This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
File: QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft (raw, json)
Hash identifier: vNcMtX2EKXHBeEZhre2FoPK8cVf0zJWjICmYOhq57Dg=
Subject key identifier: 1D:4E:BD:D7:BB:95:21:D3:A8:9F:6E:3C:41:9F:C1:04:C0:42:E2:5B
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial: 0D6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
Manifest number: 0C83
Signing time: Sat 06 Dec 2025 18:15:47 +0000
Manifest this update: Sat 06 Dec 2025 18:15:47 +0000
Manifest next update: Sat 13 Dec 2025 18:15:47 +0000
Files and hashes: 1: QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl (hash: vYg/zLG2Wy8Tokk6KvC+lqJl0UDYNZuXkp/wNNSmGHw=)
2: 8CC1AF1417DC11EE959DE671C4F9AE02.roa (hash: 7+0RKtv/QFqUJhAIU0jwK/kD2sQJylo8+nExaHdj0YU=)
3: 8DB5B2BC17DC11EE959DE671C4F9AE02.roa (hash: mXW/o+2lA5CH8jN2VyvKEwBUBouEpc3dMmyPpKEoHZM=)
4: 8CA2C07889D111EFAFEB2609C4F9AE02.roa (hash: 7eWRkSZdf992QxbF3h3c0q+aJY3RkuNNtdN+bDuFcbA=)
5: 65A78BCE535F11EE9BC85F83C4F9AE02.roa (hash: JS8uyA5ZDD31OuyzTdeFf/XwQTyv6XqrH8RkgQ1lshw=)
6: A0F26482C9F211EF986EE370C4F9AE02.roa (hash: WvJTTw2h2x8eNtvB9hnnw/qG2i/35vtgBc53uEDUyyE=)
7: AABA617A78B811F0A62F9B28C4F9AE02.roa (hash: JtPXx1WRgsbzmrsNLInF92woE+rUeMA5vr5GiqEQHmw=)
8: 8BF60AF817DC11EE959DE671C4F9AE02.roa (hash: LVCceArjrNx9uJHc32TrQrfuXNf5yNmqL+LVGTZ/kcg=)
9: 67F68132535F11EE9BC85F83C4F9AE02.roa (hash: 93zu71Bbjz/nav2+CvE7DZaoexH+Z1OOLkl6NHafn3s=)
10: 8D2CC3EE17DC11EE959DE671C4F9AE02.roa (hash: zctn/DI/I3BOanvNBzpc9IpPDcrqCUE0GkQVT4ki+nE=)
11: 8F9A2E2817DC11EE959DE671C4F9AE02.roa (hash: fnkMj+nr5Q7iQNfww9b8AyH+pO8Tw9U80LkD+4bYx0w=)
12: 6688CA76535F11EE9BC85F83C4F9AE02.roa (hash: 2TDhWa5aEDfj/OSlXTwrUwhI6/Fx1H9p120AVX8QFaw=)
13: 67023924535F11EE9BC85F83C4F9AE02.roa (hash: auKtqb5gzHutedVTKNtnJRubcnvktJVt0VqmZO9kd5I=)
14: 9B3FF0EC1F6D11F0BBEE756AC4F9AE02.roa (hash: oIlNxA/X4w99Dtq7i69xwEidK0QOO+TfD/eZvN+32J0=)
15: 678847C6535F11EE9BC85F83C4F9AE02.roa (hash: tQ4cyb3heb45htZx1h245p6eBfZ/hq4FrcBUNHIJiPo=)
16: 8B707C6C17DC11EE959DE671C4F9AE02.roa (hash: FBcOfIAiLQzUwARh2vRnAPUlJE7QYwm514/u+ntzHTg=)
17: 48E219C209C311EEA9D88A34C4F9AE02.roa (hash: SfxwUXkZ6scs6b9stvrkH0M3EDnjNSsIuRA3moh8vhQ=)
18: 8AD3E23A17DC11EE959DE671C4F9AE02.roa (hash: Y/n3NB4Jr09jG3Cs+pVr+0yWJBuRJo/kO/On8tf2V5E=)
19: 8EADC8C617DC11EE959DE671C4F9AE02.roa (hash: CD4VpLZIjAnREdFcpXUGct5U+Mw4EMKjpjAEDuYsKeI=)
20: 8F1DD9E017DC11EE959DE671C4F9AE02.roa (hash: yQvc3ntNpG7BJNIHH6+Ojk1HrYYp15Nu10dcUFhCOA8=)
21: 041A5B042C6911F098B91B76C4F9AE02.roa (hash: I5wPyYqqdfF0mXRXOECwyg6iI7z8KBKDKIwaF8mL0MA=)
22: 9005E6F417DC11EE959DE671C4F9AE02.roa (hash: ht52TuAJDLY4uwUtrNchRV8xkg3G9MLjO4Fq4TB9fIk=)
23: 651E60A6535F11EE9BC85F83C4F9AE02.roa (hash: YhNbhFzO7WHU8UmccgfY4hoJ4t2k4JoW/bwFa0YyNSk=)
24: 8E2676DC17DC11EE959DE671C4F9AE02.roa (hash: ba+G7MIs0RgCQosv/d6yBO5KvwyRloGnmrJta7ui9GM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 18:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3435 (0xd6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Validity
Not Before: Dec 6 18:15:47 2025 GMT
Not After : Dec 13 18:15:47 2025 GMT
Subject: CN=693472d3-793e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:92:b9:29:ee:c9:e1:d0:bb:37:4e:f5:52:62:
b7:35:a3:fa:aa:5c:68:ca:d8:4a:7a:f1:b7:a4:9f:
5a:a0:a0:a0:af:cf:09:9f:d0:6b:75:82:7e:4f:39:
07:b6:99:69:27:c4:bc:5b:f7:7e:0f:47:da:ed:68:
b5:22:e0:de:cb:b8:c1:12:a7:d8:51:7b:0e:94:12:
ed:2f:8a:b4:99:66:36:3c:a0:50:0f:7f:b4:70:10:
f5:bf:1c:0b:2f:4d:3b:a4:4e:5c:ae:34:1b:67:eb:
d7:51:9b:f5:05:01:c7:fc:9e:ed:80:b0:d1:a3:7a:
1b:64:79:02:3c:ca:93:09:ac:5f:ae:ed:28:ac:a1:
cc:61:bd:17:79:6c:82:a9:ea:27:63:19:a2:bd:bb:
97:ac:a9:1a:ef:13:89:4f:5c:dd:0f:54:d3:c7:3d:
76:49:0a:97:b8:94:e4:21:14:79:66:be:50:28:7a:
41:b5:c4:d7:94:0f:9a:f8:ea:3f:aa:af:ab:6f:c9:
b0:7d:e1:7e:ea:f5:74:d1:7e:74:df:03:4e:ba:a9:
7b:5f:b5:50:6a:53:9b:c4:09:83:d7:82:fc:6a:47:
8c:cc:f9:f2:3f:77:4b:bb:0e:01:f5:db:b3:98:06:
c3:cc:ea:10:e8:e8:22:ca:c1:e9:a1:26:19:e4:b4:
91:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4E:BD:D7:BB:95:21:D3:A8:9F:6E:3C:41:9F:C1:04:C0:42:E2:5B
X509v3 Authority Key Identifier:
keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:fa:94:98:b7:81:1d:95:d5:3c:3a:8e:ef:4d:55:fa:f0:82:
bf:7f:78:ed:9f:23:79:ad:7d:03:63:40:39:4a:9a:bb:cf:61:
6c:2c:b1:30:6e:78:cc:3c:ca:05:55:d4:dc:94:7d:2b:d9:21:
40:d6:75:ef:42:e3:8e:64:20:4a:48:38:de:5c:fc:17:4b:54:
b3:ff:cc:77:62:18:d6:2b:07:b6:b7:5b:83:d7:04:ca:8e:ad:
c2:05:a8:8b:7c:ab:94:b0:3a:a5:0c:b0:99:b0:7c:12:7f:d2:
b7:00:7e:1a:f4:35:98:6b:aa:a1:47:57:c8:f4:a8:fa:9f:d9:
a9:09:03:38:2c:16:3d:aa:34:ea:29:87:39:33:06:a4:88:64:
0f:e8:a4:58:65:e4:c7:0e:83:1b:f5:db:76:12:af:c6:80:12:
c6:dd:df:ce:20:67:b6:b6:b0:0d:08:76:da:9a:56:0f:86:09:
02:73:f1:4b:b2:48:b8:62:fc:74:50:8f:a7:c2:ba:55:f1:2c:
0f:eb:9f:a2:46:02:e1:d7:94:d5:7c:4e:29:32:81:7b:3b:ec:
a0:ae:4d:96:cb:75:04:95:65:74:6b:01:0d:02:34:c6:4d:45:
21:6f:a0:b9:42:89:7c:d1:f1:bc:81:38:16:dd:24:82:a7:61:
49:4c:4f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 00:57:16 2025 by rpki-client