This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
File: QOWCY5crniQUK6qbWvoFNIGjcZ4.mft (raw, json)
Hash identifier: wsxjA1l1uMJPhfndA4jmcHXJ1jRduUs9Mr+3BI4ZG0E=
Subject key identifier: F7:02:92:C4:FF:AA:70:B4:51:C1:FD:58:F5:F1:AA:0E:DB:A2:73:10
Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E
Certificate issuer: /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E
Certificate serial: 029C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
Manifest number: 0289
Signing time: Thu 04 Dec 2025 23:58:14 +0000
Manifest this update: Thu 04 Dec 2025 23:58:13 +0000
Manifest next update: Thu 11 Dec 2025 23:58:13 +0000
Files and hashes: 1: QOWCY5crniQUK6qbWvoFNIGjcZ4.crl (hash: pXOhkO6Z5oJWvD1emt6ub1wzkAQk9LtVfty8LW1zt08=)
2: EE83B18A7F7E11ED86E00936C4F9AE02.roa (hash: foc/Rgh+D7sXQX3ATXjse5P2fbG3rVc6pPyYs/SuwvQ=)
3: 4F9ACB7461F511F0A6467D40C4F9AE02.roa (hash: nLXw8xHgVCwgAvRtHZxNQ9V3CXfxyMaz7CQisoDfvuU=)
4: 94855EA0357711EDB81B8A34C4F9AE02.roa (hash: rj4BSUozmBkphVBEoUkEwSqqxoFitssfBqyMGi95Tf8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl
rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 668 (0x29c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C31A2, serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E
Validity
Not Before: Dec 4 23:58:13 2025 GMT
Not After : Dec 11 23:58:13 2025 GMT
Subject: CN=69322015-acb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:0c:35:a7:cb:9b:51:8b:5b:0f:aa:a9:e3:
2e:aa:e0:dc:2b:f9:b8:8c:87:e0:6a:27:e0:7c:14:
02:5e:57:42:60:38:67:22:41:e9:e3:bc:f5:e3:9a:
25:d7:3b:cd:99:de:d8:a7:42:39:d6:83:53:6c:94:
54:d4:da:04:6a:77:14:dc:4a:da:bd:f4:b1:b6:7c:
6a:4f:05:82:d2:e4:d6:ad:74:52:8c:2c:3b:e0:e5:
f7:f7:19:74:ae:e3:97:7b:31:c3:a0:55:32:8f:77:
a1:76:4e:32:cb:57:50:ec:58:ea:f7:e5:8c:f0:50:
ed:7d:b2:22:b0:dd:5d:52:57:8a:fc:d9:2f:55:3a:
66:b9:21:1e:38:aa:a7:a4:f5:c3:57:dc:27:00:b7:
da:fb:98:59:b2:21:af:87:36:6d:b2:79:66:ca:52:
5e:6a:24:38:2e:93:1d:a4:d5:1a:f4:6a:53:35:6a:
30:47:d7:c3:2d:3c:8e:f5:8a:d2:c9:ee:b0:e7:5a:
8d:90:f1:01:a5:8c:4a:2f:e7:4e:b7:67:e3:bc:c4:
39:8c:da:d1:24:ab:ae:66:7f:b9:f6:04:4e:aa:63:
f9:84:16:ef:a8:08:76:0d:81:e9:ec:07:0e:6d:97:
e0:d7:b0:bd:97:69:23:91:97:cf:5e:20:d3:d0:0d:
a0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:02:92:C4:FF:AA:70:B4:51:C1:FD:58:F5:F1:AA:0E:DB:A2:73:10
X509v3 Authority Key Identifier:
keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:ad:d7:fb:5a:8e:0b:e8:63:21:6b:e3:48:91:c4:6f:ef:ac:
df:b5:61:7d:5c:f0:fc:55:a4:ef:6e:a4:c7:c6:47:98:7d:c7:
c3:89:11:cc:69:d6:77:3d:7b:2e:a0:a4:3e:f8:2d:f0:ea:94:
90:07:a0:06:81:3e:81:65:f5:a2:93:4c:a8:b5:6b:d5:79:36:
a2:d9:9d:96:ac:25:9d:c5:9c:a0:5d:9f:89:60:27:1b:cc:21:
c0:09:9f:68:fa:4d:4c:e4:52:b3:9e:b7:1e:ea:81:c8:48:53:
e3:94:8f:18:22:bd:39:c6:1a:94:3b:8d:e9:83:4f:0d:8f:a5:
aa:a6:44:e5:70:8e:a3:27:ea:f2:ff:ab:8e:86:7b:60:11:fd:
83:57:41:75:d3:62:77:d9:8c:af:84:13:1a:45:27:9a:44:77:
d9:b8:21:ad:71:2f:7d:66:8c:db:14:85:93:9a:ef:56:bd:bb:
21:08:ce:7d:d6:4d:47:09:52:b6:aa:2d:85:51:84:f7:67:0c:
5d:0d:a3:10:55:15:3d:70:a7:2c:5b:36:24:66:bb:87:a8:2f:
41:f4:a1:09:48:47:45:5e:fd:1e:7b:b7:5d:c0:ee:0f:3b:14:
df:92:ec:40:14:16:00:90:7c:a4:aa:0c:55:4e:d5:a4:95:28:
93:91:03:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:44:34 2025 by rpki-client