This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
File: qju6qgnV04M0CJnW1TqW1UBTnAE.mft (raw, json)
Hash identifier: lCmvR52CAxfhDXh3vTtvC+/uuYg+z/w4UB99D1hR5vU=
Subject key identifier: 06:6F:DC:FE:86:FB:68:2E:69:C2:92:8E:8F:BB:78:95:27:AA:A9:99
Authority key identifier: AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01
Certificate issuer: /CN=A915A0EE/serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01
Certificate serial: 01D6
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
Manifest number: 01D3
Signing time: Fri 05 Dec 2025 01:06:44 +0000
Manifest this update: Fri 05 Dec 2025 01:06:44 +0000
Manifest next update: Fri 12 Dec 2025 01:06:43 +0000
Files and hashes: 1: qju6qgnV04M0CJnW1TqW1UBTnAE.crl (hash: bIK7kEG6JsqR03jEO5TGr3K30sYz4401w2NRIchW5O8=)
2: 37B56C103AA111F0AB9C9C63C4F9AE02.roa (hash: 7McDM53x18516IO6Lyt3v+d1E7mua3h325oyeNt73ZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl
rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470 (0x1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0EE, serialNumber=AA3BBAAA09D5D383340899D6D53A96D540539C01
Validity
Not Before: Dec 5 01:06:44 2025 GMT
Not After : Dec 12 01:06:43 2025 GMT
Subject: CN=69323024-896c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:09:a2:cf:62:3b:93:f0:5c:47:2a:f4:db:29:
3c:d5:85:d7:5f:e0:2d:e6:d9:a7:ae:8c:e7:90:92:
6f:f0:27:6c:e1:19:0d:77:f4:6a:d3:09:b0:ce:a9:
03:92:a0:a4:79:79:28:cb:67:25:79:03:30:cc:ca:
f6:73:10:a8:5a:3e:e0:4c:77:cf:db:b5:cb:fc:00:
e4:5a:12:02:f1:38:1c:f3:65:67:9d:08:4d:28:45:
b5:40:1b:a3:0d:ef:b7:20:b1:cf:bd:e3:6b:ac:e9:
84:82:d0:0d:ad:e2:08:0a:3d:fe:2f:e5:2f:9b:fe:
fa:59:3f:ec:29:f1:e7:41:7d:bf:e2:f1:1a:d7:02:
55:33:41:20:25:2a:44:37:fd:23:bf:30:0b:fd:84:
29:0c:1f:44:73:9b:c1:d4:89:f5:b6:87:5e:9d:fe:
b4:15:b4:3e:8d:1b:1a:18:10:e7:49:12:57:03:4b:
b8:9e:6e:78:86:38:a1:7d:5f:32:42:aa:c4:f9:a5:
ca:d0:ed:78:3a:96:fd:17:cb:29:26:52:5f:f6:4f:
02:2d:84:05:9f:ae:a9:94:3c:ba:8f:3a:af:96:5f:
78:91:07:fd:df:a0:30:a3:9e:4b:cf:87:10:8d:95:
58:73:20:97:ff:48:72:77:5f:82:45:8d:99:72:1f:
b3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6F:DC:FE:86:FB:68:2E:69:C2:92:8E:8F:BB:78:95:27:AA:A9:99
X509v3 Authority Key Identifier:
keyid:AA:3B:BA:AA:09:D5:D3:83:34:08:99:D6:D5:3A:96:D5:40:53:9C:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qju6qgnV04M0CJnW1TqW1UBTnAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/435C3EE009C011EEBE12583AC4F9AE02/qju6qgnV04M0CJnW1TqW1UBTnAE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:df:5b:d7:7a:2b:93:07:22:46:01:d8:b2:09:ed:ef:bd:1e:
60:3e:32:32:d4:57:3e:08:9d:95:77:a5:21:13:67:00:96:c0:
b5:a6:57:31:ad:81:ff:23:aa:66:79:8f:4d:57:64:5c:0d:4c:
06:a8:19:59:87:c8:df:ca:d9:4b:1f:6d:19:eb:4d:fb:bc:90:
c5:3c:b9:69:a8:5c:da:08:b3:ef:3a:4c:20:68:c2:66:c2:6b:
4a:bf:fa:09:55:dc:11:79:53:be:54:02:86:48:6b:d1:1a:40:
9a:af:fa:6a:9b:20:2f:14:53:51:b3:d0:15:32:c9:46:a7:77:
70:0f:c0:e2:6c:be:52:90:84:e9:19:e7:00:a3:88:6b:a4:12:
73:23:ae:b2:2d:06:98:77:36:8f:eb:84:9d:86:fb:51:f6:88:
3e:d1:12:49:11:c4:05:b5:17:3c:89:38:0c:da:4e:03:af:8a:
71:10:b3:ad:51:08:fe:44:54:93:0a:73:33:10:84:0e:c5:63:
f5:31:1f:41:30:ec:67:05:6d:5b:9b:d5:9f:5b:b9:02:f0:1f:
fc:e8:cd:ed:72:d0:a7:ee:d1:13:44:23:de:b3:08:b9:ef:4f:
89:46:bc:3c:5a:cf:62:6e:2a:e3:5f:0b:27:9a:4c:4b:c4:f9:
55:13:55:e4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwRUUxMTAvBgNVBAUTKEFBM0JCQUFBMDlENUQzODMzNDA4OTlENkQ1M0E5NkQ1
NDA1MzlDMDEwHhcNMjUxMjA1MDEwNjQ0WhcNMjUxMjEyMDEwNjQzWjAYMRYwFAYD
VQQDEw02OTMyMzAyNC04OTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAogmiz2I7k/BcRyr02yk81YXXX+At5tmnroznkJJv8Cds4RkNd/Rq0wmwzqkD
kqCkeXkoy2cleQMwzMr2cxCoWj7gTHfP27XL/ADkWhIC8Tgc82VnnQhNKEW1QBuj
De+3ILHPveNrrOmEgtANreIICj3+L+Uvm/76WT/sKfHnQX2/4vEa1wJVM0EgJSpE
N/0jvzAL/YQpDB9Ec5vB1In1todenf60FbQ+jRsaGBDnSRJXA0u4nm54hjihfV8y
QqrE+aXK0O14Opb9F8spJlJf9k8CLYQFn66plDy6jzqvll94kQf936Awo55Lz4cQ
jZVYcyCX/0hyd1+CRY2Zch+z0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZv3P6G
+2guacKSjo+7eJUnqqmZMB8GA1UdIwQYMBaAFKo7uqoJ1dODNAiZ1tU6ltVAU5wB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBFRS80MzVDM0VFMDA5
QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi9xanU2cWduVjA0TTBDSm5XMVRxVzFVQlRu
QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3FqdTZxZ25WMDRNMENKblcxVHFXMVVCVG5BRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTBFRS80MzVDM0VFMDA5QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi9xanU2cWduVjA0
TTBDSm5XMVRxVzFVQlRuQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCV31vXeiuTByJGAdiyCe3vvR5gPjIy1Fc+CJ2Vd6UhE2cAlsC1plcx
rYH/I6pmeY9NV2RcDUwGqBlZh8jfytlLH20Z6037vJDFPLlpqFzaCLPvOkwgaMJm
wmtKv/oJVdwReVO+VAKGSGvRGkCar/pqmyAvFFNRs9AVMslGp3dwD8DibL5SkITp
GecAo4hrpBJzI66yLQaYdzaP64SdhvtR9og+0RJJEcQFtRc8iTgM2k4Dr4pxELOt
UQj+RFSTCnMzEIQOxWP1MR9BMOxnBW1bm9WfW7kC8B/86M3tctCn7tETRCPeswi5
70+JRrw8Ws9ibirjXwsnmkxLxPlVE1Xk
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:24:53 2025 by rpki-client