This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.mft
File: Q2XRedW3PoqX7eBQXynvAMLWPvk.mft (raw, json)
Hash identifier: 1Jl4yG39O/XYg4DUxps+JYhxWsTsthqHhV5L2eFYqbM=
Subject key identifier: C1:D6:A0:6E:B9:6B:38:71:DF:DF:5E:4B:84:B7:18:05:39:08:5A:2A
Authority key identifier: 43:65:D1:79:D5:B7:3E:8A:97:ED:E0:50:5F:29:EF:00:C2:D6:3E:F9
Certificate issuer: /CN=A9139555/serialNumber=4365D179D5B73E8A97EDE0505F29EF00C2D63EF9
Certificate serial: 030E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.mft
Manifest number: 0305
Signing time: Tue 23 Dec 2025 00:11:44 +0000
Manifest this update: Tue 23 Dec 2025 00:11:44 +0000
Manifest next update: Tue 30 Dec 2025 00:11:44 +0000
Files and hashes: 1: Q2XRedW3PoqX7eBQXynvAMLWPvk.crl (hash: RbJr0eMK+yax0k5fph+fuU46jhkBNcSD5MEvpQJzRX8=)
2: E9A9531644D611F0ABB89277C4F9AE02.roa (hash: GeKHBnqKWQ5odcVSCSiPOuNHSoS5ENhlNwIJeq+zQ50=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.crl
rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 00:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 782 (0x30e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139555, serialNumber=4365D179D5B73E8A97EDE0505F29EF00C2D63EF9
Validity
Not Before: Dec 23 00:11:44 2025 GMT
Not After : Dec 30 00:11:44 2025 GMT
Subject: CN=6949de40-8673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d0:0c:06:c5:8e:d9:a4:36:62:df:1e:b8:f9:
2c:24:0b:cf:ce:7b:40:4b:12:ae:b7:33:ea:5f:d4:
e9:4d:24:5b:59:72:d9:04:64:5b:36:91:db:9e:f9:
39:a6:1b:bb:ef:5c:f9:34:06:d6:fe:ac:d9:1c:cb:
89:d0:b2:5d:9a:c5:3f:2b:f2:a5:4e:fd:db:df:c2:
ec:0c:46:24:da:3e:88:39:01:46:b7:e9:01:4e:f0:
b6:ca:26:91:03:62:94:7f:85:12:e3:1f:28:d5:5a:
12:f6:8f:73:02:da:7b:85:22:b5:4a:77:09:c0:98:
af:d3:60:bd:5f:78:b1:18:51:21:89:70:20:e0:26:
76:63:ec:56:3d:bf:aa:b3:70:26:86:29:d9:7b:23:
ce:ac:c6:b1:3b:13:e9:9c:38:33:38:13:d5:4b:46:
c9:c1:2a:94:7b:c4:88:03:62:c4:56:48:95:0e:ae:
2f:9d:58:c0:e0:d8:b8:05:4f:7c:ad:52:76:bb:13:
20:1a:ce:21:30:3b:b5:58:1e:87:de:e7:1d:f8:e1:
5d:e0:d8:c3:80:f8:fd:7d:16:39:bb:0c:e0:df:80:
fd:39:89:87:5d:f5:67:b5:47:39:ff:1f:24:b4:7d:
99:0c:e7:10:b5:00:ec:4d:84:76:4a:7e:c2:b3:d3:
af:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D6:A0:6E:B9:6B:38:71:DF:DF:5E:4B:84:B7:18:05:39:08:5A:2A
X509v3 Authority Key Identifier:
keyid:43:65:D1:79:D5:B7:3E:8A:97:ED:E0:50:5F:29:EF:00:C2:D6:3E:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2XRedW3PoqX7eBQXynvAMLWPvk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139555/DC7D145A022D11ED9D646B57C4F9AE02/Q2XRedW3PoqX7eBQXynvAMLWPvk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:fd:ac:d3:97:47:a7:72:eb:00:96:70:15:cf:ba:5d:83:df:
ac:a9:64:50:8d:57:7d:1b:69:a2:ae:45:a8:b4:7c:4e:26:94:
e7:f8:04:d5:87:3b:6b:90:ba:c1:fc:fa:76:b6:a8:ca:41:e0:
52:5d:4e:56:51:79:3e:2b:9c:bf:02:1d:3c:38:2c:92:90:83:
3a:d4:d6:3b:4e:00:6b:9d:cf:fa:fb:0a:64:2d:1b:4f:c1:b1:
0e:ad:80:7d:42:ed:39:98:7a:d9:62:b4:4a:92:54:cb:03:88:
1d:bd:1e:db:a0:ff:89:b4:2b:e0:58:50:f2:e4:7e:55:99:4c:
f2:fc:37:a4:e8:c3:13:2a:57:7f:fc:16:9d:f5:99:cb:00:4c:
c5:f9:81:38:d6:10:e6:c9:f4:e6:47:4c:0b:17:45:22:63:61:
82:cc:61:aa:08:07:66:7e:b4:e4:22:29:a0:41:c1:25:fb:e0:
35:ba:04:38:07:93:e8:2b:43:01:e3:c7:14:3e:b8:a8:6a:80:
33:6d:b1:c7:9d:bc:b7:b4:70:25:50:bd:78:2e:e4:3f:3e:b5:
d3:1d:e0:ca:8b:6d:2c:23:f5:57:9f:13:04:3a:dc:50:e8:d4:
2f:ba:c7:67:15:3b:c0:1b:07:d8:de:e0:53:87:15:55:00:57:
fb:17:7e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:51 2025 by rpki-client