This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft
File: QF5asHUAe6PYUmLWiyUZhsbp3V0.mft (raw, json)
Hash identifier: pXRUvee0YOwFSWdtyo9KqFhlmpWNdyEeVILvtYVBuhM=
Subject key identifier: 9B:19:BB:89:6F:D4:19:1D:A3:8A:DD:20:7D:F6:44:D1:5F:81:30:6C
Authority key identifier: 40:5E:5A:B0:75:00:7B:A3:D8:52:62:D6:8B:25:19:86:C6:E9:DD:5D
Certificate issuer: /CN=A9134639/serialNumber=405E5AB075007BA3D85262D68B251986C6E9DD5D
Certificate serial: 08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft
Manifest number: 08
Signing time: Tue 23 Dec 2025 06:55:21 +0000
Manifest this update: Tue 23 Dec 2025 06:55:21 +0000
Manifest next update: Tue 30 Dec 2025 06:55:21 +0000
Files and hashes: 1: QF5asHUAe6PYUmLWiyUZhsbp3V0.crl (hash: Pb5R6zsZTg5c//2fgdF+OWbk/o5rRrYbCLPqpOTi5kI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.crl
rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 06:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134639, serialNumber=405E5AB075007BA3D85262D68B251986C6E9DD5D
Validity
Not Before: Dec 23 06:55:21 2025 GMT
Not After : Dec 30 06:55:21 2025 GMT
Subject: CN=694a3cd9-fa1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:23:9a:a8:38:1b:33:e8:db:3b:02:c9:04:
8d:f5:79:c7:fe:de:38:40:f6:9c:cb:8c:dc:c9:aa:
2f:c8:c6:9c:ee:75:af:72:21:37:91:9a:12:8f:bd:
6e:dd:97:00:b6:c8:ea:e7:da:22:42:87:5c:26:eb:
59:d0:b3:85:74:e7:6f:2b:2e:86:f5:5c:0c:f3:9e:
ff:99:03:86:e9:be:f9:15:44:f2:d9:c6:da:2f:b6:
e7:61:3c:b1:9b:a6:64:4c:f5:96:f7:93:b3:7c:cc:
6e:f3:f6:6a:ef:56:ca:a7:36:49:ec:a7:13:e1:0c:
c7:19:dc:26:34:78:9d:cc:f7:05:2e:e0:1e:28:d3:
e4:5e:9f:18:ef:3d:21:9c:39:5c:45:2a:8a:d1:26:
08:ef:8b:23:08:e7:40:e6:ae:a4:33:e8:89:bb:63:
8e:43:f7:5a:89:ae:39:da:81:76:8a:77:19:da:8b:
29:78:3c:c9:15:f9:3b:df:b9:17:f2:a4:92:ec:ff:
86:2c:52:d3:c8:62:19:44:ab:28:b2:d1:e4:dd:97:
89:b9:c7:2e:20:43:ee:62:01:2c:fb:07:b8:cd:e4:
67:e4:90:91:fa:c4:a8:77:d6:e9:5f:cc:90:b6:cf:
39:1b:61:7c:0c:37:6f:21:54:56:7b:1c:ca:f4:2f:
ca:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:19:BB:89:6F:D4:19:1D:A3:8A:DD:20:7D:F6:44:D1:5F:81:30:6C
X509v3 Authority Key Identifier:
keyid:40:5E:5A:B0:75:00:7B:A3:D8:52:62:D6:8B:25:19:86:C6:E9:DD:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:66:2f:79:40:bf:85:d7:3f:72:6c:a1:0b:20:68:f6:58:02:
44:d6:45:88:35:6f:48:9a:06:6d:81:e1:03:e4:28:6f:bd:67:
98:87:13:00:de:8a:5b:cd:39:f4:d9:32:0b:2a:ce:34:f7:dc:
ec:7c:f7:ff:0a:e0:6a:68:2e:5b:76:a4:47:2f:16:fd:08:21:
75:d6:ce:fa:ab:ef:1f:bf:58:45:bb:18:95:03:57:39:84:d4:
e2:ef:f9:c2:a7:2a:3a:44:0f:9c:2e:57:eb:9f:e7:d3:17:8b:
d4:b4:53:52:84:2a:08:42:8c:f5:75:0f:07:5c:2d:f4:43:92:
a9:e1:8e:e2:ea:17:68:ac:11:9c:55:7f:82:7f:44:b0:6e:9f:
5e:8a:77:57:0b:6d:fd:b5:c7:d3:16:f9:91:3b:a3:82:d2:02:
13:56:ca:0a:69:9a:82:4e:8f:9c:4f:df:35:d3:6c:dd:c6:32:
42:69:7e:06:77:ec:eb:0e:ff:3d:9d:c4:60:7f:09:01:d0:a5:
a5:2e:7a:58:b3:b3:71:54:30:ed:8f:f5:07:91:e2:8a:54:44:
74:36:6e:99:48:13:57:e8:d5:58:b3:14:bd:35:ba:d1:34:04:
4d:10:11:43:84:6e:d9:99:73:55:b4:e4:79:ef:95:38:20:88:
8b:58:f2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:48:35 2025 by rpki-client