This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
File: qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft (raw, json)
Hash identifier: Hgo8s1MsIJnJdlsPRVkACemX6/lCTN+kZclErLyWweQ=
Subject key identifier: E6:59:22:0A:7A:97:17:47:49:A1:A7:1B:90:D6:16:FC:5D:C7:29:B6
Authority key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
Certificate issuer: /CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
Certificate serial: 013D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
Manifest number: 0130
Signing time: Fri 05 Dec 2025 02:47:31 +0000
Manifest this update: Fri 05 Dec 2025 02:47:30 +0000
Manifest next update: Fri 12 Dec 2025 02:47:30 +0000
Files and hashes: 1: qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl (hash: B24vd9mzTQjfKpVU8xI4ODUP6LztmK7V3g4RyoBZDDU=)
2: 362B52EA31C511F0B796F75DC4F9AE02.roa (hash: 32ChZuN5aLmUO2MNOxKOn9C6wDIBYJGI4WGeVTj7tjg=)
3: 77BB354CC1E711F0BF1FBB0DC4F9AE02.roa (hash: GnAy7gUWULKK+0ha0Z5VnbvN7dc+3rJnS4hS/5snCUs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl
rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:47:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317 (0x13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91705D7, serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
Validity
Not Before: Dec 5 02:47:30 2025 GMT
Not After : Dec 12 02:47:30 2025 GMT
Subject: CN=693247c2-48fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ad:2d:ae:80:2e:8b:38:ac:ae:1c:5c:2e:6b:
c9:31:63:7f:5e:a2:03:13:22:cc:c8:7c:7c:77:e0:
9c:22:d1:0a:da:6f:1f:7f:f7:54:8f:f4:ea:d3:fa:
e8:9d:ac:6f:e4:02:c2:99:11:d3:f8:d5:46:ce:73:
c5:d8:85:73:bc:30:a4:64:a8:89:28:e2:0c:a6:8c:
9a:5b:04:bd:f1:e2:82:ef:6b:3a:56:c2:71:f1:e8:
9f:89:e2:53:9e:2b:64:e7:95:1b:f3:14:46:1b:2e:
48:80:52:00:c0:d7:00:ad:c1:eb:00:5c:1c:3d:04:
d3:64:5f:81:70:37:80:3c:bc:92:8f:2f:7a:9b:80:
4c:f4:e1:3e:2e:dd:6a:45:58:2a:d1:9e:b9:ab:11:
65:44:05:2a:0c:1d:cf:cf:04:72:f6:d7:74:cd:4b:
8e:b6:39:bd:ae:3c:1c:13:83:3f:8e:61:cb:11:40:
6e:92:e2:cb:d8:5a:96:03:15:9e:e7:06:7f:44:95:
23:25:6c:95:cb:c6:a4:35:23:76:29:28:11:6e:97:
b3:a0:2b:da:59:25:a1:38:b3:9e:e2:c1:09:49:8d:
8a:68:f8:c2:92:e9:1c:d6:8d:36:45:26:9c:60:d2:
19:07:e8:b2:cf:c1:e9:e6:27:53:8a:f3:7d:4a:0c:
3a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:59:22:0A:7A:97:17:47:49:A1:A7:1B:90:D6:16:FC:5D:C7:29:B6
X509v3 Authority Key Identifier:
keyid:AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:85:f8:1a:31:db:ab:6f:07:83:12:6c:49:31:2a:c0:bd:3b:
97:d6:48:f9:9f:60:e8:f5:92:21:2b:b0:2f:7f:be:bf:7d:db:
8f:eb:72:18:93:20:d5:ff:f7:9d:ea:38:fc:db:4d:b3:cb:32:
22:21:a2:6a:00:ea:46:a8:4b:7b:8d:75:07:7d:2b:83:17:24:
25:bb:e5:00:8e:cc:c7:b0:dc:97:64:a2:78:e3:02:b2:cd:4d:
20:d4:c1:42:64:91:67:52:f1:36:7f:96:02:97:03:82:86:84:
49:71:8f:8e:f1:67:ee:e2:40:bf:63:d5:87:3e:14:a6:6a:36:
40:d0:22:77:2c:16:bf:34:43:0c:30:d1:7e:b8:c9:6c:35:91:
9d:ad:2a:d4:8e:8c:67:93:23:0b:15:6a:9a:d7:3b:49:90:4d:
24:52:b5:de:e0:ec:38:b6:a4:09:86:0e:53:e3:06:83:d4:f3:
e4:5e:4e:f1:32:ce:a8:82:60:98:bb:18:e5:9a:54:14:ea:f8:
25:2e:9f:df:b4:11:37:aa:69:72:97:91:0a:1c:cc:3f:86:d9:
ea:f7:81:8d:34:6e:4c:8b:c5:31:12:ef:1e:08:3b:fb:3e:13:
76:66:00:88:3b:1c:66:51:e8:36:fa:1b:19:e2:c0:ad:73:a5:
08:7a:dd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:13:40 2025 by rpki-client