This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
File: Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft (raw, json)
Hash identifier: SeUIvnqWDMMZPtdeohpgsDj4pQRM5ooYBcFTskmyTnY=
Subject key identifier: 81:6D:93:92:B6:0F:B7:1F:40:B8:74:8D:27:85:F1:2C:BF:08:FC:C3
Authority key identifier: 42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
Certificate issuer: /CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Certificate serial: 1B74
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
Manifest number: 1B6F
Signing time: Thu 04 Dec 2025 16:00:34 +0000
Manifest this update: Thu 04 Dec 2025 16:00:34 +0000
Manifest next update: Thu 11 Dec 2025 16:00:34 +0000
Files and hashes: 1: Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl (hash: AUD7xOidWrpUinzgMuMurEdN5gEBTLdEQGBF1QbOuxM=)
2: 7E1ADD74E00E11EDA7E1B640C4F9AE02.roa (hash: f7v965g9bOSdEznd3YTHpzh8If/rvk4WHQj9sYnabU4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 16:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7028 (0x1b74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4, serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Validity
Not Before: Dec 4 16:00:34 2025 GMT
Not After : Dec 11 16:00:34 2025 GMT
Subject: CN=6931b022-e770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:8e:39:50:b3:6c:c5:92:db:22:68:13:d4:
d7:7d:f7:87:8d:c0:f8:b3:cc:08:3b:ba:f8:ac:8f:
89:51:fd:1f:7d:63:a8:1c:e7:d8:38:07:62:84:e5:
97:b6:86:7e:ec:74:8e:c6:01:0f:bc:68:4b:37:20:
be:42:74:3b:8b:11:9d:cb:dc:13:5b:e5:35:63:e9:
50:9e:f0:eb:5c:02:16:d3:1f:3d:b5:56:1d:b6:60:
11:3f:df:38:b5:56:70:88:c3:36:73:da:b3:33:28:
0d:9a:a9:33:cd:b8:7e:8b:0c:89:90:fb:fc:f7:4a:
1b:99:16:48:1d:3c:0e:d7:1e:ab:f7:cf:be:ac:f0:
9f:4e:d1:1e:71:49:e4:c1:09:26:c4:c3:bb:78:1f:
76:3f:fd:88:87:1e:11:5b:df:52:77:38:23:48:18:
11:8b:5f:e3:e6:fd:2b:01:39:c3:6f:f8:17:08:ee:
d7:ac:de:0f:15:c2:f7:4d:6c:16:d6:61:7a:d8:66:
91:17:ff:ba:0f:2e:61:67:fd:39:70:77:e7:92:53:
35:28:c1:04:14:7b:f5:c3:c2:b5:34:e6:46:8e:d5:
ec:2f:d9:e2:65:5f:4f:06:1b:38:ea:2a:f4:58:8d:
fa:7a:d1:48:c1:10:51:97:01:a7:c8:e3:92:bd:b4:
22:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6D:93:92:B6:0F:B7:1F:40:B8:74:8D:27:85:F1:2C:BF:08:FC:C3
X509v3 Authority Key Identifier:
keyid:42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6b:97:b1:9d:08:78:ed:ca:f8:5e:05:bb:30:5b:d3:0b:51:
6c:75:7b:54:7a:ad:63:8b:c8:40:bd:8a:3c:37:fe:46:bd:66:
05:18:2a:6d:db:e9:56:88:53:0f:cc:1f:9a:6d:4f:98:1a:c9:
82:ef:8b:08:f6:21:54:fe:9c:06:3c:0d:98:90:8f:33:60:d1:
c4:6e:5b:d2:c4:2f:21:d0:38:99:64:20:91:c8:7f:cc:d2:5e:
e1:7f:dd:f8:e0:b2:f8:23:f4:ae:08:5b:b2:58:b1:c3:cd:96:
81:e8:5d:36:f0:6f:10:5f:d8:f9:8c:fd:72:1b:b4:ff:fa:85:
bf:82:4c:38:c5:b2:33:64:07:05:8d:87:24:cb:2c:71:c4:b2:
2c:a1:39:f1:21:9f:e6:2c:e6:ec:1c:09:93:23:df:9c:8c:e7:
e0:ab:bf:4b:fc:b3:02:52:7b:c9:30:f3:5a:3b:dd:6b:97:5b:
81:29:eb:f5:af:d2:47:67:e7:5e:11:54:43:d3:ee:ac:05:08:
50:71:47:0a:37:e1:2f:75:7a:be:5b:f7:db:88:a7:55:69:0e:
e7:b8:84:59:b7:bd:33:fc:4d:57:57:d9:d5:19:ce:37:17:c8:
47:f9:dd:3e:84:dc:8a:4b:77:c8:1d:1b:13:05:1d:9d:69:6c:
1b:ac:d3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:34:59 2025 by rpki-client