This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
File: QRBhvlydJMUpvH1WmJtK0sE40SM.mft (raw, json)
Hash identifier: DjOrxltCEVz5xnY8ddDnGxPhCKddxmVUsmlCDffCcVY=
Subject key identifier: 38:96:C3:C1:8C:0D:EC:B4:21:00:54:A3:F3:50:E3:FE:DC:F7:F0:34
Authority key identifier: 41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23
Certificate issuer: /CN=A9161A95/serialNumber=411061BE5C9D24C529BC7D56989B4AD2C138D123
Certificate serial: 74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
Manifest number: 74
Signing time: Tue 23 Dec 2025 05:43:29 +0000
Manifest this update: Tue 23 Dec 2025 05:43:28 +0000
Manifest next update: Tue 30 Dec 2025 05:43:28 +0000
Files and hashes: 1: QRBhvlydJMUpvH1WmJtK0sE40SM.crl (hash: g85u07ns0/54dR58bNDumoPKtJy31iPxuEg3d3YiZHI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.crl
rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161A95, serialNumber=411061BE5C9D24C529BC7D56989B4AD2C138D123
Validity
Not Before: Dec 23 05:43:28 2025 GMT
Not After : Dec 30 05:43:28 2025 GMT
Subject: CN=694a2c00-8662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:58:62:7a:27:0e:e9:49:6d:7d:f9:38:ae:da:
4f:85:57:23:43:72:d3:78:8e:5a:b9:8b:ee:53:bb:
61:86:5e:82:df:a1:05:59:70:5b:b0:52:1d:d8:95:
0a:e3:aa:1a:15:84:83:aa:0e:86:25:99:23:96:ab:
7f:c8:19:f4:bd:68:2c:e3:6c:8c:88:b5:f4:fe:6f:
3e:68:79:18:01:53:67:48:f3:0c:22:c7:a4:a0:c5:
8d:55:2a:bf:ae:46:b8:4d:16:ae:fb:d2:44:4d:c6:
b6:2b:9e:1c:6e:e4:00:14:ff:7a:a6:f7:ce:78:ac:
99:73:52:22:f0:a3:4d:41:ad:1e:46:9d:3c:3c:e6:
68:77:f8:88:bd:39:13:62:0f:a3:31:ba:d0:19:66:
f2:c7:80:f8:d2:6b:78:b1:3d:a7:fb:1e:67:39:de:
9b:44:7c:20:73:cb:63:37:9c:8e:95:b4:6e:2e:f0:
6f:63:e5:6e:e2:9a:6d:f1:e7:89:f1:c7:ae:0c:1e:
91:18:19:5a:fd:2f:6f:d6:29:21:0c:83:5a:06:43:
40:ca:d3:4a:dd:77:62:84:22:e9:b1:bb:11:3c:e1:
e0:92:62:4e:7f:2a:e9:8c:fe:21:21:e3:1c:98:b6:
30:85:30:12:a9:f7:57:42:a5:51:7e:12:a4:a3:c4:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:96:C3:C1:8C:0D:EC:B4:21:00:54:A3:F3:50:E3:FE:DC:F7:F0:34
X509v3 Authority Key Identifier:
keyid:41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:c8:60:62:4d:96:05:38:6e:22:59:8d:02:0b:18:f0:35:50:
d1:9b:0a:1d:ef:0e:8d:8e:06:b6:38:86:f2:45:92:0a:52:67:
9b:a1:bc:2e:46:ff:16:cb:2c:ac:fb:8f:49:78:12:8c:fd:72:
71:df:f5:9d:4e:4d:e2:fe:9b:f9:aa:7b:3d:ed:e0:12:4c:2e:
f3:9d:6a:13:c9:b9:7b:be:63:77:84:50:07:05:64:45:20:63:
42:75:ac:89:0b:9e:04:07:ba:fc:cb:d1:ca:cd:70:28:72:65:
71:47:80:54:30:a2:94:24:c7:2c:00:9d:94:e5:03:80:cc:9f:
df:21:dc:85:55:7b:a4:65:5e:f6:39:47:fd:3c:44:bf:33:93:
73:0f:7e:b0:db:f6:8c:05:9c:d4:55:d1:ea:3c:1c:a1:7b:08:
f6:6f:b8:a0:e6:3d:89:ae:2b:ed:b9:ae:92:f9:85:c4:43:48:
c4:36:a9:0f:36:90:d1:c6:87:e1:2d:cb:01:6b:80:6f:25:eb:
3f:2f:41:a2:cc:bb:63:a3:da:09:a5:fc:22:c2:fb:1d:bb:8f:
81:7a:84:e7:df:70:23:0b:7a:36:8b:90:0e:2d:3d:cb:35:dc:
fb:83:45:25:65:0b:6d:94:c1:5d:10:3d:60:07:5d:1d:ba:b0:
ef:46:47:06
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
MUE5NTExMC8GA1UEBRMoNDExMDYxQkU1QzlEMjRDNTI5QkM3RDU2OTg5QjRBRDJD
MTM4RDEyMzAeFw0yNTEyMjMwNTQzMjhaFw0yNTEyMzAwNTQzMjhaMBgxFjAUBgNV
BAMMDTY5NGEyYzAwLTg2NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDdWGJ6Jw7pSW19+Tiu2k+FVyNDctN4jlq5i+5Tu2GGXoLfoQVZcFuwUh3YlQrj
qhoVhIOqDoYlmSOWq3/IGfS9aCzjbIyItfT+bz5oeRgBU2dI8wwix6SgxY1VKr+u
RrhNFq770kRNxrYrnhxu5AAU/3qm9854rJlzUiLwo01BrR5GnTw85mh3+Ii9ORNi
D6MxutAZZvLHgPjSa3ixPaf7Hmc53ptEfCBzy2M3nI6VtG4u8G9j5W7imm3x54nx
x64MHpEYGVr9L2/WKSEMg1oGQ0DK00rdd2KEIumxuxE84eCSYk5/KumM/iEh4xyY
tjCFMBKp91dCpVF+EqSjxO6XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOJbDwYwN
7LQhAFSj81Dj/tz38DQwHwYDVR0jBBgwFoAUQRBhvlydJMUpvH1WmJtK0sE40SMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQTk1Lzk0NzYxODg2MkJE
OTExRjBBQjQ0MzEyMkM0RjlBRTAyL1FSQmh2bHlkSk1VcHZIMVdtSnRLMHNFNDBT
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUVJCaHZseWRKTVVwdkgxV21KdEswc0U0MFNNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx
QTk1Lzk0NzYxODg2MkJEOTExRjBBQjQ0MzEyMkM0RjlBRTAyL1FSQmh2bHlkSk1V
cHZIMVdtSnRLMHNFNDBTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHnIYGJNlgU4biJZjQILGPA1UNGbCh3vDo2OBrY4hvJFkgpSZ5uhvC5G
/xbLLKz7j0l4Eoz9cnHf9Z1OTeL+m/mqez3t4BJMLvOdahPJuXu+Y3eEUAcFZEUg
Y0J1rIkLngQHuvzL0crNcChyZXFHgFQwopQkxywAnZTlA4DMn98h3IVVe6RlXvY5
R/08RL8zk3MPfrDb9owFnNRV0eo8HKF7CPZvuKDmPYmuK+25rpL5hcRDSMQ2qQ82
kNHGh+EtywFrgG8l6z8vQaLMu2Oj2gml/CLC+x27j4F6hOffcCMLejaLkA4tPcs1
3PuDRSVlC22UwV0QPWAHXR26sO9GRwY=
-----END CERTIFICATE-----
Generated at Wed Dec 24 19:32:25 2025 by rpki-client