This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
File: QMCQUT8kAYkgsVHapVRJwV3IS-s.mft (raw, json)
Hash identifier: j8PwVzVwjxMHrzPAJuUH92ZCey4e0vll2avadPGKuW4=
Subject key identifier: C3:80:6F:9D:FF:4A:D3:E6:C4:D0:35:AD:F5:3D:D1:76:D3:0F:B7:A7
Authority key identifier: 40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB
Certificate issuer: /CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
Certificate serial: 0A26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
Manifest number: 0A1E
Signing time: Sat 20 Dec 2025 19:15:53 +0000
Manifest this update: Sat 20 Dec 2025 19:15:53 +0000
Manifest next update: Sat 27 Dec 2025 19:15:53 +0000
Files and hashes: 1: QMCQUT8kAYkgsVHapVRJwV3IS-s.crl (hash: QlXAlbWwciUpZXheITZ2LcB3OLuvJDNA943PJfdZpMc=)
2: 1E809CD0845111EAA961467EC4F9AE02.roa (hash: daFA8yMRnffIfjJ7fLZ41ES4LLpPtN0oWTU77ItHPkU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl
rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 19:15:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2598 (0xa26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111ED2, serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
Validity
Not Before: Dec 20 19:15:53 2025 GMT
Not After : Dec 27 19:15:53 2025 GMT
Subject: CN=6946f5e9-0df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:8c:d3:a5:5d:1c:b6:cc:b4:ff:e5:6a:f5:
e9:84:ae:e7:27:25:13:ab:9f:6d:47:c0:f7:70:d6:
9f:09:5e:1d:ad:76:33:fd:fa:42:a6:f0:64:f1:ab:
46:da:c4:0c:ba:d5:9c:46:96:e4:ef:6d:1a:2c:22:
00:ec:01:8d:cb:df:66:26:6d:3f:32:f6:e5:e7:25:
40:e7:f1:78:1b:a1:f7:aa:27:33:fc:a4:4e:97:7e:
ab:d9:d7:74:c9:91:fc:4f:50:54:6f:37:ae:5c:63:
af:eb:f5:cb:f2:01:02:f1:39:05:08:92:21:fd:cb:
f9:40:94:4f:d9:ef:d7:3f:4d:65:5a:a0:14:48:e0:
c2:2b:e0:bc:ea:1d:0e:5c:55:45:cf:cf:d3:bb:2b:
57:74:b9:de:92:a5:b2:75:22:8d:7f:f7:49:90:55:
9f:25:6b:77:3d:87:e5:17:5b:a8:23:69:d0:bb:9f:
aa:31:3f:47:de:c9:46:6b:86:a3:e5:c8:e4:61:d2:
80:39:6a:89:ea:43:23:bc:0c:bb:16:94:6f:8c:04:
f9:10:03:5f:d7:3e:cc:93:84:79:11:06:dd:4f:0d:
42:46:3e:52:29:3f:5d:40:a3:c0:7d:c3:eb:d3:c9:
de:54:92:e9:0c:79:94:e4:b1:6e:d5:d0:9e:43:ef:
32:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:80:6F:9D:FF:4A:D3:E6:C4:D0:35:AD:F5:3D:D1:76:D3:0F:B7:A7
X509v3 Authority Key Identifier:
keyid:40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:af:f6:3e:fb:4b:1a:f6:5d:af:ba:88:52:da:45:f3:4e:b3:
ab:3c:26:90:8f:39:25:da:7a:f0:ea:a9:e3:30:72:46:cb:fa:
e0:79:a7:d6:ec:24:6f:9d:df:b2:b3:08:9d:9d:c8:d3:50:57:
60:72:b7:c2:e6:8a:db:2a:bb:e7:93:b7:77:9b:44:d7:9f:cb:
57:6f:62:25:a7:c1:6f:29:52:af:a5:5f:e6:78:ea:c6:4d:bd:
d9:f9:c7:78:c9:9c:73:d0:5e:25:48:a6:0a:78:5f:75:07:e8:
ed:fb:5d:f0:0a:21:55:56:12:28:aa:d0:ee:c0:98:e0:8c:99:
6f:a5:b2:cb:ae:99:c7:79:57:68:bc:75:f4:f0:d3:08:58:c9:
36:b1:8b:fd:87:43:c4:dc:ae:e9:c6:8a:ba:17:44:7c:fc:37:
a1:6a:ad:53:75:c5:00:b8:a3:ce:df:6c:67:4b:fa:ee:1a:9e:
9b:92:f9:fb:6d:00:39:dd:fb:d9:b6:21:0a:6c:ca:78:8a:fd:
59:3f:f1:c9:26:76:a5:5b:31:7e:8b:c1:49:5c:28:de:62:ae:
cd:fb:c4:c3:18:a7:a1:59:5f:57:85:57:24:66:60:ea:81:f9:
26:78:b4:12:6d:2f:5f:56:7b:77:c6:90:50:50:da:4b:ae:4a:
0e:7e:ba:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 23:03:10 2025 by rpki-client