This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
File: QcEdgay69pPnrWH6EU53uf1PV8M.mft (raw, json)
Hash identifier: UxVkg9K1KhcmywR4fDyLtpzbPKgO6XVp/BYZB3JLEV0=
Subject key identifier: 4E:6F:EF:FA:96:C8:D0:DD:FE:CB:C3:99:82:6F:30:6A:01:15:BE:54
Authority key identifier: 41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3
Certificate issuer: /CN=A9147EA8/serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3
Certificate serial: 0681
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
Manifest number: 067C
Signing time: Mon 22 Dec 2025 21:43:31 +0000
Manifest this update: Mon 22 Dec 2025 21:43:31 +0000
Manifest next update: Mon 29 Dec 2025 21:43:31 +0000
Files and hashes: 1: QcEdgay69pPnrWH6EU53uf1PV8M.crl (hash: L3OI5W6uuXoKpbXPecNhI4GMUngzR11q+DYkVCFsx+s=)
2: 63F5A844A07211EBB1E80A0BC4F9AE02.roa (hash: I8raS3rzHehCDzjWbyD11Ayxc3LxtxDJxeikCNG+l5Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl
rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:43:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1665 (0x681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147EA8, serialNumber=41C11D81ACBAF693E7AD61FA114E77B9FD4F57C3
Validity
Not Before: Dec 22 21:43:31 2025 GMT
Not After : Dec 29 21:43:31 2025 GMT
Subject: CN=6949bb83-54e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b7:9a:18:dc:a3:a0:3b:28:e5:87:1b:73:ba:
28:7a:1c:c9:93:a4:33:ca:79:7e:55:e8:13:e1:97:
e5:44:4b:18:fd:0c:f0:12:83:19:c6:f5:17:63:48:
e8:4d:91:1d:ad:b8:0a:bf:e6:7c:66:09:f4:80:05:
28:84:01:d7:cb:63:47:fc:f7:99:c4:8b:a0:8b:3e:
bb:58:9e:79:67:6c:fd:5a:4c:62:90:c4:4b:b5:21:
df:2d:04:32:d8:ab:fe:0c:12:3d:3a:96:06:59:aa:
67:37:d3:18:34:0a:c4:b8:68:4e:76:3c:e2:ea:c7:
66:a8:20:05:47:51:7e:85:8c:26:20:dc:6b:4a:ae:
69:23:70:27:63:5d:ec:e6:3d:b5:68:8e:e1:d2:55:
12:a6:9a:bb:1a:97:d3:de:99:5a:7e:7e:1b:71:e5:
40:e4:42:4e:44:ea:4e:ef:e4:04:5d:84:a2:c8:26:
92:eb:30:d0:74:27:8f:c3:0b:2a:e4:4c:19:4a:72:
01:9b:5d:91:f7:ee:1b:44:66:e1:5c:c3:e1:24:af:
b4:8a:fd:2f:cb:6a:26:af:b7:fb:59:0b:75:24:66:
f8:40:6d:80:0a:4f:d1:4a:5a:fd:3d:0c:47:87:3e:
ae:f0:d6:00:db:21:41:80:89:96:f9:a8:8e:d3:83:
b4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6F:EF:FA:96:C8:D0:DD:FE:CB:C3:99:82:6F:30:6A:01:15:BE:54
X509v3 Authority Key Identifier:
keyid:41:C1:1D:81:AC:BA:F6:93:E7:AD:61:FA:11:4E:77:B9:FD:4F:57:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcEdgay69pPnrWH6EU53uf1PV8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147EA8/84175156A07011EB9AB6E65BC4F9AE02/QcEdgay69pPnrWH6EU53uf1PV8M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b4:05:8f:86:33:42:b0:50:71:d0:97:a2:c6:f3:ae:02:27:
b2:be:24:e6:c8:ad:e4:e6:7f:27:bf:7e:e7:b0:c9:c2:08:f0:
35:10:35:4f:e1:d1:e2:46:aa:59:b1:1e:46:30:ae:38:e1:94:
e7:f5:0d:b5:30:73:3d:d2:3e:46:a0:a6:d3:30:5d:f3:2d:98:
46:8f:65:03:7c:e3:87:96:1b:ed:50:8f:42:a2:8b:6a:30:4c:
01:1e:1e:d4:86:60:41:62:90:02:3e:b4:ab:9a:99:77:c3:5b:
eb:88:9a:0c:74:14:8f:40:89:f4:a8:a4:f3:af:58:cb:5d:b7:
99:5f:1d:61:d1:95:41:43:92:61:72:2b:0f:7a:35:5b:b5:7c:
f0:e7:8b:46:d7:6d:dd:f6:55:de:3e:f7:02:7b:38:76:4a:6c:
06:56:57:5c:5b:05:90:f1:d1:5d:e0:f2:8a:13:83:d4:40:dd:
a3:64:a3:6e:99:f8:0c:9c:5f:27:38:fe:9d:dd:71:52:84:36:
5b:4e:a3:83:f5:74:72:5e:ef:22:5e:6b:8e:13:05:f4:ed:87:
87:16:0b:47:dc:0b:b7:bd:e6:f7:3f:2a:36:bd:47:55:0f:37:
d5:5a:65:4e:bf:eb:94:e4:14:b1:c5:50:34:04:74:09:eb:91:
a5:22:ba:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:33 2025 by rpki-client