This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
File: qv-68mWqykyVF6_rf1T8yw-x3Bs.mft (raw, json)
Hash identifier: 1zUM7aWanSX0Buhhk/Y/bHA3wyxrZt5u7GiA2hJUFl0=
Subject key identifier: F4:22:D4:C5:F9:A4:F6:B0:E1:F8:A9:54:D9:0F:6E:E2:EF:79:3C:15
Authority key identifier: AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B
Certificate issuer: /CN=A916216D/serialNumber=AAFFBAF265AACA4C9517AFEB7F54FCCB0FB1DC1B
Certificate serial: 2D2D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
Manifest number: 2CF5
Signing time: Sat 06 Dec 2025 15:19:07 +0000
Manifest this update: Sat 06 Dec 2025 15:19:07 +0000
Manifest next update: Sat 13 Dec 2025 15:19:07 +0000
Files and hashes: 1: qv-68mWqykyVF6_rf1T8yw-x3Bs.crl (hash: Dzuqd0O2nPU4TsLzdIYM8e7MJLGLvI6k/unHsVsniXo=)
2: 70FD3F6A5B1811F0B719DE67C4F9AE02.roa (hash: tOQThPidL/4iHhAQBaSLJmN0jtHD7/tt5lQ9T3jUJQg=)
3: 8FFA11F41B4A11EFB2A0D360C4F9AE02.roa (hash: ulJtZ2Mww36RDb9DCGSsj4fbfbOfNMa0ECif5nIZSNk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.crl
rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:19:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11565 (0x2d2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916216D, serialNumber=AAFFBAF265AACA4C9517AFEB7F54FCCB0FB1DC1B
Validity
Not Before: Dec 6 15:19:07 2025 GMT
Not After : Dec 13 15:19:07 2025 GMT
Subject: CN=6934496b-191f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:11:fe:ed:04:ff:63:62:6c:4b:c3:1b:b5:5a:
f4:a0:a0:c8:ce:a0:28:6b:ab:04:d5:8b:25:94:6f:
9e:4f:3d:5b:b1:4e:33:73:f9:eb:cc:e3:84:b6:0e:
4a:e8:be:49:85:73:29:5c:99:ca:03:38:14:5f:96:
8d:b2:3c:74:b9:c9:9f:ef:60:51:20:cb:bd:5d:88:
c0:a7:64:c0:05:4f:50:74:97:f9:d9:87:0b:c0:5a:
d5:e2:a2:c6:e5:f1:8e:af:6e:c8:c5:48:43:34:84:
bc:16:3e:63:d6:e4:64:59:53:d4:22:cf:02:19:7b:
16:59:13:7a:f7:3e:ab:79:96:15:28:49:dd:02:ec:
44:77:f2:c6:d1:59:e4:91:c7:76:51:b6:2e:4b:88:
67:aa:77:7b:13:f0:a5:ff:96:3f:b2:ed:b8:28:13:
87:bf:69:79:48:c6:2a:3b:19:3c:72:77:15:21:65:
0a:14:91:c6:6e:ca:5d:98:2b:71:43:1d:7f:17:0e:
71:72:14:5d:00:fe:c0:88:95:5d:c8:11:01:c4:39:
62:b9:ae:8d:f3:20:1b:61:f2:81:fb:8f:0a:a7:51:
31:d0:de:56:fe:82:19:10:d9:3a:e1:ca:1d:b8:b8:
e9:4e:ed:2b:94:71:90:3c:67:31:88:a0:3d:3d:ac:
41:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:22:D4:C5:F9:A4:F6:B0:E1:F8:A9:54:D9:0F:6E:E2:EF:79:3C:15
X509v3 Authority Key Identifier:
keyid:AA:FF:BA:F2:65:AA:CA:4C:95:17:AF:EB:7F:54:FC:CB:0F:B1:DC:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qv-68mWqykyVF6_rf1T8yw-x3Bs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916216D/A3991E24B7C011E3B499F1325911EA32/qv-68mWqykyVF6_rf1T8yw-x3Bs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:09:72:b8:85:0d:d8:b7:96:ab:02:42:34:66:9b:dd:55:85:
05:34:bc:ba:96:38:db:21:24:a1:27:1c:37:2a:2f:87:b1:eb:
b4:b3:3f:21:14:da:28:ca:55:93:2d:c7:76:4f:30:39:65:26:
1c:07:80:c9:24:ee:1a:4a:6d:cf:31:80:bd:3b:94:5b:cb:c2:
7c:1d:bf:b9:ae:b8:01:8a:f0:90:c2:a8:fc:d1:48:f0:d6:e3:
98:34:ca:ae:38:d4:8e:98:6a:84:3e:ca:c3:13:a2:92:59:13:
3a:ad:8d:1a:58:64:a5:6b:44:75:f0:3a:72:dd:3f:b0:18:9a:
99:91:67:0d:77:17:e8:73:01:6c:80:7e:53:5e:dc:57:b9:70:
88:e9:bb:fd:24:78:96:25:e8:db:a0:e4:2c:e4:b3:f6:67:07:
f8:87:82:1e:25:5b:a7:53:e7:af:6f:7e:ad:c9:b2:46:48:78:
00:c4:bb:51:39:7e:92:90:68:25:f5:8d:31:05:e9:20:eb:67:
39:a6:88:27:f1:e0:95:21:64:d1:12:b2:46:85:b6:45:49:ca:
ed:fe:e8:71:00:e1:73:88:48:76:5a:7a:11:ed:c5:f1:ce:8f:
45:ce:ab:b7:78:3b:97:f1:ab:4d:a9:1c:16:0c:34:20:1e:46:
ba:2b:42:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICLS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjIxNkQxMTAvBgNVBAUTKEFBRkZCQUYyNjVBQUNBNEM5NTE3QUZFQjdGNTRGQ0NC
MEZCMURDMUIwHhcNMjUxMjA2MTUxOTA3WhcNMjUxMjEzMTUxOTA3WjAYMRYwFAYD
VQQDEw02OTM0NDk2Yi0xOTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyRH+7QT/Y2JsS8MbtVr0oKDIzqAoa6sE1YsllG+eTz1bsU4zc/nrzOOEtg5K
6L5JhXMpXJnKAzgUX5aNsjx0ucmf72BRIMu9XYjAp2TABU9QdJf52YcLwFrV4qLG
5fGOr27IxUhDNIS8Fj5j1uRkWVPUIs8CGXsWWRN69z6reZYVKEndAuxEd/LG0Vnk
kcd2UbYuS4hnqnd7E/Cl/5Y/su24KBOHv2l5SMYqOxk8cncVIWUKFJHGbspdmCtx
Qx1/Fw5xchRdAP7AiJVdyBEBxDliua6N8yAbYfKB+48Kp1Ex0N5W/oIZENk64cod
uLjpTu0rlHGQPGcxiKA9PaxBgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQi1MX5
pPaw4fipVNkPbuLveTwVMB8GA1UdIwQYMBaAFKr/uvJlqspMlRev639U/MsPsdwb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjE2RC9BMzk5MUUyNEI3
QzAxMUUzQjQ5OUYxMzI1OTExRUEzMi9xdi02OG1XcXlreVZGNl9yZjFUOHl3LXgz
QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3F2LTY4bVdxeWt5VkY2X3JmMVQ4eXcteDNCcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MjE2RC9BMzk5MUUyNEI3QzAxMUUzQjQ5OUYxMzI1OTExRUEzMi9xdi02OG1XcXlr
eVZGNl9yZjFUOHl3LXgzQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBTCXK4hQ3Yt5arAkI0ZpvdVYUFNLy6ljjbISShJxw3Ki+Hseu0sz8h
FNooylWTLcd2TzA5ZSYcB4DJJO4aSm3PMYC9O5Rby8J8Hb+5rrgBivCQwqj80Ujw
1uOYNMquONSOmGqEPsrDE6KSWRM6rY0aWGSla0R18Dpy3T+wGJqZkWcNdxfocwFs
gH5TXtxXuXCI6bv9JHiWJejboOQs5LP2Zwf4h4IeJVunU+evb36tybJGSHgAxLtR
OX6SkGgl9Y0xBekg62c5pogn8eCVIWTRErJGhbZFScrt/uhxAOFziEh2WnoR7cXx
zo9Fzqu3eDuX8atNqRwWDDQgHka6K0Jn
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:41 2025 by rpki-client