This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
File: qAw2f5IilG-YuDa86PbQA2SIHHw.mft (raw, json)
Hash identifier: 7dcIEYIfSx3Ey25QYeJDAXZx9xahkJ0LN0jcunxzy34=
Subject key identifier: A3:3C:D9:9D:FE:D1:0C:0A:58:32:35:80:23:6C:88:6E:4C:FA:A8:DD
Authority key identifier: A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C
Certificate issuer: /CN=A919D1D9/serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C
Certificate serial: 0E35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
Manifest number: 0E13
Signing time: Sat 06 Dec 2025 17:16:49 +0000
Manifest this update: Sat 06 Dec 2025 17:16:48 +0000
Manifest next update: Sat 13 Dec 2025 17:16:48 +0000
Files and hashes: 1: qAw2f5IilG-YuDa86PbQA2SIHHw.crl (hash: KYyOP8qtxTo7KRrj1NmOOkYjjwPyc6XgOqXY7JYRV08=)
2: C2ED1EEE617111EBBC678459C4F9AE02.roa (hash: /hGH0Pm/VcL/t48Buv7bSF4xPC6xqGHOH5JeW2XnqTU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl
rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3637 (0xe35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D1D9, serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C
Validity
Not Before: Dec 6 17:16:48 2025 GMT
Not After : Dec 13 17:16:48 2025 GMT
Subject: CN=69346501-80dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:5a:59:39:b8:6e:53:b7:fe:ad:1b:7c:0b:
16:ff:02:52:51:4d:28:9d:7f:c9:44:c4:38:73:c0:
4c:59:49:c6:ec:87:8c:a5:43:29:16:95:11:02:f8:
58:d6:b9:10:80:5c:47:01:54:43:aa:7b:0c:ec:17:
91:d8:79:50:09:7d:9a:01:cb:1b:79:08:49:79:53:
51:85:51:2e:26:0f:45:1c:b9:ee:30:9e:7f:ca:69:
63:50:61:36:29:d0:5a:42:b9:c6:67:d6:44:68:54:
c5:52:1a:fd:38:77:bb:48:08:97:f2:a2:0e:6d:58:
9d:5c:ee:3d:38:d6:7c:7f:23:e7:8a:60:b9:98:9a:
8a:69:83:0e:5e:a6:17:f6:f2:f0:a9:19:7a:04:d9:
7c:f0:67:98:a1:91:f4:2a:6a:da:43:9b:e1:11:1e:
e5:04:6f:79:42:4e:54:a7:24:ff:5f:52:23:25:ed:
16:22:1f:eb:18:17:7f:89:39:49:3b:8f:c9:5d:9f:
b2:96:06:19:61:96:ba:2f:da:d4:d3:53:87:29:24:
9f:c9:67:27:53:96:83:11:45:63:f6:cc:ba:3c:cc:
a3:db:25:97:ca:6c:fa:a1:5e:c1:f2:6c:cc:ef:6a:
25:c0:3c:59:35:11:bc:53:2a:63:f9:b7:5f:a6:86:
1d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3C:D9:9D:FE:D1:0C:0A:58:32:35:80:23:6C:88:6E:4C:FA:A8:DD
X509v3 Authority Key Identifier:
keyid:A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:29:8b:35:b9:97:97:46:4f:d7:3b:2a:04:68:c1:14:0f:68:
56:b1:fe:e7:be:11:66:6f:06:9c:cf:31:bc:09:fc:f3:d8:b3:
92:b8:f5:dc:08:10:ea:88:f7:32:0b:de:4f:8e:72:6b:09:6a:
f9:13:19:80:09:fe:94:5f:2a:5f:4a:d2:b9:b7:9c:77:45:dc:
50:95:37:b3:d2:34:cb:80:b4:34:70:c9:95:80:cf:c1:78:34:
a8:49:1b:5f:b1:4a:15:b1:b6:40:bf:70:a0:ec:a6:d6:38:ac:
5e:76:0b:eb:e6:60:3e:23:35:f5:91:ce:ed:df:4c:8d:71:10:
27:ae:bf:54:e5:03:bb:f2:03:6d:a0:15:02:bb:d6:36:46:8b:
2a:96:b6:d9:a7:4b:46:df:3f:f2:65:4a:0c:75:e7:24:c7:ec:
a4:cc:3c:9a:d5:7c:61:13:cc:41:19:33:f4:85:87:bd:75:cc:
51:5d:58:9c:a3:23:f4:24:54:c8:52:2f:91:3f:64:91:55:1d:
96:0f:8c:7f:18:59:f4:1a:c2:5b:96:5a:9f:7c:b8:dc:db:2f:
13:a4:f5:2e:86:ee:9b:81:53:0e:76:f2:25:9f:77:3b:cd:cb:
d0:1c:79:81:2a:e4:8e:c5:0c:85:6a:bb:b1:33:c7:e8:bf:1c:
3b:e6:c8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:22:33 2025 by rpki-client