This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
File: quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json)
Hash identifier: sQfwivgUupmuomaLuqmuL9FufEuFVNdvhVgw7VPH06E=
Subject key identifier: 37:60:5F:0E:C3:4F:50:6A:68:F8:12:98:08:03:3F:9C:DD:9C:FB:88
Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
Certificate issuer: /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
Manifest number: DB
Signing time: Sun 07 Dec 2025 03:55:40 +0000
Manifest this update: Sun 07 Dec 2025 03:55:39 +0000
Manifest next update: Sun 14 Dec 2025 03:55:39 +0000
Files and hashes: 1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: /4seLKOh5S4m7CwbgdvGgXvz+sox7AhlXgD403Qxdrg=)
2: 7CEBE3D254CC11F0A18D9383C4F9AE02.roa (hash: qKLJuhiSt6ziSLB7uhD7HeaslWaCM3j6cyeFP9vZtrs=)
3: 0A6CBB6E54CD11F0A3E48084C4F9AE02.roa (hash: J4JwOCVNeHLcNgzC2WuOU4UTLpubXvEJF1TWPMAPsrE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Validity
Not Before: Dec 7 03:55:39 2025 GMT
Not After : Dec 14 03:55:39 2025 GMT
Subject: CN=6934fabc-07e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:72:ad:97:fa:c6:9f:fe:a9:ba:60:4f:02:d5:
22:f3:18:fb:18:cb:d9:fd:78:c2:ef:68:e0:22:f4:
8d:2e:e1:49:55:f0:20:11:8c:41:8a:50:15:c3:46:
9a:16:e0:67:81:94:5a:7c:f3:b4:83:e1:d9:55:ff:
e1:94:03:64:dc:86:24:ea:3a:8f:63:40:0f:ac:f7:
6a:51:2b:c7:e6:97:94:5f:f4:06:af:f9:de:43:62:
44:7d:66:8a:49:b5:50:de:71:55:c5:a4:8b:25:12:
01:9f:a8:79:2e:97:3f:62:f7:6e:57:72:6b:b0:37:
99:1e:e9:53:6e:3f:39:c8:da:f7:49:5d:9c:15:a5:
d2:36:8e:fa:47:a2:33:78:89:34:7b:cb:6f:0e:07:
e9:ae:2d:af:f0:ea:1c:32:9a:16:01:d2:39:cc:d2:
58:29:31:f4:48:9d:a4:a1:d2:4c:15:fd:ad:2d:af:
c6:0f:85:eb:60:d1:55:ed:7b:1c:ea:34:7c:e3:a2:
12:5f:27:ff:bb:45:f4:b9:c1:1c:f9:df:03:d2:63:
cd:46:b1:a4:2c:81:1c:07:00:34:97:c4:2b:49:40:
07:0c:a5:7e:74:82:e9:85:5a:96:54:0f:b6:d8:14:
6a:83:02:96:b9:24:0d:ac:44:92:2b:ee:63:f7:49:
58:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:60:5F:0E:C3:4F:50:6A:68:F8:12:98:08:03:3F:9C:DD:9C:FB:88
X509v3 Authority Key Identifier:
keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c2:48:2f:96:4b:86:38:77:ab:2c:9a:b4:cd:b0:c4:7b:83:
5f:d3:92:a3:0e:40:1e:6a:be:7c:50:8d:5a:76:6b:7f:37:49:
65:44:25:e6:f2:73:e7:91:15:df:1f:c9:fa:18:e6:d1:16:13:
8a:ca:58:eb:60:24:94:f7:3a:70:5a:ad:82:76:8f:dd:d9:39:
db:b3:7e:14:47:38:ff:bc:73:58:f0:4a:ac:70:d3:34:a9:c5:
c0:5c:8c:c8:62:55:ed:19:af:9f:0f:6b:cc:97:9b:0e:38:85:
6f:5a:1a:da:ab:ae:aa:ce:72:d2:88:bb:90:72:ed:1f:55:ca:
06:bd:1c:8c:05:1c:50:74:2c:50:68:d9:dd:43:79:cb:f3:83:
d9:c9:0f:84:20:1b:02:b6:bd:92:99:3b:bf:c4:26:75:9d:fd:
62:83:d9:14:6e:55:16:3b:40:59:62:c0:58:d7:a5:03:32:96:
93:a8:01:54:60:ea:d6:7e:55:f8:a5:4b:69:96:55:f5:9e:99:
0b:5a:8e:12:8d:c7:8d:ee:c5:c5:29:57:f5:ff:2d:22:e3:c0:
7a:2c:29:42:2b:36:43:1b:fe:7d:32:dc:93:d4:29:bd:43:0f:
bc:16:95:26:a4:37:28:7e:d9:82:19:29:47:5b:f6:d2:a6:6b:
d5:d6:ea:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:36:08 2025 by rpki-client