This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft
File: QFAqSwwf9GgvUuNAZARERSh9S7g.mft (raw, json)
Hash identifier: X4bJBq2CEQRnyco3llVFtH+szpM1O4vvgUlgA+gIG3A=
Subject key identifier: 3C:C4:5F:3E:52:3B:78:44:78:94:5C:85:DB:C9:C6:B1:8F:4A:E2:D1
Authority key identifier: 40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8
Certificate issuer: /CN=A9146179/serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8
Certificate serial: C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft
Manifest number: C8
Signing time: Tue 23 Dec 2025 04:45:42 +0000
Manifest this update: Tue 23 Dec 2025 04:45:42 +0000
Manifest next update: Tue 30 Dec 2025 04:45:42 +0000
Files and hashes: 1: QFAqSwwf9GgvUuNAZARERSh9S7g.crl (hash: uj1VSP0VrYz2o0vYWsifxK9zmhDWJ5Vje0INYeomcXY=)
2: D2158BC4AA7C11EF9A76A779C4F9AE02.roa (hash: LaPRc5QCE3D/egNmbBmNccMoDV83OnAl0IeSttB5Fwk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl
rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 04:45:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146179, serialNumber=40502A4B0C1FF4682F52E34064044445287D4BB8
Validity
Not Before: Dec 23 04:45:42 2025 GMT
Not After : Dec 30 04:45:42 2025 GMT
Subject: CN=694a1e76-2030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:13:0d:89:5a:27:c8:c8:43:cd:cc:7b:d1:ec:
4f:8f:01:af:05:1b:0d:c9:cf:3b:a5:ce:2a:1c:26:
fb:cd:4d:aa:a4:27:5c:29:63:9a:79:ec:2b:e5:28:
5c:48:b0:fc:09:08:03:1e:9a:0e:be:a1:77:e9:b2:
2e:86:bf:a6:ce:12:b4:e5:bf:c9:1b:ae:8b:4b:26:
49:38:d4:f0:b6:72:67:d4:31:95:f6:25:c1:9f:4a:
f8:ba:df:b0:8f:27:06:a2:d9:0f:e9:1b:fe:20:84:
03:ec:3e:22:49:12:1d:7a:b3:7b:a7:e1:49:e2:e2:
c5:96:ee:f3:b3:2d:61:39:90:cd:2b:97:83:b3:a4:
99:aa:78:7f:25:74:db:28:03:93:da:81:87:2d:41:
69:01:f8:d9:f8:28:86:5f:26:43:03:2d:77:ff:c0:
af:6f:13:cf:7a:e1:77:85:49:c7:e2:3e:65:3f:4e:
3d:8e:93:57:45:a4:39:57:c1:5c:8c:b2:7c:3d:5b:
dc:54:81:fd:80:98:85:03:bd:a3:81:6f:eb:2e:70:
b1:fe:7e:3a:01:c9:0c:4c:96:d6:1f:c4:ae:ae:46:
b1:f6:7c:d4:8b:14:9e:c9:ae:fc:f5:47:f7:b8:e6:
f4:38:5b:5b:56:69:e2:10:d5:1c:a2:e0:b0:5e:05:
8f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C4:5F:3E:52:3B:78:44:78:94:5C:85:DB:C9:C6:B1:8F:4A:E2:D1
X509v3 Authority Key Identifier:
keyid:40:50:2A:4B:0C:1F:F4:68:2F:52:E3:40:64:04:44:45:28:7D:4B:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFAqSwwf9GgvUuNAZARERSh9S7g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146179/54E04716AA7C11EFA33BFD77C4F9AE02/QFAqSwwf9GgvUuNAZARERSh9S7g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ba:23:42:a8:8c:ca:0a:74:ec:49:78:bf:fe:89:63:33:2c:
81:a7:bd:bd:48:01:69:92:a3:54:12:52:e1:5d:a7:20:58:f1:
b9:a2:51:be:18:1d:f9:b7:25:42:ac:16:dc:97:5a:60:d9:cf:
50:12:27:3b:81:f0:2e:2c:6d:81:b9:be:98:dd:0e:2a:32:d8:
17:36:17:ba:06:93:16:51:ff:ee:5c:33:27:05:d6:2f:14:af:
bb:2b:46:d1:3f:35:31:98:d6:0e:f6:96:22:56:d8:0e:8e:9e:
27:82:34:fc:5a:0c:b6:4b:38:ac:22:40:bc:02:e8:64:56:6a:
54:58:ed:84:16:f2:ad:d4:9c:3a:29:b7:20:9c:1b:0f:8b:e8:
b0:db:50:cc:37:4e:b3:64:c2:00:97:5a:be:e5:bc:89:af:a1:
11:b0:0c:40:d6:a1:02:2f:59:7d:09:74:2a:ab:96:42:b5:85:
c1:d1:25:6d:fc:bb:88:a2:f5:4f:e2:5d:c1:8b:fa:24:3f:c0:
6a:79:bf:a4:07:71:f7:22:3b:56:2f:18:b2:13:0d:01:f4:18:
9f:77:6e:a7:7c:21:99:da:61:cd:83:a8:e7:4e:db:ff:e9:0e:
c3:46:4f:ad:ca:87:a1:88:43:f1:a1:c3:e1:fd:dd:0d:47:92:
9b:32:a8:18
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDYxNzkxMTAvBgNVBAUTKDQwNTAyQTRCMEMxRkY0NjgyRjUyRTM0MDY0MDQ0NDQ1
Mjg3RDRCQjgwHhcNMjUxMjIzMDQ0NTQyWhcNMjUxMjMwMDQ0NTQyWjAYMRYwFAYD
VQQDDA02OTRhMWU3Ni0yMDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjxMNiVonyMhDzcx70exPjwGvBRsNyc87pc4qHCb7zU2qpCdcKWOaeewr5Shc
SLD8CQgDHpoOvqF36bIuhr+mzhK05b/JG66LSyZJONTwtnJn1DGV9iXBn0r4ut+w
jycGotkP6Rv+IIQD7D4iSRIderN7p+FJ4uLFlu7zsy1hOZDNK5eDs6SZqnh/JXTb
KAOT2oGHLUFpAfjZ+CiGXyZDAy13/8CvbxPPeuF3hUnH4j5lP049jpNXRaQ5V8Fc
jLJ8PVvcVIH9gJiFA72jgW/rLnCx/n46AckMTJbWH8Surkax9nzUixSeya789Uf3
uOb0OFtbVmniENUcouCwXgWPewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzEXz5S
O3hEeJRchdvJxrGPSuLRMB8GA1UdIwQYMBaAFEBQKksMH/RoL1LjQGQEREUofUu4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjE3OS81NEUwNDcxNkFB
N0MxMUVGQTMzQkZENzdDNEY5QUUwMi9RRkFxU3d3ZjlHZ3ZVdU5BWkFSRVJTaDlT
N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FGQXFTd3dmOUdndlV1TkFaQVJFUlNoOVM3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NjE3OS81NEUwNDcxNkFBN0MxMUVGQTMzQkZENzdDNEY5QUUwMi9RRkFxU3d3ZjlH
Z3ZVdU5BWkFSRVJTaDlTN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCduiNCqIzKCnTsSXi//oljMyyBp729SAFpkqNUElLhXacgWPG5olG+
GB35tyVCrBbcl1pg2c9QEic7gfAuLG2Bub6Y3Q4qMtgXNhe6BpMWUf/uXDMnBdYv
FK+7K0bRPzUxmNYO9pYiVtgOjp4ngjT8Wgy2SzisIkC8AuhkVmpUWO2EFvKt1Jw6
KbcgnBsPi+iw21DMN06zZMIAl1q+5byJr6ERsAxA1qECL1l9CXQqq5ZCtYXB0SVt
/LuIovVP4l3Bi/okP8Bqeb+kB3H3IjtWLxiyEw0B9Bifd26nfCGZ2mHNg6jnTtv/
6Q7DRk+tyoehiEPxocPh/d0NR5KbMqgY
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:18 2025 by rpki-client