This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft
File: QuOGLXRTXCypqrN6cZW1keruIeU.mft (raw, json)
Hash identifier: iGe6hJS/WiSZiy+n08rvKIjNRKC/Xywl32l1T8atRh8=
Subject key identifier: A7:54:B3:25:E6:39:CC:55:AD:2B:F2:A9:FD:8E:79:E2:15:CD:B3:3E
Authority key identifier: 42:E3:86:2D:74:53:5C:2C:A9:AA:B3:7A:71:95:B5:91:EA:EE:21:E5
Certificate issuer: /CN=A91580E4/serialNumber=42E3862D74535C2CA9AAB37A7195B591EAEE21E5
Certificate serial: 8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft
Manifest number: 89
Signing time: Mon 15 Dec 2025 06:00:24 +0000
Manifest this update: Mon 15 Dec 2025 06:00:23 +0000
Manifest next update: Mon 22 Dec 2025 06:00:23 +0000
Files and hashes: 1: QuOGLXRTXCypqrN6cZW1keruIeU.crl (hash: bkEDtMb0KM03Rjx2d9XgMfn3WJJFWpVOyxO0STy9PaU=)
2: DE48485AACF611F09C3A4F81C4F9AE02.roa (hash: cP40ap8CBMpy7Xix6leaPe20TppMEaWJFbCrqt13ecE=)
3: 78DE938EACF611F0B7108B77C4F9AE02.roa (hash: 0lWMdOzn8JsOFNV5zHVowX9ZpAtUiG0Mngxq9SwqdPw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.crl
rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Dec 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91580E4, serialNumber=42E3862D74535C2CA9AAB37A7195B591EAEE21E5
Validity
Not Before: Dec 15 06:00:23 2025 GMT
Not After : Dec 22 06:00:23 2025 GMT
Subject: CN=693fa3f8-ba79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:46:78:aa:04:2d:ba:67:f3:02:22:72:d5:
3a:5c:a3:60:35:32:30:bf:30:a4:c3:37:cc:83:67:
39:fe:5c:b1:af:43:d8:5b:55:f6:5e:17:a5:f4:57:
0f:b0:14:a0:89:2a:5c:42:92:0f:a7:fa:3b:25:80:
c3:5f:1d:4a:02:dd:73:a4:0a:3b:27:b6:00:9d:3a:
30:12:85:f7:6c:5f:ac:c1:11:58:b1:92:8d:66:ab:
af:fb:3f:3b:ab:09:11:0e:11:e1:d5:a5:2c:5b:2f:
63:1f:9c:14:7e:38:c6:e1:c7:34:d4:d2:43:83:f8:
37:91:3d:ff:e5:cc:59:e6:36:21:0d:bb:3e:1f:bb:
16:e1:67:f1:1d:72:5a:92:73:27:ce:0f:ce:99:fb:
dc:b4:98:af:2e:1e:53:31:55:50:8f:7e:12:64:81:
04:bb:18:c6:b5:3c:47:d6:9a:c7:08:66:a4:d7:9e:
ba:af:33:1b:ba:89:2d:da:e2:ba:67:21:da:7d:f0:
f8:d6:0f:d3:50:a6:ce:67:b8:ab:db:f3:5d:50:55:
95:8e:76:d1:f0:87:b1:69:81:bc:05:c0:7c:37:07:
b9:e3:27:fd:60:64:b6:79:c9:00:8b:07:3b:7d:7a:
79:c3:88:8d:ac:78:ed:aa:b4:67:6c:8c:4c:71:36:
03:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:54:B3:25:E6:39:CC:55:AD:2B:F2:A9:FD:8E:79:E2:15:CD:B3:3E
X509v3 Authority Key Identifier:
keyid:42:E3:86:2D:74:53:5C:2C:A9:AA:B3:7A:71:95:B5:91:EA:EE:21:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QuOGLXRTXCypqrN6cZW1keruIeU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580E4/5C0C955008BC11F0BEB4F552C4F9AE02/QuOGLXRTXCypqrN6cZW1keruIeU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:4e:43:e0:69:4e:6f:d9:5f:94:a9:21:92:95:53:98:67:b6:
56:ff:a4:59:d4:7a:ec:28:6f:91:a7:97:49:08:46:21:d9:b6:
71:a9:d3:33:d6:37:fe:b7:29:0b:e8:41:95:12:8a:51:37:ef:
50:14:3b:95:c7:78:e4:56:57:43:fb:cc:ce:f8:14:13:79:3d:
cf:2a:72:61:e0:01:e9:89:2f:93:24:85:26:4d:fb:ca:b5:b7:
8e:a3:b9:e5:02:b1:2a:b5:7e:84:7d:1a:24:e5:a0:1e:d9:a9:
6c:0c:41:69:11:c2:96:ec:ce:3d:58:30:c0:15:ac:cc:31:50:
b7:e9:44:5d:11:a0:55:f3:3a:7f:f8:dd:69:dd:ff:8d:20:fa:
f4:fd:fc:38:e1:8f:c3:ea:84:04:7f:33:0d:58:60:34:8e:dd:
91:8f:3d:77:d8:85:28:50:ae:9b:65:4b:26:9b:38:28:28:5f:
9d:75:d8:7b:d1:bb:6b:c9:99:21:ca:f0:11:d3:85:c8:5d:47:
cc:0b:8d:3e:41:d6:e9:97:60:9a:ce:b0:63:1b:1a:55:bc:b2:
ed:01:2a:42:4e:cf:ef:d7:a4:e8:e3:73:32:16:4d:41:ce:d9:
0f:ba:a2:36:65:48:37:81:dc:7b:7b:37:c2:f4:d2:6c:cf:74:
a4:5a:3e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 13:40:22 2025 by rpki-client