c:35:46:30:
83:c1:ab:5b:69:19:a2:df:6d:b2:5a:0c:83:eb:7f:
a1:b7:68:65:e2:0c:9b:9a:ec:2b:1a:e3:d9:fb:08:
e2:99:0a:52:68:bb:7f:7b:2b:df:df:83:47:f0:d1:
d1:52:dd:bd:a9:8e:b6:45:ef:5f:64:78:e5:9c:65:
b3:c0:b3:22:00:0e:14:e7:bd:44:17:58:f6:89:c8:
a1:56:0c:39:dc:0b:54:29:71:cf:a0:d6:2f:b7:29:
71:40:9b:87:9d:99:76:9a:25:46:7c:7a:22:53:ee:
8e:d3:57:2d:b5:dd:d9:40:d8:e8:15:69:a4:52:a7:
b1:3d:7f:80:4c:b7:0d:c9:d4:af:60:31:94:1d:6e:
0a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3F:AA:C0:E4:D8:EF:AE:84:A3:D4:C9:0A:A7:CD:55:B7:22:F6:EF
X509v3 Authority Key Identifier:
keyid:FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:28:8c:73:e4:d7:ab:5f:e4:cb:2b:43:6b:11:f1:18:49:b0:
79:36:70:3a:92:fe:2b:3c:f8:27:51:bd:6b:93:18:94:8e:2f:
68:24:1b:8b:b4:ee:e5:89:bd:c4:29:9c:2f:45:30:d0:c7:7d:
da:33:9e:ca:9a:e7:01:83:1f:a1:04:d8:c1:c8:aa:b5:2e:73:
cc:62:e6:d0:53:b9:db:c7:e1:c5:9c:d8:5b:93:24:b7:8a:45:
b6:91:ba:30:50:8c:9d:95:91:c6:c6:9d:3d:cd:1f:7f:64:78:
2a:a8:9d:c5:73:ba:d0:58:f1:1b:df:10:0d:0b:a4:96:49:5c:
cb:6e:c3:88:60:34:06:06:56:fe:20:df:d9:e2:68:e1:48:10:
f1:bd:9b:b7:6a:d1:94:b6:9c:6a:3d:01:44:b9:95:57:2d:03:
4d:ed:4f:79:ea:7a:1d:55:5b:8b:ca:b1:65:eb:c0:af:75:2f:
f0:1d:f6:d4:77:b2:3a:87:ce:88:9b:8b:f1:49:db:d5:31:e6:
49:c9:b1:86:f8:53:6d:1e:55:6a:c7:79:1c:e1:3b:74:96:a6:
44:9a:89:f5:4c:02:d2:02:5b:fe:f2:37:6b:e5:94:5b:e9:c2:
a8:f9:58:9f:9b:71:6d:e5:84:b1:8e:cc:a0:68:56:0d:10:35:
03:6d:90:dd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQzREMxMTAvBgNVBAUTKEZFQUJBRDkyMzVBRUYxNzAyM0NEQ0ZCMTYxOTAyNkYz
Q0VEQjJDN0YwHhcNMjUxMjA3MDMxMDQ2WhcNMjUxMjE0MDMxMDQ2WjAYMRYwFAYD
VQQDEw02OTM0ZjAzNi1iYjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2ZSERSYDavBbix/1V75rTRYHMlRDCIkD9uYLAitj9vVVdcGYyjVeXFv3t29e
mV8agnlLlRLJK/DIxtlXRlzBg1A+Hjq8tCCql4TK/fiCmNdCsUBTozUY0T45zkdy
lY7kuKeAgLwwUBc9cUWhy8Uh8mvaehw1RjCDwatbaRmi322yWgyD63+ht2hl4gyb
muwrGuPZ+wjimQpSaLt/eyvf34NH8NHRUt29qY62Re9fZHjlnGWzwLMiAA4U571E
F1j2icihVgw53AtUKXHPoNYvtylxQJuHnZl2miVGfHoiU+6O01cttd3ZQNjoFWmk
UqexPX+ATLcNydSvYDGUHW4KiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIk/qsDk
2O+uhKPUyQqnzVW3IvbvMB8GA1UdIwQYMBaAFP6rrZI1rvFwI83PsWGQJvPO2yx/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDNEQy85N0RGN0ExMjMw
NjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi9fcXV0a2pXdThYQWp6Yy14WVpBbTg4N2JM
SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL19xdXRrald1OFhBanpjLXhZWkFtODg3YkxIOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDNEQy85N0RGN0ExMjMwNjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi9fcXV0a2pXdThY
QWp6Yy14WVpBbTg4N2JMSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQACKIxz5NerX+TLK0NrEfEYSbB5NnA6kv4rPPgnUb1rkxiUji9oJBuL
tO7lib3EKZwvRTDQx33aM57KmucBgx+hBNjByKq1LnPMYubQU7nbx+HFnNhbkyS3
ikW2kbowUIydlZHGxp09zR9/ZHgqqJ3Fc7rQWPEb3xANC6SWSVzLbsOIYDQGBlb+
IN/Z4mjhSBDxvZu3atGUtpxqPQFEuZVXLQNN7U956nodVVuLyrFl68CvdS/wHfbU
d7I6h86Im4vxSdvVMeZJybGG+FNtHlVqx3kc4Tt0lqZEmon1TALSAlv+8jdr5ZRb
6cKo+Vifm3Ft5YSxjsygaFYNEDUDbZDd
-----END CERTIFICATE-----
Generated at Sun Dec 7 06:37:39 2025 by rpki-client