This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
File: qB0VXKQErkFFeBrwXrU6Ehni4GU.mft (raw, json)
Hash identifier: gCU2BryBOWEKTeVMfyJwdG4I5UIBOYlz9HSPLMOS9Kc=
Subject key identifier: C1:80:85:43:59:2F:45:11:3C:B9:71:C0:5A:50:1C:9B:16:73:84:B8
Authority key identifier: A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65
Certificate issuer: /CN=A91C31B7/serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065
Certificate serial: 0122
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
Manifest number: 011F
Signing time: Fri 05 Dec 2025 02:50:38 +0000
Manifest this update: Fri 05 Dec 2025 02:50:38 +0000
Manifest next update: Fri 12 Dec 2025 02:50:38 +0000
Files and hashes: 1: qB0VXKQErkFFeBrwXrU6Ehni4GU.crl (hash: aLXOS1HyTXBvAUSt/yLgRasOd+hv4HgWuXW9pXSat7k=)
2: 42C6F6041E6F11EF898C1E38C4F9AE02.roa (hash: WVfFVr8nZrz60GI+g0Deoi4qcsL8XuNjzkTeXFJeRz4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl
rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:50:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C31B7, serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065
Validity
Not Before: Dec 5 02:50:38 2025 GMT
Not After : Dec 12 02:50:38 2025 GMT
Subject: CN=6932487e-e5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f7:79:d4:c0:f4:85:d8:ad:47:fc:18:42:82:
1e:e8:21:45:b7:4f:55:f2:e6:04:bc:99:a8:66:9f:
22:e5:a9:4d:e9:90:8f:9f:46:84:52:0d:d7:bb:6a:
cf:d0:9d:b2:dc:6c:25:92:3e:1c:8a:bc:05:d3:67:
43:00:1e:1c:42:9c:ef:1d:36:12:20:3e:4f:fd:8a:
d8:00:2e:d6:03:ad:e9:a2:fd:ae:47:1c:6d:66:c4:
d4:85:95:72:37:05:a1:f4:18:85:3c:fe:6c:17:9a:
cd:d5:f6:57:cf:a8:4f:86:31:34:71:87:66:e7:f7:
91:df:5b:cf:89:a4:7d:87:e0:4b:7b:a9:52:1f:1e:
ac:6a:1f:34:2c:aa:5e:b4:9d:02:a4:d7:94:49:0f:
7a:e0:0a:d7:c6:41:69:7a:8e:37:fc:06:7e:14:ed:
f8:0b:56:cc:b0:bc:58:4e:d9:b2:6c:dd:43:3e:0f:
18:1a:07:3e:a3:2c:c2:e0:09:78:13:17:fe:ad:86:
f9:25:69:ff:1b:d9:45:e7:46:a1:bd:0e:45:5b:31:
34:88:94:80:c2:ba:12:4f:18:e1:23:f4:95:47:39:
0d:e9:4a:4d:8d:3a:77:bb:ba:cd:0f:11:d8:86:61:
ab:f2:ef:1a:4f:b3:aa:34:0b:77:3d:7a:33:63:b1:
de:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:80:85:43:59:2F:45:11:3C:B9:71:C0:5A:50:1C:9B:16:73:84:B8
X509v3 Authority Key Identifier:
keyid:A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:01:96:f2:c9:3d:d7:0c:1d:ef:bb:a5:4c:89:94:0b:fa:25:
a1:c0:14:8f:49:07:db:43:d3:fb:6f:f3:fe:42:74:1e:6f:29:
44:43:ca:d6:ca:17:da:e6:b6:f4:4b:a1:57:2a:ac:63:b4:18:
6c:72:c7:fd:e9:55:a5:5f:6b:56:c7:6d:7b:56:fd:8c:af:bc:
3b:ea:94:b8:77:3c:a4:81:c0:18:9a:22:ea:e8:e5:d7:99:1c:
7d:84:56:79:6b:32:82:3f:24:c9:40:3e:a9:85:6c:ca:41:a6:
62:1d:6f:04:74:09:34:99:64:91:d2:4f:ed:80:b5:5a:35:04:
91:d8:57:41:b3:50:6e:68:64:c0:ff:69:34:71:0f:f4:83:c6:
53:ff:98:71:80:6b:a5:be:3c:75:25:89:90:c8:f2:80:d9:8b:
96:05:0f:2f:a6:a0:20:b1:dc:79:e3:e5:25:1c:69:42:4d:e7:
f9:fd:75:c2:1b:95:46:7b:c1:da:bf:52:ea:1c:d6:c2:35:26:
70:bc:ff:9b:03:b7:a8:40:45:12:cf:29:5b:a2:5b:93:5c:fd:
eb:72:d9:7c:d6:0e:61:59:e4:98:82:fc:29:f9:95:b7:b2:79:
5e:84:c7:e1:43:ff:17:df:ed:52:86:b0:18:ab:f1:f7:e8:ba:
77:89:44:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:25:07 2025 by rpki-client