This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
File: QJOHCXJ0OMjB3r_9BBWQWEggxug.mft (raw, json)
Hash identifier: hX2SlMoU5wEX68tHXK/VihMGutpZDU605As4evmAbBQ=
Subject key identifier: E2:68:8D:DD:D0:72:C5:61:F9:6B:A3:30:1A:94:0B:D0:04:3A:F0:0A
Authority key identifier: 40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8
Certificate issuer: /CN=A917618F/serialNumber=40938709727438C8C1DEBFFD041590584820C6E8
Certificate serial: 1317
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
Manifest number: 130D
Signing time: Sat 06 Dec 2025 16:34:06 +0000
Manifest this update: Sat 06 Dec 2025 16:34:05 +0000
Manifest next update: Sat 13 Dec 2025 16:34:05 +0000
Files and hashes: 1: QJOHCXJ0OMjB3r_9BBWQWEggxug.crl (hash: pIoUDRIhUdXLKEA1r/k+vozj62tQo14mpoQL+uRO4GQ=)
2: 2FE4DA1EC2E111E8A19CB72FC4F9AE02.roa (hash: AtIY01QzRR0A54d2DL/Ntfs13u3zmiVedAjhi5vQD2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl
rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 16:34:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4887 (0x1317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917618F, serialNumber=40938709727438C8C1DEBFFD041590584820C6E8
Validity
Not Before: Dec 6 16:34:05 2025 GMT
Not After : Dec 13 16:34:05 2025 GMT
Subject: CN=69345afe-4a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:54:83:ff:f8:6b:aa:ec:74:07:1c:8f:01:c0:
f0:0c:16:40:2e:5f:15:93:58:3d:77:4c:d4:51:9d:
b2:5a:ee:56:0f:19:3c:0f:51:4f:d0:06:6c:b5:5e:
96:7e:c1:a4:95:c7:cc:35:b1:59:68:de:24:cd:93:
59:75:1a:9b:71:44:3a:de:d9:c5:19:a8:5d:39:cf:
d2:31:90:7d:44:07:54:3a:32:31:00:cb:7b:9c:15:
2a:d9:4b:8c:5d:16:ed:f2:c7:7b:c0:f3:9b:03:06:
42:42:9c:85:75:3b:a4:c7:fa:de:38:ed:b7:42:94:
ab:26:75:78:4b:8b:b1:f9:19:ee:aa:c1:3e:d2:e8:
4f:3e:d0:37:45:7a:86:36:cd:d3:63:29:07:d4:20:
11:49:9d:5e:f8:a2:60:45:59:92:41:6e:ef:96:f5:
68:e8:2f:04:f2:85:36:04:a6:ae:92:cd:fa:1b:87:
ec:28:5d:ea:9a:c6:4c:88:a2:92:9b:bb:1a:07:c7:
c7:37:a6:1c:f2:86:6c:99:b0:3a:af:93:30:3f:60:
0d:48:91:f4:29:af:50:8e:c4:d1:9c:fc:a4:26:30:
e0:8c:6b:7a:e5:08:57:67:0e:b8:fa:c7:52:3c:40:
b5:48:d7:ba:72:9c:be:ba:0d:f4:7d:a4:45:37:29:
1c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:68:8D:DD:D0:72:C5:61:F9:6B:A3:30:1A:94:0B:D0:04:3A:F0:0A
X509v3 Authority Key Identifier:
keyid:40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:89:23:aa:04:68:dc:95:1d:ea:13:bd:d2:6a:eb:58:10:ea:
10:a1:4f:55:ce:b6:b5:4e:31:83:89:90:ed:b0:5b:85:90:7d:
9b:0a:43:33:60:08:31:9c:13:4b:79:f4:65:89:d6:c2:29:69:
ca:d2:d9:77:44:4f:ad:05:f7:21:d2:b4:ac:15:2c:29:61:3e:
9c:61:09:c7:47:78:c9:88:df:a7:7e:8d:20:ae:91:c9:2d:a4:
6d:74:42:4f:a6:78:36:83:c5:a7:47:4a:5a:82:54:a3:20:38:
e9:ac:8c:cc:96:32:86:30:92:b1:d4:f8:c7:b0:87:8e:8a:68:
4b:bb:23:1a:72:ee:22:16:86:6d:47:db:25:5b:f6:92:26:db:
29:c7:92:b2:a7:ae:dc:6c:f7:81:f2:6a:29:f0:2f:bf:bf:ac:
41:da:bc:f9:1e:2b:76:b9:48:9a:93:ca:6e:ec:85:5a:28:bf:
9a:30:94:c8:ca:3d:6a:d9:75:bc:b0:e6:e2:dd:c5:b8:6f:a4:
87:3d:d8:90:85:f6:f8:7e:98:d1:f3:15:a9:76:86:46:61:22:
c3:da:c7:84:cb:5c:35:b3:69:08:80:18:f8:e2:8c:23:0a:82:
41:03:d2:3b:c2:bb:2c:05:61:fb:e2:78:42:9f:e8:58:b9:6a:
cc:d0:50:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:04:29 2025 by rpki-client