This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
File: qoXM0t0-HAA79y_1PljHIA588Kg.mft (raw, json)
Hash identifier: CfFOYuyfOm86oWQqIdUq39iE/zecW6uJ8yFFgGkFYjA=
Subject key identifier: 45:7B:33:CA:B7:93:8F:3F:D9:4D:A6:01:43:8B:61:5E:72:08:2F:9A
Authority key identifier: AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8
Certificate issuer: /CN=A916D29F/serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
Certificate serial: 0EFC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
Manifest number: 0ED8
Signing time: Sat 06 Dec 2025 17:06:16 +0000
Manifest this update: Sat 06 Dec 2025 17:06:15 +0000
Manifest next update: Sat 13 Dec 2025 17:06:15 +0000
Files and hashes: 1: qoXM0t0-HAA79y_1PljHIA588Kg.crl (hash: 5YB4w5e1V3hovrQyfMU2nN0KhIAhq6YmuT7077IUVNo=)
2: 8D655C9656A511EA8FAB974DC4F9AE02.roa (hash: 8zgED/u5BJ4UZdNgGr2psVcwZmXJQhr/Sce32Chr/as=)
3: AA135886D75411EFA0D6BE34C4F9AE02.roa (hash: FL9RyjoTD6DVuuRd2ISuSk98bbRopCzPxXp8wZNKZas=)
4: FA9D67D07C5711F0AD80C25CC4F9AE02.roa (hash: IfHyorIOQ7bueAyQaemWspNEc+/bGan7gB84RC3Kv/Y=)
5: 3FCD146C97D911F080901462C4F9AE02.roa (hash: zFjZk2S9ws5t5ZdI9szHa+nHw5gtdNKIsc6poD8Md0k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl
rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3836 (0xefc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D29F, serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
Validity
Not Before: Dec 6 17:06:15 2025 GMT
Not After : Dec 13 17:06:15 2025 GMT
Subject: CN=69346287-5048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:83:bf:6e:6d:21:0b:6c:ef:d0:b0:9d:13:a9:
97:1b:3c:a8:9c:21:5c:93:ba:14:c2:8c:9e:b4:bb:
42:2b:8b:f9:63:80:83:cd:23:02:e6:d0:4b:94:11:
49:bd:9b:e3:b6:f8:91:72:45:2c:64:d2:e9:12:78:
90:08:f8:5e:c7:62:9f:9e:2e:07:d5:61:0a:25:3d:
b6:3d:44:9a:f1:c8:9c:f1:f0:03:dc:ef:86:0c:0c:
85:6c:bb:30:b4:3a:ed:6c:bf:fd:92:2b:8d:50:92:
8b:a2:57:44:fa:89:2b:a0:70:e7:6b:75:3c:ba:98:
75:1c:75:25:f7:3c:94:06:1d:5c:4d:af:f4:47:e0:
01:97:8a:cd:1d:a4:a1:f2:5e:61:1f:1c:7c:3b:01:
5d:74:7d:99:e1:bf:52:1d:1a:8c:16:aa:5a:b8:b4:
f5:4f:2f:f3:9a:5c:53:01:50:d7:18:01:f6:93:1a:
50:3d:57:12:88:22:e5:bc:1b:61:d3:b9:85:b2:65:
90:00:34:33:07:b3:30:0f:f3:21:90:91:57:4d:ad:
59:a6:a6:b9:87:9b:72:7f:b5:45:61:fd:f2:f3:f4:
c5:63:66:5e:01:c9:20:c1:63:81:89:bc:2f:d5:b8:
23:2a:e7:08:be:d5:f7:87:f6:24:e3:99:37:5b:ab:
7c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7B:33:CA:B7:93:8F:3F:D9:4D:A6:01:43:8B:61:5E:72:08:2F:9A
X509v3 Authority Key Identifier:
keyid:AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:bc:35:1c:1f:48:4c:ec:05:c3:fb:bc:1b:1b:76:e2:83:fb:
a2:ac:28:ef:75:e0:b9:58:d0:f3:e0:56:1a:53:17:57:8a:54:
45:70:c7:07:c0:b5:b4:0d:48:db:cd:51:89:f8:54:d0:72:37:
ae:08:52:76:55:34:50:19:78:3c:25:53:25:6d:b1:f1:a2:f6:
90:bc:cb:45:b0:b2:bd:54:2b:9c:b6:fb:fe:c3:28:b3:11:7c:
7e:8b:60:b9:a8:d5:58:7d:be:01:84:a9:ad:52:cb:ef:d1:6c:
b0:d2:f1:1f:da:7e:a2:f9:ea:c3:6d:0d:f1:1a:1c:1a:26:20:
5f:77:d6:d4:d7:52:92:ed:11:f9:3e:ef:93:82:30:98:b2:f1:
ac:f4:f7:ce:15:de:45:f2:95:18:1e:72:1c:f8:84:1d:f5:c2:
1c:ad:cd:ec:0a:04:a3:a4:92:8d:a4:c8:fb:dc:75:7a:6a:62:
10:b4:1b:62:3b:25:e7:5f:32:03:bd:29:cf:f6:61:17:82:c0:
a7:16:da:32:28:45:8c:c7:0b:39:2b:71:61:51:cc:26:a0:f5:
1e:2e:13:6d:fb:62:9d:ac:6c:e5:c2:14:4b:df:46:33:c9:dd:
cc:e5:b1:57:2d:4c:bc:12:5f:26:90:a1:e3:d8:4b:19:83:ab:
84:30:cd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:45:21 2025 by rpki-client