This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft
File: QWpUTLUK6kcDnxO8WMNBDH_miM4.mft (raw, json)
Hash identifier: ZlGoSQA3Vq41Q10vWrSau8Hzqq+f+uomPuaD5zb5jvg=
Subject key identifier: 87:E4:15:3A:3E:BF:94:5C:3E:1A:4A:CF:09:86:C0:65:7B:30:07:77
Authority key identifier: 41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE
Certificate issuer: /CN=A913E9AD/serialNumber=416A544CB50AEA47039F13BC58C3410C7FE688CE
Certificate serial: 0981
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft
Manifest number: 097A
Signing time: Mon 22 Dec 2025 19:27:20 +0000
Manifest this update: Mon 22 Dec 2025 19:27:20 +0000
Manifest next update: Mon 29 Dec 2025 19:27:20 +0000
Files and hashes: 1: QWpUTLUK6kcDnxO8WMNBDH_miM4.crl (hash: G28evfIaPudiOjw2I9xz2BE/9q9BNX0WoVxOfKTHnPc=)
2: 04758F0AA43411EAA22B0871C4F9AE02.roa (hash: gLtq1uRfz9P1m1h8+/+e4fI782kx3+paUmd4vGjKTlg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.crl
rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 19:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2433 (0x981)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E9AD, serialNumber=416A544CB50AEA47039F13BC58C3410C7FE688CE
Validity
Not Before: Dec 22 19:27:20 2025 GMT
Not After : Dec 29 19:27:20 2025 GMT
Subject: CN=69499b98-597c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:7e:8b:5b:59:f7:88:3d:8b:2d:41:87:5e:
c7:fc:65:ad:73:2c:0f:ee:c4:78:97:c3:9e:0a:f2:
d4:0e:08:95:b2:2e:e3:a6:63:0e:68:c3:0b:a6:e7:
61:42:e1:49:ca:db:5f:77:f2:b8:5a:6b:64:16:6e:
2a:91:5a:01:fd:9a:95:e3:01:0a:25:ab:60:b1:49:
1b:c4:c5:31:5b:05:ba:37:7e:6a:38:40:7b:f4:6c:
72:99:96:83:50:a3:71:96:04:d1:e9:0b:61:25:ab:
1e:f2:19:99:f7:fb:07:bb:16:80:31:4b:39:f6:93:
cf:43:55:6e:82:eb:bb:70:cb:65:9b:0f:fe:c3:29:
8d:13:61:19:bd:f9:1a:e0:dc:80:92:dc:a1:14:7d:
26:4e:50:6e:c4:c7:0a:ed:6e:73:3d:55:52:3a:9a:
e8:f5:4a:c5:f3:3a:3c:09:05:38:ae:a8:2b:ff:0c:
2e:8f:97:3d:d6:f6:b6:00:d7:89:4c:ea:0a:63:5e:
c4:12:82:13:e1:9c:f6:ce:29:f6:54:66:1a:a0:a6:
aa:e1:a6:f6:c8:7e:ac:89:79:82:28:c0:9b:47:4b:
c8:95:fa:1f:ee:5a:1d:38:21:fb:6b:17:9f:24:c4:
da:94:64:57:31:03:29:74:3e:63:7e:19:97:f4:b4:
df:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E4:15:3A:3E:BF:94:5C:3E:1A:4A:CF:09:86:C0:65:7B:30:07:77
X509v3 Authority Key Identifier:
keyid:41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:df:c5:9c:40:4c:22:ea:79:50:19:3a:ae:97:a1:2c:28:1c:
97:bd:2e:70:9a:f5:4e:75:1e:df:53:49:44:57:f4:27:42:2d:
53:bc:6e:51:c6:80:ac:7a:33:60:39:1b:01:dc:1d:93:8b:99:
25:95:24:ef:82:1b:66:23:61:5e:b4:f2:5b:2e:bf:b9:21:d3:
5c:2d:5d:a8:ff:2b:aa:ac:04:4f:de:39:ba:bb:07:ce:9f:26:
6c:08:24:85:db:f6:e5:22:82:58:86:d9:2f:b3:e7:c2:ca:c3:
30:31:6e:32:a6:1d:1a:0d:ca:de:99:d7:5e:16:c0:8d:9b:cc:
a8:ee:ce:f2:6b:d2:ff:f9:80:d2:4d:1f:30:f4:ad:63:eb:f6:
f7:26:b0:50:3c:00:aa:bf:a7:1c:e3:40:fc:83:37:eb:dc:ce:
46:52:a1:26:46:65:24:c8:96:b6:b0:2d:a6:81:28:ab:ca:c5:
32:20:0d:f3:d5:69:5c:dd:4b:e7:d6:aa:96:9b:a4:c5:b6:f9:
d3:0e:6a:87:b3:30:55:db:21:83:a3:e0:00:71:97:90:09:d3:
23:c6:f5:bb:00:6a:ab:52:48:c5:59:91:93:41:ba:c1:62:58:
57:48:8e:d5:0b:31:72:fa:37:6e:c1:68:31:8c:d4:4c:dc:a0:
ed:c4:08:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0U5QUQxMTAvBgNVBAUTKDQxNkE1NDRDQjUwQUVBNDcwMzlGMTNCQzU4QzM0MTBD
N0ZFNjg4Q0UwHhcNMjUxMjIyMTkyNzIwWhcNMjUxMjI5MTkyNzIwWjAYMRYwFAYD
VQQDDA02OTQ5OWI5OC01OTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqs5+i1tZ94g9iy1Bh17H/GWtcywP7sR4l8OeCvLUDgiVsi7jpmMOaMMLpudh
QuFJyttfd/K4WmtkFm4qkVoB/ZqV4wEKJatgsUkbxMUxWwW6N35qOEB79GxymZaD
UKNxlgTR6QthJase8hmZ9/sHuxaAMUs59pPPQ1Vuguu7cMtlmw/+wymNE2EZvfka
4NyAktyhFH0mTlBuxMcK7W5zPVVSOpro9UrF8zo8CQU4rqgr/wwuj5c91va2ANeJ
TOoKY17EEoIT4Zz2zin2VGYaoKaq4ab2yH6siXmCKMCbR0vIlfof7lodOCH7axef
JMTalGRXMQMpdD5jfhmX9LTfiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfkFTo+
v5RcPhpKzwmGwGV7MAd3MB8GA1UdIwQYMBaAFEFqVEy1CupHA58TvFjDQQx/5ojO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTlBRC9GRDcyM0M1MEE0
MzExMUVBQjc3MjFFNkFDNEY5QUUwMi9RV3BVVExVSzZrY0RueE84V01OQkRIX21p
TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FXcFVUTFVLNmtjRG54TzhXTU5CREhfbWlNNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RTlBRC9GRDcyM0M1MEE0MzExMUVBQjc3MjFFNkFDNEY5QUUwMi9RV3BVVExVSzZr
Y0RueE84V01OQkRIX21pTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCF38WcQEwi6nlQGTqul6EsKByXvS5wmvVOdR7fU0lEV/QnQi1TvG5R
xoCsejNgORsB3B2Ti5kllSTvghtmI2FetPJbLr+5IdNcLV2o/yuqrARP3jm6uwfO
nyZsCCSF2/blIoJYhtkvs+fCysMwMW4yph0aDcremddeFsCNm8yo7s7ya9L/+YDS
TR8w9K1j6/b3JrBQPACqv6cc40D8gzfr3M5GUqEmRmUkyJa2sC2mgSirysUyIA3z
1Wlc3Uvn1qqWm6TFtvnTDmqHszBV2yGDo+AAcZeQCdMjxvW7AGqrUkjFWZGTQbrB
YlhXSI7VCzFy+jduwWgxjNRM3KDtxAis
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:50 2025 by rpki-client