This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
File: qpoNy1ExOS1xlqhEGKioRkVTH5c.mft (raw, json)
Hash identifier: jMFhFwJuzxN9xlTNk6TDy1vW0CCASzdbzp+3lEBqLus=
Subject key identifier: EE:D8:E7:C9:29:C2:28:92:D8:1B:84:39:45:6D:D7:79:E5:28:F5:49
Authority key identifier: AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97
Certificate issuer: /CN=A91EF66D/serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97
Certificate serial: 019C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
Manifest number: 0196
Signing time: Fri 19 Dec 2025 02:38:57 +0000
Manifest this update: Fri 19 Dec 2025 02:38:57 +0000
Manifest next update: Fri 26 Dec 2025 02:38:57 +0000
Files and hashes: 1: qpoNy1ExOS1xlqhEGKioRkVTH5c.crl (hash: gK6qwWeneOg6oxnw2mVQx0fB849vSTE3A8r9YfrX3gA=)
2: C2D66F8271A911EEAEEE351CC4F9AE02.roa (hash: 182Ac4fyaiVrniCYLGV61RP5qpWrfJewUwg3lX5zumg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl
rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 02:38:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF66D, serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97
Validity
Not Before: Dec 19 02:38:57 2025 GMT
Not After : Dec 26 02:38:57 2025 GMT
Subject: CN=6944bac1-8ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:57:81:84:24:66:f2:a1:49:b0:d1:62:66:
85:a2:0d:18:60:e5:f7:f7:af:79:60:e1:11:59:2c:
9d:0b:7b:a8:cd:09:b7:00:6a:b1:d4:57:6b:76:e4:
05:8b:43:c1:18:ef:7e:80:fd:d9:70:d9:c1:aa:e0:
11:73:47:29:cb:d1:b4:d6:90:26:d4:c1:c2:d2:55:
d8:b8:97:12:1d:df:84:45:ea:c2:92:40:92:ae:db:
6a:b6:4d:c2:c4:77:d4:92:1a:39:ce:3d:84:55:67:
c3:bb:d0:63:fb:69:60:3b:bd:ef:87:5f:55:6e:bf:
9f:2f:66:5a:b5:be:a0:9d:86:c4:c3:3c:28:86:06:
e4:df:f0:07:d4:a3:4f:f5:b8:a5:50:7c:1f:97:5f:
59:65:84:ef:12:f9:54:d7:13:16:b2:a4:f2:af:31:
1a:0a:7f:43:95:6c:0c:62:1d:18:9d:53:71:98:7b:
34:b0:0f:a0:5f:fb:8a:d5:ce:50:f0:b5:d2:cb:39:
e6:62:c8:08:9a:de:29:8a:49:bb:73:20:3f:18:ea:
9f:70:b2:82:cd:8f:0f:ea:27:14:3d:22:1a:61:9b:
82:6d:3b:8e:ee:08:2c:82:ca:ca:ae:49:d6:d2:0c:
f2:bb:1c:8e:10:73:61:f1:7c:95:78:20:43:dc:50:
4d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D8:E7:C9:29:C2:28:92:D8:1B:84:39:45:6D:D7:79:E5:28:F5:49
X509v3 Authority Key Identifier:
keyid:AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:62:84:01:a1:3f:59:11:92:a4:9b:14:95:e5:c5:d5:f5:3a:
35:1a:73:b1:bd:f7:05:7e:f6:db:c4:82:60:ac:fd:82:96:66:
8d:ac:bb:01:1e:c4:ef:3f:a4:42:f4:2d:e1:b4:d7:de:6a:6d:
8b:82:d1:ad:70:6c:50:fc:ff:27:9e:c1:79:12:e4:82:4f:33:
23:f5:98:59:c8:32:74:00:52:52:65:c3:4d:76:be:ee:1b:a5:
30:7c:c7:4b:87:8f:f0:3a:6e:f0:76:8c:b0:bf:ed:a4:c6:2e:
19:6a:6f:3c:b6:d1:fe:7c:0e:a9:61:df:bb:bc:ea:c9:0d:cf:
75:a6:2b:60:ea:58:35:94:13:89:b2:9d:bd:b4:d9:27:6d:76:
62:20:63:9d:19:a3:c3:63:c3:d2:1b:51:07:2e:78:58:e3:38:
c4:e9:e7:39:7c:d6:38:38:4f:13:e0:44:8d:08:6f:68:f6:56:
13:40:ed:52:f0:ff:91:13:3c:af:41:15:0e:0b:19:a4:a5:88:
27:f4:5a:6f:84:b5:83:93:a4:d4:e3:d6:1b:43:10:bf:6b:36:
64:29:ed:f3:b7:e7:e3:76:84:ff:71:44:eb:58:b2:39:63:a0:
96:c9:a2:cb:bd:77:26:4b:8e:a3:bc:11:9d:1f:b9:14:2f:f6:
39:95:f3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:17:21 2025 by rpki-client