This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
File: rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft (raw, json)
Hash identifier: nnCDlaRJzqZIIdngzDaSZuojAkpDo4ut4K8rKevCI78=
Subject key identifier: EC:2A:ED:0C:DF:03:79:24:D8:FF:27:13:80:5A:3E:DE:C9:83:9C:50
Authority key identifier: AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33
Certificate issuer: /CN=A91D837B/serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33
Certificate serial: B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
Manifest number: B6
Signing time: Fri 05 Dec 2025 04:03:28 +0000
Manifest this update: Fri 05 Dec 2025 04:03:27 +0000
Manifest next update: Fri 12 Dec 2025 04:03:27 +0000
Files and hashes: 1: rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl (hash: TrYYVQtOSNL+NR9ChMHjYYn0E7X8OooEQUJGsIvFtRA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl
rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D837B, serialNumber=AD019F035BFF3F3B17323CDBBB14A07D5DE8EC33
Validity
Not Before: Dec 5 04:03:27 2025 GMT
Not After : Dec 12 04:03:27 2025 GMT
Subject: CN=69325990-cb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:01:de:d6:f4:bf:6e:4b:41:b3:d9:00:a4:b5:
ed:1d:4b:09:d3:cf:f5:06:c8:2d:23:be:87:a9:50:
77:fd:cd:e4:1a:1f:f9:33:cb:e7:14:76:a5:97:24:
96:4a:02:18:f4:6b:d9:dc:a4:8b:58:7f:47:69:86:
ab:db:83:c5:97:5d:62:29:51:3b:4f:dc:b7:54:55:
2a:36:cb:66:bf:8f:a4:d9:17:17:ed:1d:5d:07:97:
b5:fb:1d:bc:32:8f:a4:e0:71:4b:2b:8e:6c:d0:71:
fb:6f:f7:14:35:41:dd:4f:0f:ba:a0:b8:fa:a1:af:
4c:59:bb:fa:76:6b:e0:7b:df:25:94:a2:8b:24:59:
3d:5b:8f:03:3b:c5:d2:5d:40:75:a1:a3:21:bf:56:
7d:76:2c:41:65:7f:89:56:3a:33:6c:c0:47:b0:e5:
f1:1a:2b:e8:4a:ec:f1:e4:90:ae:8b:5a:f5:af:cf:
e2:79:be:d8:e1:b8:69:10:fd:b5:d4:ea:52:f7:59:
09:07:a8:10:91:e4:e4:a7:49:d1:d1:70:82:f2:a4:
4b:82:cb:21:1d:49:31:2d:7c:37:63:b5:7b:fb:8e:
31:1e:4b:59:bb:e4:87:3f:4a:e5:f7:b9:ca:80:dc:
1a:67:91:3f:22:03:5c:95:3b:18:ba:72:4f:bf:6c:
c3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2A:ED:0C:DF:03:79:24:D8:FF:27:13:80:5A:3E:DE:C9:83:9C:50
X509v3 Authority Key Identifier:
keyid:AD:01:9F:03:5B:FF:3F:3B:17:32:3C:DB:BB:14:A0:7D:5D:E8:EC:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQGfA1v_PzsXMjzbuxSgfV3o7DM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/1D7B63BCB99C11EF9638F769C4F9AE02/rQGfA1v_PzsXMjzbuxSgfV3o7DM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:92:f2:16:b1:d1:93:ad:e1:fb:38:1a:52:a5:c4:e2:38:e2:
ca:78:da:07:3f:e7:6b:88:95:2c:47:bb:ab:d9:fc:48:f2:fb:
d5:5f:ae:4d:8b:30:a9:32:ec:41:4f:0a:09:81:fd:16:85:5d:
30:b0:62:13:07:f1:0c:8d:ca:d2:35:52:f0:66:89:c8:c1:96:
5b:ba:8a:64:dd:ec:85:cc:0c:6e:f2:ce:65:f4:0a:0b:b9:eb:
b6:50:ef:7a:dd:82:80:9e:de:33:3f:1c:a1:68:c9:e8:5f:0c:
7c:fe:42:73:d0:4a:c2:58:32:e9:07:e1:d8:4f:0c:97:15:00:
30:c2:ff:8a:bc:3f:6a:eb:8a:5b:c1:9e:70:bb:96:0f:fe:a4:
ff:5b:3c:b2:9c:d6:cc:3b:46:58:42:74:bc:3b:00:ab:31:81:
f3:ab:f1:68:e1:db:54:62:66:9b:7d:39:d0:64:85:83:1c:0d:
1a:8b:3f:e5:3b:ac:a5:f7:fa:35:fe:d1:e7:f6:82:70:2a:c1:
2a:2d:09:f6:17:6a:62:63:fd:fc:db:c3:be:2d:94:38:45:4a:
98:c4:8b:0a:77:fa:01:25:74:df:1a:74:58:4d:6d:2a:ab:77:
85:9c:68:55:9e:1f:01:c4:11:b5:fb:28:82:fb:6a:9b:3e:40:
87:a5:9a:0f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDgzN0IxMTAvBgNVBAUTKEFEMDE5RjAzNUJGRjNGM0IxNzMyM0NEQkJCMTRBMDdE
NURFOEVDMzMwHhcNMjUxMjA1MDQwMzI3WhcNMjUxMjEyMDQwMzI3WjAYMRYwFAYD
VQQDEw02OTMyNTk5MC1jYjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqAHe1vS/bktBs9kApLXtHUsJ08/1BsgtI76HqVB3/c3kGh/5M8vnFHallySW
SgIY9GvZ3KSLWH9HaYar24PFl11iKVE7T9y3VFUqNstmv4+k2RcX7R1dB5e1+x28
Mo+k4HFLK45s0HH7b/cUNUHdTw+6oLj6oa9MWbv6dmvge98llKKLJFk9W48DO8XS
XUB1oaMhv1Z9dixBZX+JVjozbMBHsOXxGivoSuzx5JCui1r1r8/ieb7Y4bhpEP21
1OpS91kJB6gQkeTkp0nR0XCC8qRLgsshHUkxLXw3Y7V7+44xHktZu+SHP0rl97nK
gNwaZ5E/IgNclTsYunJPv2zDfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwq7Qzf
A3kk2P8nE4BaPt7Jg5xQMB8GA1UdIwQYMBaAFK0BnwNb/z87FzI827sUoH1d6Owz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODM3Qi8xRDdCNjNCQ0I5
OUMxMUVGOTYzOEY3NjlDNEY5QUUwMi9yUUdmQTF2X1B6c1hNanpidXhTZ2ZWM283
RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JRR2ZBMXZfUHpzWE1qemJ1eFNnZlYzbzdETS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODM3Qi8xRDdCNjNCQ0I5OUMxMUVGOTYzOEY3NjlDNEY5QUUwMi9yUUdmQTF2X1B6
c1hNanpidXhTZ2ZWM283RE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB6kvIWsdGTreH7OBpSpcTiOOLKeNoHP+driJUsR7ur2fxI8vvVX65N
izCpMuxBTwoJgf0WhV0wsGITB/EMjcrSNVLwZonIwZZbuopk3eyFzAxu8s5l9AoL
ueu2UO963YKAnt4zPxyhaMnoXwx8/kJz0ErCWDLpB+HYTwyXFQAwwv+KvD9q64pb
wZ5wu5YP/qT/WzyynNbMO0ZYQnS8OwCrMYHzq/Fo4dtUYmabfTnQZIWDHA0aiz/l
O6yl9/o1/tHn9oJwKsEqLQn2F2piY/3828O+LZQ4RUqYxIsKd/oBJXTfGnRYTW0q
q3eFnGhVnh8BxBG1+yiC+2qbPkCHpZoP
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:23:05 2025 by rpki-client