This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
File: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft (raw, json)
Hash identifier: hYb62/WP2wt6FZ3SQb3Ej1ERhJXF/5GfHry8tliGpy4=
Subject key identifier: 6E:3C:32:CD:71:1D:5F:04:13:A2:0A:BD:20:09:35:3B:EE:01:7A:CD
Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Certificate serial: 083D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
Manifest number: 07FA
Signing time: Sat 06 Dec 2025 20:29:18 +0000
Manifest this update: Sat 06 Dec 2025 20:29:18 +0000
Manifest next update: Sat 13 Dec 2025 20:29:17 +0000
Files and hashes: 1: qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl (hash: r1k3Hp1rygHjiZ6Z9aeMnRnEpvDCybzKKxjiLmwKl6s=)
2: 66C1BA862FBB11EB9B861059C4F9AE02.roa (hash: cMd/1qRqPVkWlIQVudOBbLGE1UfquRskjOxtjAtMCMY=)
3: 8554A0A86A8A11F0BBF66881C4F9AE02.roa (hash: zJAHsR5vMmBId4rgQblkmv5dzmrkfUHqapxlAFUK3IU=)
4: 26E184C2B56D11F0939EAE46C4F9AE02.roa (hash: j+FZz61mcL5gau5HXVjyeIdIzwjMPpW3ksL4r/zCbuY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2109 (0x83d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Validity
Not Before: Dec 6 20:29:18 2025 GMT
Not After : Dec 13 20:29:17 2025 GMT
Subject: CN=6934921e-e90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:c1:a4:4f:d8:80:44:34:2b:57:53:2c:39:07:
b4:33:62:3b:12:83:4e:3b:97:fd:a3:9b:01:4f:23:
48:b2:36:a2:46:d4:59:9b:8f:60:45:cf:47:2b:60:
fa:00:bd:f7:39:ff:40:e4:fd:69:5b:a6:8c:b6:6b:
bf:7f:bb:eb:48:1d:91:79:36:6e:4f:d1:75:ac:ec:
77:b8:f0:f8:2a:0f:16:9a:d1:91:ad:6f:1f:4e:8b:
ff:e5:6f:82:7b:c2:34:b2:2f:7d:a2:a7:43:9f:b6:
b3:ad:aa:09:4a:7b:ce:99:67:9a:00:67:2b:b1:7e:
e8:da:f6:9d:c1:26:b7:e9:e0:28:fc:ec:2e:c1:ea:
6b:52:9f:dd:4d:70:2d:fc:40:6c:b8:65:e5:56:34:
7b:20:3d:0b:da:c7:67:0a:b1:bf:5c:b4:7c:42:aa:
9b:3e:51:fe:b5:33:f8:c3:cb:a7:7e:df:6a:23:d0:
df:39:ce:1e:e5:da:7e:71:1a:36:0c:82:65:6d:f2:
1a:0e:04:1e:f7:18:dd:3d:a5:e6:e2:8e:a8:fb:95:
9e:1e:40:39:09:1f:d6:22:93:23:4f:74:c7:2b:81:
23:2c:a0:a5:d8:28:11:4d:13:5b:e5:97:56:18:8b:
9f:e9:2c:23:7c:dc:5b:6e:90:2f:e0:0e:d7:32:c7:
e3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3C:32:CD:71:1D:5F:04:13:A2:0A:BD:20:09:35:3B:EE:01:7A:CD
X509v3 Authority Key Identifier:
keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:38:8b:de:e5:15:3d:56:83:33:62:0a:27:7d:19:b2:f4:32:
f7:ad:0a:56:02:06:91:10:9f:eb:95:7c:c9:4d:97:1c:1e:53:
47:0d:92:d3:83:a7:dc:25:73:7f:d3:28:da:30:1f:e6:e2:f2:
25:87:f3:d3:4e:a5:1e:37:8e:21:71:1e:b9:5d:14:fd:04:65:
22:e9:fe:9e:f1:d2:05:b2:77:80:3d:22:23:55:55:fe:e4:2a:
88:b6:56:00:b2:c1:3f:6b:4c:a1:8e:16:bc:bc:4c:ac:bc:6a:
f5:7e:61:49:e7:44:1b:2c:b2:1b:f5:9d:46:50:4c:30:fb:57:
0c:2f:8d:6b:2e:37:58:46:1a:9c:48:86:85:30:01:e8:62:2a:
e5:70:d3:cd:75:23:4d:46:1a:ad:bc:bd:5e:75:8d:02:cf:d7:
50:e5:80:14:8d:95:6a:79:56:d9:6a:85:ad:4d:35:f8:fb:67:
2b:66:f9:15:b3:5c:6a:9b:03:60:a8:fd:34:7c:df:e1:70:c9:
b1:32:d7:5a:dd:21:dc:4e:83:9e:5d:2e:31:8b:fa:78:1b:19:
4e:8e:1e:14:7b:2d:a1:12:e1:3c:90:70:de:76:d6:a1:20:72:
c7:42:bc:e9:e2:02:0e:b3:ee:95:9c:c0:bb:a7:f0:9e:49:de:
ed:7e:32:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:57:29 2025 by rpki-client