This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
File: cqUfTuqiGLczbu_3p6WMsa5UQjk.mft (raw, json)
Hash identifier: EWiVFuw5v+XDQ/B6ffO1S0sYxPQQSkdTu0q1bdpejLA=
Subject key identifier: D0:67:AB:75:54:3C:BB:E7:D7:84:D5:4E:25:F4:C8:93:5D:B9:18:3F
Authority key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
Certificate issuer: /CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Certificate serial: 07FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
Manifest number: 07F3
Signing time: Sat 20 Dec 2025 20:30:24 +0000
Manifest this update: Sat 20 Dec 2025 20:30:23 +0000
Manifest next update: Sat 27 Dec 2025 20:30:23 +0000
Files and hashes: 1: cqUfTuqiGLczbu_3p6WMsa5UQjk.crl (hash: s6rC78MjeWBaGO0vkrh0olEVJpGPBfMUXTCLRa+MyHc=)
2: DAAB94840EC911EBA913852BC4F9AE02.roa (hash: GZbNr4hWJMQHmwZjxnOSE/qUptolcknoCfCUMmvTKYc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 20:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2043 (0x7fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D121, serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Validity
Not Before: Dec 20 20:30:23 2025 GMT
Not After : Dec 27 20:30:23 2025 GMT
Subject: CN=69470760-ec46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b5:ae:fc:f4:57:af:42:89:7a:1e:8c:25:45:
ff:06:73:1c:b2:87:cf:a2:28:b0:a0:80:7f:9b:02:
15:c7:c8:42:ff:1b:87:e7:04:bd:11:19:44:2f:70:
72:eb:31:eb:89:98:74:80:7d:5b:56:6f:69:cd:44:
a7:14:bd:b8:c6:fb:1d:4a:77:85:ac:77:53:78:64:
9e:c0:72:1e:25:7b:07:df:40:a0:f8:8b:ce:5c:70:
c9:24:ac:ab:59:d6:7a:e0:ae:38:cf:28:c6:29:4e:
2a:81:ac:6c:44:1e:ba:12:4d:6e:a3:af:6b:62:7a:
1c:9e:e9:c0:5f:a8:1d:b3:e8:00:81:66:8c:38:ec:
dc:21:95:83:0b:2b:65:79:87:93:8d:d8:2d:a7:a1:
9b:58:43:60:7e:13:d0:bd:1b:be:a3:ef:96:20:c6:
dd:9d:37:e2:9c:b5:86:91:4d:43:ba:06:2b:89:34:
c2:c0:6d:b4:e0:b8:1d:89:cf:b6:28:2c:62:27:ca:
68:0d:95:bd:d9:de:ef:28:f8:1d:09:0a:f8:c9:2a:
83:86:16:c8:c6:cc:94:ce:75:aa:1a:11:6d:10:e2:
1d:7e:a5:95:c2:44:9d:a8:c2:d5:f0:4e:d1:4c:28:
a1:80:a6:73:d4:3d:96:ec:42:aa:24:79:29:75:b7:
b4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:67:AB:75:54:3C:BB:E7:D7:84:D5:4E:25:F4:C8:93:5D:B9:18:3F
X509v3 Authority Key Identifier:
keyid:72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:6d:33:1c:1d:1b:73:94:2f:5a:3b:7c:e1:7c:98:a8:40:60:
8d:50:9c:a8:eb:c5:84:30:4b:cc:15:82:18:b7:68:6b:22:13:
29:02:48:eb:52:82:fb:12:53:8f:e1:f8:88:dc:43:f3:7d:57:
d3:3b:2e:6d:ea:c0:41:29:5d:52:e5:a3:e7:b1:2b:d2:3e:44:
9e:25:59:97:78:74:e9:e9:21:23:7d:e2:dc:e8:39:bd:9c:60:
fb:cf:fa:bc:04:d9:42:d4:f6:67:ba:99:1a:5e:99:89:c9:cb:
12:c0:1a:69:d8:b9:83:ba:06:42:5b:83:0d:5b:d8:6d:b0:b7:
f9:93:21:ee:87:24:05:8a:8b:7c:07:07:9e:27:aa:66:42:3a:
bc:dc:00:c9:7f:09:5f:0c:69:11:1e:f3:85:0a:53:fd:e6:38:
1a:63:33:35:6a:c5:23:c5:d3:ba:eb:d1:34:c6:64:2c:bd:26:
55:85:3c:48:59:91:2b:8e:20:38:f8:2f:e8:11:1b:45:d8:ef:
29:98:c6:7b:18:10:c0:70:2a:3d:6f:96:24:84:fe:0e:a5:1d:
ba:89:3b:80:ca:83:9c:b0:6a:6a:65:88:2c:d5:36:42:5b:fc:
2e:b8:b1:b8:cc:1b:3b:25:cf:fa:23:74:15:67:62:12:9e:47:
bd:6a:41:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0QxMjExMTAvBgNVBAUTKDcyQTUxRjRFRUFBMjE4QjczMzZFRUZGN0E3QTU4Q0Ix
QUU1NDQyMzkwHhcNMjUxMjIwMjAzMDIzWhcNMjUxMjI3MjAzMDIzWjAYMRYwFAYD
VQQDDA02OTQ3MDc2MC1lYzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmrWu/PRXr0KJeh6MJUX/BnMcsofPoiiwoIB/mwIVx8hC/xuH5wS9ERlEL3By
6zHriZh0gH1bVm9pzUSnFL24xvsdSneFrHdTeGSewHIeJXsH30Cg+IvOXHDJJKyr
WdZ64K44zyjGKU4qgaxsRB66Ek1uo69rYnocnunAX6gds+gAgWaMOOzcIZWDCytl
eYeTjdgtp6GbWENgfhPQvRu+o++WIMbdnTfinLWGkU1DugYriTTCwG204Lgdic+2
KCxiJ8poDZW92d7vKPgdCQr4ySqDhhbIxsyUznWqGhFtEOIdfqWVwkSdqMLV8E7R
TCihgKZz1D2W7EKqJHkpdbe0jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBnq3VU
PLvn14TVTiX0yJNduRg/MB8GA1UdIwQYMBaAFHKlH07qohi3M27v96eljLGuVEI5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDEyMS84QjBGOEIwQzBF
QzgxMUVCQTUwNDJDMkFDNEY5QUUwMi9jcVVmVHVxaUdMY3pidV8zcDZXTXNhNVVR
amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NxVWZUdXFpR0xjemJ1XzNwNldNc2E1VVFqay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RDEyMS84QjBGOEIwQzBFQzgxMUVCQTUwNDJDMkFDNEY5QUUwMi9jcVVmVHVxaUdM
Y3pidV8zcDZXTXNhNVVRamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC0bTMcHRtzlC9aO3zhfJioQGCNUJyo68WEMEvMFYIYt2hrIhMpAkjr
UoL7ElOP4fiI3EPzfVfTOy5t6sBBKV1S5aPnsSvSPkSeJVmXeHTp6SEjfeLc6Dm9
nGD7z/q8BNlC1PZnupkaXpmJycsSwBpp2LmDugZCW4MNW9htsLf5kyHuhyQFiot8
BweeJ6pmQjq83ADJfwlfDGkRHvOFClP95jgaYzM1asUjxdO669E0xmQsvSZVhTxI
WZErjiA4+C/oERtF2O8pmMZ7GBDAcCo9b5YkhP4OpR26iTuAyoOcsGpqZYgs1TZC
W/wuuLG4zBs7Jc/6I3QVZ2ISnke9akGH
-----END CERTIFICATE-----
Generated at Sun Dec 21 08:45:03 2025 by rpki-client