This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
File: qK6pspMKYU1coxq59-hDeTYaL0M.mft (raw, json)
Hash identifier: DKlsapRkVQGmEXXwtaBbNiJK2GxODYoCJbfCaxTmJ7M=
Subject key identifier: 9A:9C:1E:84:87:60:C3:9B:3D:B0:EB:B5:D4:08:37:37:0D:5F:98:64
Authority key identifier: A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43
Certificate issuer: /CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
Certificate serial: 0A0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
Manifest number: 0A00
Signing time: Sat 06 Dec 2025 19:05:47 +0000
Manifest this update: Sat 06 Dec 2025 19:05:46 +0000
Manifest next update: Sat 13 Dec 2025 19:05:46 +0000
Files and hashes: 1: qK6pspMKYU1coxq59-hDeTYaL0M.crl (hash: /e809QfswM5zKXmSrFGRaTCOKUVj/fo4mTQkElfxu3Y=)
2: A292E3529E9711EEB6899B1CC4F9AE02.roa (hash: Ogu9kxXrFRJanE7jcwo9P/mePv/PXm/3vRabACePad8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl
rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 19:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2575 (0xa0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7C1D, serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43
Validity
Not Before: Dec 6 19:05:46 2025 GMT
Not After : Dec 13 19:05:46 2025 GMT
Subject: CN=69347e8a-9dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:a5:72:8a:3c:9f:54:4f:f8:14:15:ad:24:
1e:e2:2e:47:11:cb:15:b4:e8:a5:85:46:2b:8c:55:
16:75:da:76:b5:e5:1e:70:e1:71:f0:4c:e6:72:11:
38:d8:a1:2e:60:26:3b:8f:c2:df:15:d8:a6:a0:7b:
8e:bf:c4:00:11:3b:cb:06:e4:39:f4:e2:a3:5f:ca:
17:2d:ef:ad:aa:74:84:7b:c4:28:e2:ba:ac:81:d9:
a8:30:9c:3c:49:e7:2d:77:65:6b:1c:64:4e:d9:5b:
f8:d9:3c:75:a0:2a:79:36:19:16:fb:7a:0a:cc:68:
f7:00:79:53:c6:94:e5:f8:4c:41:7f:31:48:dc:75:
1f:d4:fa:db:58:49:13:b6:03:05:7f:76:91:26:cb:
0e:08:90:fa:fd:51:7b:21:f9:39:4e:40:26:fc:50:
1b:fd:53:20:0f:f3:25:50:19:a9:2b:14:49:65:b3:
02:23:01:73:3b:4a:38:33:db:f0:60:0b:ef:04:0d:
21:ec:0d:96:6c:e8:34:c3:91:8a:26:d6:84:ee:31:
c6:9c:5c:05:c2:8f:9a:1e:fe:24:0d:fa:a8:12:36:
63:62:35:33:45:46:95:56:76:c0:0f:48:3b:31:fe:
99:f8:26:00:ba:e2:8b:1e:e3:7a:b9:c3:98:eb:d4:
6b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9C:1E:84:87:60:C3:9B:3D:B0:EB:B5:D4:08:37:37:0D:5F:98:64
X509v3 Authority Key Identifier:
keyid:A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:21:91:8d:88:65:dc:58:40:89:57:b0:3e:70:ab:0a:46:a2:
e2:4b:07:b6:52:bc:ca:fc:e5:1c:69:6c:87:29:dd:c6:d0:29:
da:9e:1d:4c:94:20:a8:e4:ff:16:15:42:db:dc:4e:e1:0e:aa:
ac:74:09:de:49:de:b6:32:c6:8a:b4:fb:50:b1:e1:d8:83:f9:
7c:92:f4:8a:db:c7:e9:10:26:84:ef:3d:13:a8:be:57:c1:90:
71:90:a2:13:61:27:0f:1f:71:e2:bf:f9:20:fd:40:4d:7b:2e:
5b:70:ae:02:97:8a:e4:4c:01:d8:53:3d:38:d4:e6:90:05:7a:
2f:e3:e8:21:45:42:e7:18:0f:14:bf:75:02:12:d1:70:69:5b:
79:50:d0:99:31:41:48:5b:81:fc:6b:da:52:45:50:78:93:04:
ee:7e:2e:53:9e:ae:5c:dd:a6:c0:07:03:d8:24:c4:1c:8c:38:
3d:25:51:b4:a4:3c:50:df:2e:fa:75:bc:f5:c3:dd:ee:76:15:
27:43:61:4f:67:86:5c:64:cf:b8:67:45:5a:68:19:46:b2:cd:
2c:9f:f3:c0:22:28:99:b0:c2:f5:52:bd:97:3b:7b:12:08:e8:
04:04:da:65:77:b7:26:a5:ea:8e:35:f3:62:9f:2c:e1:7d:35:
6e:66:ab:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:25:43 2025 by rpki-client