This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
File: q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft (raw, json)
Hash identifier: qxr32d6wbvhdDRfD0Iwz8cD/A9xGaqMAGN0VlxNtrWM=
Subject key identifier: A9:36:4C:41:F8:2E:80:B6:D2:35:4B:58:AC:CF:1B:3B:EC:78:70:6B
Authority key identifier: AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7
Certificate issuer: /CN=A913DD09/serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7
Certificate serial: 51
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
Manifest number: 50
Signing time: Wed 17 Dec 2025 06:49:55 +0000
Manifest this update: Wed 17 Dec 2025 06:49:54 +0000
Manifest next update: Wed 24 Dec 2025 06:49:54 +0000
Files and hashes: 1: q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl (hash: R1nPkbWyTEVARzEIklG0f+7qb7dZi0ktBcEs912/59I=)
2: CBEBC99A622B11F09AC60265C4F9AE02.roa (hash: QeEHUv7mRL56rOWrHXgX3CmbCbxizdK7iED7DkPJ0MU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl
rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 06:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DD09, serialNumber=ABFDA9EE4B4F4E1BD9EA47BBFF85AE93549103E7
Validity
Not Before: Dec 17 06:49:54 2025 GMT
Not After : Dec 24 06:49:54 2025 GMT
Subject: CN=69425293-37bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:09:2c:28:00:40:74:c6:1c:b4:70:14:1d:
2e:ad:df:04:0c:1d:e8:23:35:42:65:a6:0d:cd:c4:
da:44:d1:05:9a:1d:12:46:8f:f7:f7:47:94:2c:02:
65:4a:11:da:39:48:f0:82:6e:90:a3:af:3a:ef:f6:
5e:da:f5:ca:78:04:4a:51:5f:f3:3c:51:91:7f:01:
db:bb:0c:92:df:a7:52:2f:4c:43:5d:d3:b5:b2:b1:
8d:6c:ae:c7:fc:83:08:9f:2b:ad:88:51:fd:6f:f2:
0c:0d:98:c5:d4:52:b7:3a:ba:a3:0b:c1:3d:4f:38:
a9:a5:75:4e:4a:3b:66:51:f5:fc:c3:e2:8b:a0:72:
54:e6:3b:6b:a9:7b:b5:b7:56:51:6c:27:35:94:c6:
32:07:7f:9c:ff:ba:58:c1:8c:33:5d:24:e8:a1:d1:
6f:f1:74:f3:f5:fa:6c:f1:6f:13:86:24:0e:98:6f:
f8:69:8b:5d:22:fd:3f:37:60:4e:5a:01:ec:b2:60:
fc:1d:3e:47:0e:09:78:a6:57:43:08:c0:83:2f:5c:
4c:1d:cc:b2:57:7e:e8:6f:b5:12:e4:7b:b7:2a:c8:
ae:a3:14:17:f9:04:1b:aa:21:38:4a:26:ee:48:9b:
68:c7:e5:e1:f6:a3:6c:65:c8:79:c0:04:fd:38:2f:
4a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:36:4C:41:F8:2E:80:B6:D2:35:4B:58:AC:CF:1B:3B:EC:78:70:6B
X509v3 Authority Key Identifier:
keyid:AB:FD:A9:EE:4B:4F:4E:1B:D9:EA:47:BB:FF:85:AE:93:54:91:03:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD09/67B09406622B11F0BE528B1FC4F9AE02/q_2p7ktPThvZ6ke7_4Wuk1SRA-c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0d:65:0a:41:f1:a5:14:a4:89:b4:45:a0:41:78:54:e0:c5:
e4:99:f4:44:2a:1b:4a:94:8f:62:36:a0:27:5e:6e:28:43:5e:
45:4e:01:bb:b5:2c:9b:98:d7:f2:fa:ec:b7:ee:98:d0:9a:53:
d5:c1:f5:a3:71:3e:c2:77:88:a9:3d:d9:e6:c0:b5:f5:fc:bb:
6b:d2:ae:d9:1b:b8:15:d9:69:2a:f3:2f:0a:4a:16:d5:32:70:
5a:1c:d0:c5:bd:dc:e4:0f:07:5e:9b:41:cf:44:b2:7d:1f:e4:
8c:a9:93:30:d8:74:58:48:dc:4b:17:21:d6:9a:4c:57:41:e3:
96:e2:3a:fc:e6:1b:38:ac:3e:83:1e:ec:81:02:3c:73:ca:99:
24:4c:86:7f:5d:f5:c0:42:46:2b:8e:ee:c4:01:59:85:2c:17:
c0:84:a3:cf:79:c9:66:26:62:4a:f4:10:7e:c3:ca:cc:2c:e0:
ac:1f:ba:06:7a:bb:b7:4e:b6:4d:ec:a9:63:97:b9:51:c1:7b:
75:eb:cf:8f:cb:58:2f:9d:8c:f6:07:7c:f2:4d:43:fa:5c:db:
8c:6b:04:3c:d4:08:2a:0d:1e:5a:36:61:5d:1c:a5:46:d0:40:
19:5b:8a:ce:07:67:c6:fb:30:7e:fd:1c:e7:3f:98:fb:0b:6c:
4b:16:3b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 07:01:19 2025 by rpki-client