This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft
File: Qql4rYPdXtKaTl3bYbVvExelpaQ.mft (raw, json)
Hash identifier: EzQrrt6xgtvJHtCgyC62MBcz1EGhQIGXZ4UmcfspTO4=
Subject key identifier: D7:C0:9B:E7:39:DA:6D:7F:EE:BE:3E:07:7A:74:89:65:6B:40:AE:F1
Authority key identifier: 42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4
Certificate issuer: /CN=A91D4803/serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4
Certificate serial: 059C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft
Manifest number: 0594
Signing time: Sat 06 Dec 2025 22:01:10 +0000
Manifest this update: Sat 06 Dec 2025 22:01:09 +0000
Manifest next update: Sat 13 Dec 2025 22:01:09 +0000
Files and hashes: 1: Qql4rYPdXtKaTl3bYbVvExelpaQ.crl (hash: 0JEdVKFXuikm8Tbi0skEcOEiNArZLSBX5R2E0FK4xy8=)
2: 2B1B8C92F9E511EBBB9B5D22C4F9AE02.roa (hash: /ckEG51NBhBYEZtZSbLBPmavN3UuTjHbEpYTSHsiIm0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl
rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1436 (0x59c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4803, serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4
Validity
Not Before: Dec 6 22:01:09 2025 GMT
Not After : Dec 13 22:01:09 2025 GMT
Subject: CN=6934a7a6-be40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:b1:33:e5:48:0e:78:f6:99:48:7a:3e:07:
08:1c:43:f9:8c:6b:1f:54:c9:17:93:42:7b:ec:78:
35:c8:03:51:be:2f:a0:bc:72:56:aa:07:cb:72:b8:
9d:f2:0a:35:d5:21:36:53:31:cf:b4:11:29:68:63:
d1:b3:a0:69:69:54:08:7a:8b:8a:49:be:cb:f7:41:
39:2e:dd:50:81:6e:5e:31:c6:bd:de:23:cc:8a:19:
34:5b:a0:b5:1a:98:c6:f2:12:da:17:47:64:5c:8a:
3d:a6:0c:e7:1f:0b:40:26:c9:a7:5e:8e:94:9b:fb:
88:cb:2e:2e:df:3d:af:3a:14:e0:9c:a0:be:3d:80:
17:71:e5:1f:da:16:0a:64:e8:d0:0f:8b:9b:da:59:
7c:3e:1f:06:53:74:ca:15:43:ea:37:2a:77:e2:92:
58:d2:b4:48:af:d3:3c:1a:2f:5a:21:89:23:45:9e:
b9:2f:0e:b0:5b:86:69:6e:02:7a:8a:d6:85:68:c9:
61:64:fd:37:cd:c7:57:5f:61:af:df:a9:a2:54:44:
0b:3a:83:8a:bd:12:a3:1d:22:97:3a:52:08:8c:65:
42:fd:87:49:5b:61:19:97:3d:ff:21:e7:7e:a0:df:
dd:7a:1f:e3:ab:e5:48:e7:c8:1d:dc:1e:22:04:8c:
c0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C0:9B:E7:39:DA:6D:7F:EE:BE:3E:07:7A:74:89:65:6B:40:AE:F1
X509v3 Authority Key Identifier:
keyid:42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:5d:5f:60:5f:aa:4b:83:fe:e6:c4:c9:d5:4e:c7:8e:3f:fc:
d3:33:e8:67:6c:4e:3f:3c:c4:b8:d5:b3:ff:86:63:8f:7f:59:
fd:ec:d9:28:15:06:8c:38:04:8d:97:8f:d1:bb:96:26:50:4a:
c6:5c:11:bd:51:03:31:d2:3c:4a:42:e9:dd:23:12:af:f9:1e:
83:8f:16:32:c8:53:90:ab:1e:7b:58:ec:f4:80:97:81:35:4c:
eb:f5:d7:3b:15:49:0d:f9:d8:44:67:f5:5d:46:0e:29:7d:66:
f7:0f:c8:46:f9:16:43:34:14:48:9b:af:1b:1b:59:4c:ba:60:
1f:57:68:44:3e:e2:e2:09:40:b5:e4:74:ea:3d:5f:2e:1a:7d:
92:45:44:cd:d7:50:30:0f:a8:e2:4d:25:f2:57:ad:da:87:2d:
0b:15:93:38:8e:a3:50:14:1d:63:1c:34:23:7c:60:00:ce:40:
12:8a:c0:93:92:43:84:79:73:03:53:e5:12:a5:9d:ff:bc:b1:
61:b3:9f:b6:37:7f:41:1d:ba:c6:8f:96:b5:95:54:1e:c8:f7:
8e:38:3f:3c:47:f0:6e:86:95:0e:ec:39:3a:b8:8c:75:a8:75:
32:41:70:73:fc:19:a9:c2:ba:1c:2b:ef:5a:d7:b9:5c:e7:6c:
76:1f:bc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:43:19 2025 by rpki-client