This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
File: QV0e9X3aeKX8lSQFQkhAAozUfZk.mft (raw, json)
Hash identifier: RhaJUPDDZM9ePwSVexkJkpOQYF50n7b5NJpwMecxGnM=
Subject key identifier: 39:24:3B:DC:E0:66:14:0F:C7:3D:12:AC:1A:54:C3:E7:CE:DB:72:C9
Authority key identifier: 41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99
Certificate issuer: /CN=A91501FC/serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99
Certificate serial: 0356
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
Manifest number: 0352
Signing time: Thu 04 Dec 2025 23:22:51 +0000
Manifest this update: Thu 04 Dec 2025 23:22:51 +0000
Manifest next update: Thu 11 Dec 2025 23:22:51 +0000
Files and hashes: 1: QV0e9X3aeKX8lSQFQkhAAozUfZk.crl (hash: SJZkHr1kgIzgmyWFefhnW6TOs6nFvdsnDzgEoH9qNOk=)
2: 09513072DE3B11EC9F25BA5FC4F9AE02.roa (hash: WES9ucDGz8CEKO/wZoNG/u047WdQevrcBNglpR6DHnI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl
rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 854 (0x356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91501FC, serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99
Validity
Not Before: Dec 4 23:22:51 2025 GMT
Not After : Dec 11 23:22:51 2025 GMT
Subject: CN=693217cb-cc78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:80:9a:87:1c:59:9b:61:8a:68:07:a9:b9:
9f:1b:57:ec:b0:98:05:54:f2:76:27:64:1a:06:64:
06:87:45:5f:42:25:c6:ce:3c:9d:ad:57:a9:fd:7f:
37:62:42:4e:a4:dc:1e:ba:6d:df:b7:d3:48:bf:4c:
f7:8b:cf:1b:6e:b6:eb:7c:37:b4:38:90:b3:ac:29:
ed:70:ac:d2:6e:ea:01:ca:99:cb:b3:51:85:89:9e:
39:97:39:98:5c:9f:71:2b:e0:57:7c:cb:ea:05:af:
4f:ac:c0:e9:b7:36:38:12:25:1b:7c:5c:5d:f0:6c:
8b:b8:71:80:38:2c:ab:83:a8:02:f1:6b:f2:46:c9:
ae:bc:41:c5:ac:24:9d:b5:78:d7:ca:04:68:ad:11:
0c:99:f1:09:19:c2:46:09:da:93:35:67:f2:0a:80:
ee:25:65:8e:12:99:18:5f:3a:56:ce:74:55:fe:3f:
5a:ab:f4:f9:a4:78:f3:c1:a0:f5:48:44:23:5d:d0:
1e:1b:4d:58:95:55:8e:66:ce:52:30:7f:a8:79:ea:
9c:8d:8b:fc:1e:bc:e4:bd:e7:e7:61:17:70:8c:e0:
8d:a9:8f:ea:47:69:04:ae:06:23:4b:63:8b:78:26:
28:4b:21:81:ca:b0:52:4b:40:af:ce:aa:c8:c5:b0:
87:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:24:3B:DC:E0:66:14:0F:C7:3D:12:AC:1A:54:C3:E7:CE:DB:72:C9
X509v3 Authority Key Identifier:
keyid:41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:47:c8:58:13:c0:38:a8:c8:19:bf:d3:d8:25:3a:ba:52:3b:
c9:c4:79:23:f2:1c:4f:71:80:83:2d:43:99:39:aa:4b:54:1a:
58:6c:fa:a2:6b:72:40:0a:36:5a:c1:87:fa:05:8e:77:96:1c:
f5:76:72:40:3f:b1:5b:21:e3:83:e0:6e:cb:45:b7:c5:37:d1:
1e:d5:30:f9:3e:81:55:02:4f:17:19:a5:66:20:5d:ce:6f:7d:
f7:6e:b3:cd:d2:da:66:96:d0:04:7d:8a:24:18:a8:1e:d6:4a:
6c:8b:8c:9f:29:c1:10:a4:bd:62:36:9b:88:c8:b8:72:a6:fe:
cb:e7:cf:2f:37:41:c8:f5:db:fe:0d:3c:55:74:63:d4:72:45:
e8:39:d0:98:e9:22:b5:4b:4b:cc:71:54:f7:26:96:49:a6:b0:
ee:68:ee:49:b4:f4:64:41:d9:0d:26:e7:f5:92:68:21:40:a0:
02:4c:70:e2:3e:44:14:e0:b9:19:1c:07:19:37:ec:17:6f:c7:
66:73:8b:3a:b6:ec:ea:94:1f:30:6a:a1:8b:f8:74:81:d8:96:
cf:58:37:80:e5:8a:e1:ab:6c:de:09:fe:3f:86:a9:51:4e:9c:
06:58:48:a6:0c:bc:48:25:fb:58:1d:1c:f9:cd:82:6e:a4:81:
18:01:1a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:22:23 2025 by rpki-client