This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft
File: qhOo9ipv0n6bme44axRRnm_MhjI.mft (raw, json)
Hash identifier: pExBQOgC+hNlMb2lCIQi2geNIfx60EP20Axj24Dbjgk=
Subject key identifier: BD:C6:1A:5E:97:60:07:23:0D:0A:99:1D:AD:0C:32:66:8F:D5:FE:5C
Authority key identifier: AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32
Certificate issuer: /CN=A91DB04D/serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632
Certificate serial: 058A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft
Manifest number: 0583
Signing time: Thu 04 Dec 2025 21:56:00 +0000
Manifest this update: Thu 04 Dec 2025 21:55:59 +0000
Manifest next update: Thu 11 Dec 2025 21:55:59 +0000
Files and hashes: 1: qhOo9ipv0n6bme44axRRnm_MhjI.crl (hash: N42Lf8VxBgf0I45B5NpkiTa6EZ/Sw2GHmpEH50XPr5s=)
2: 5913DBAA01A011ECBFF72849C4F9AE02.roa (hash: v1NPyZcIzLXfq6FcYAJwcqBJcL8OUjXOFJ6ZI59acfQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl
rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:55:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1418 (0x58a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB04D, serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632
Validity
Not Before: Dec 4 21:55:59 2025 GMT
Not After : Dec 11 21:55:59 2025 GMT
Subject: CN=6932036f-456f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:92:8e:62:4e:f0:ca:38:81:d0:49:67:63:19:
6c:7c:a5:80:6a:47:fa:dc:cc:03:bc:7f:c9:58:53:
c2:2a:3b:46:fa:b5:4a:a9:2d:87:35:5d:ab:10:7d:
71:43:d6:e7:5e:17:ef:4e:e0:b0:44:d6:bb:f7:4b:
87:4a:82:5d:d9:91:08:58:c2:7f:02:18:96:63:97:
41:7c:cf:db:71:78:76:ed:68:b1:9f:03:ed:db:06:
aa:4c:ce:07:2e:70:7f:60:fd:be:83:b3:5a:7d:da:
b9:31:cd:0e:d1:f9:fa:5d:bb:59:ba:bd:81:47:93:
aa:a2:34:45:f4:d0:c6:eb:57:60:0d:da:86:40:d0:
e0:c6:8d:bf:f6:64:7c:f7:c0:3f:f7:2e:63:03:70:
06:67:29:f5:69:69:af:a9:53:aa:80:51:f9:3f:7f:
ca:b4:cb:e9:02:5a:93:86:5a:9b:d0:60:e2:c7:ac:
d9:3e:a2:94:05:9a:78:64:87:9f:71:7a:7a:08:53:
7d:d4:2b:45:25:2b:30:75:76:17:bd:92:c5:d5:ef:
80:9c:b2:d4:36:94:54:17:f1:69:1e:07:fa:71:69:
15:34:eb:78:02:91:48:46:7a:03:83:d2:38:c9:83:
1e:ba:2a:7f:6e:71:a9:ec:3d:fd:24:c9:fc:4e:fc:
23:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C6:1A:5E:97:60:07:23:0D:0A:99:1D:AD:0C:32:66:8F:D5:FE:5C
X509v3 Authority Key Identifier:
keyid:AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:42:e5:8b:7c:f2:19:b5:e8:3a:ae:1b:d1:1d:b5:1c:ba:bf:
4a:a0:7c:e7:a5:d3:53:3c:76:bf:da:98:f0:e3:1e:cd:45:82:
a9:ff:7b:16:b3:a2:fc:9c:71:2b:44:30:97:1c:3c:ab:9c:61:
73:cc:e6:bc:c4:29:e4:27:e6:2b:eb:0d:25:d3:7b:59:63:be:
3b:b7:ee:b9:9a:5e:92:5d:08:c0:43:e7:db:24:4e:85:ce:2e:
ff:0a:c6:90:8e:58:3d:cc:7e:07:e3:d4:68:47:a9:7d:88:80:
79:32:1b:f2:ab:44:59:c1:84:b5:02:53:4a:63:93:3a:a0:23:
93:38:bc:1c:7a:eb:06:53:23:80:09:be:8a:64:5f:e0:5d:04:
c6:3d:69:e8:84:cc:b1:b5:ae:9f:76:06:63:08:e7:66:f0:a5:
9a:f6:06:63:29:83:e3:bb:08:b7:be:56:4c:39:93:98:ab:fe:
dd:41:cb:49:c6:32:e5:99:10:77:06:c1:95:7d:7a:00:a3:2b:
8f:dd:d8:86:fc:a7:0c:8b:f1:aa:3c:28:25:85:be:f1:05:c8:
50:db:8b:54:0d:68:b9:56:6e:96:97:e5:2e:03:b7:b1:64:5f:
7b:b0:ad:70:45:de:52:e2:bb:29:bf:1e:7f:a4:9d:3d:50:b0:
f4:c4:89:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:35:23 2025 by rpki-client