This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
File: cqUfTuqiGLczbu_3p6WMsa5UQjk.mft (raw, json)
Hash identifier: 3tf+5RINYjCG/cC7Iq87TTd1Az3wWwU3oyZuSp2r8D4=
Subject key identifier: 67:F4:9C:C0:3F:07:22:1F:E2:95:0F:C2:90:05:4A:3F:D1:17:C4:CD
Authority key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
Certificate issuer: /CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Certificate serial: 07F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
Manifest number: 07EB
Signing time: Thu 04 Dec 2025 20:10:32 +0000
Manifest this update: Thu 04 Dec 2025 20:10:31 +0000
Manifest next update: Thu 11 Dec 2025 20:10:31 +0000
Files and hashes: 1: cqUfTuqiGLczbu_3p6WMsa5UQjk.crl (hash: VtFoUyfBg+aGPvznQ0eGl4MdW59GdD0AR1jejVxBFrc=)
2: DAAB94840EC911EBA913852BC4F9AE02.roa (hash: GZbNr4hWJMQHmwZjxnOSE/qUptolcknoCfCUMmvTKYc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:10:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2035 (0x7f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D121, serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Validity
Not Before: Dec 4 20:10:31 2025 GMT
Not After : Dec 11 20:10:31 2025 GMT
Subject: CN=6931eab7-abfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fe:26:02:56:66:c1:8c:50:c9:ac:e9:c4:a3:
e8:45:5d:9c:d6:96:1d:d4:f7:5d:32:a3:1f:54:67:
93:16:01:a5:28:d0:95:5b:e9:1d:c2:10:dd:15:9f:
b8:f3:93:51:bf:ab:bc:5a:46:77:25:f4:76:0d:93:
e6:cf:9f:46:21:42:58:e9:3c:46:21:b0:46:38:8d:
f9:b3:2b:84:6b:d1:10:ad:80:26:5b:30:a9:32:a2:
c5:cf:c4:97:01:a3:a0:88:bc:10:1c:f8:71:b4:35:
b9:7b:96:3b:bb:08:d2:c2:af:44:d7:35:c8:9d:21:
88:97:d5:1b:06:9a:a2:b9:8b:11:2d:b6:14:1f:c2:
26:37:ef:c8:93:6b:9c:3f:a1:3a:fb:6f:4a:90:bf:
d5:6d:db:55:66:30:fd:c9:f8:42:4c:ce:1b:a8:d7:
0c:12:6e:bd:b3:86:30:7f:da:97:85:fd:23:09:6d:
75:b1:d1:c1:a7:ae:b9:16:d0:d4:4e:c3:77:85:e4:
1a:01:75:c9:33:4b:4e:ec:10:df:f9:ec:60:74:cc:
60:92:87:29:80:46:31:ac:44:3a:c2:df:f1:2f:cc:
45:e0:cb:36:24:fb:5c:91:1f:52:23:42:ae:04:f7:
50:49:4c:91:56:0b:4e:10:25:5c:db:2b:ee:1d:ac:
ec:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F4:9C:C0:3F:07:22:1F:E2:95:0F:C2:90:05:4A:3F:D1:17:C4:CD
X509v3 Authority Key Identifier:
keyid:72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b1:90:e0:e5:eb:eb:f5:aa:75:f3:00:51:e0:2a:40:b8:bb:
47:79:77:02:0e:0b:9d:43:26:22:e8:c6:92:c8:9e:24:02:e8:
5b:09:1f:81:2c:5d:f3:39:08:24:19:bd:bc:e8:3e:25:3c:c9:
cd:35:66:06:92:a9:d9:e1:68:c6:e7:24:24:e4:43:c9:a4:13:
40:32:88:94:aa:8d:d7:57:f4:02:fa:8c:d6:24:ed:57:44:58:
c9:09:21:90:49:c4:55:98:90:22:77:71:32:61:67:fc:a2:82:
ba:ab:9a:e4:3e:78:14:dc:d6:36:40:7a:05:19:1d:b2:de:bc:
9a:5e:59:f6:f6:af:71:0b:db:bd:e4:6b:ac:07:85:ff:ad:1f:
f5:33:4b:bb:2d:74:40:4d:0e:3f:66:bd:65:1f:04:a5:48:dc:
02:5f:15:05:1e:14:3e:67:a0:4d:ff:9e:4c:a9:e1:23:38:2c:
02:8c:95:bd:6b:97:a5:5d:bb:f5:20:d9:59:b1:8f:72:6d:ee:
5b:de:01:cf:30:32:42:ec:7f:ac:4f:c2:ef:06:12:60:f5:22:
24:63:24:4e:74:52:fd:09:13:61:9f:43:f3:77:04:d9:34:0e:
47:ee:3d:04:38:c2:37:9b:c1:2f:63:1c:6f:48:bc:8f:2b:ee:
b2:bd:f3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:52:27 2025 by rpki-client