This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
File: qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft (raw, json)
Hash identifier: Bhd2zpISJXMXgf/76E/5oFyYZ9CAmd2JWt+tfzqAz8Q=
Subject key identifier: E3:71:87:35:0D:D3:C6:BC:9F:F3:B3:F5:F8:FB:7F:01:73:7B:7C:1C
Authority key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
Certificate issuer: /CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
Certificate serial: 0146
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
Manifest number: 0139
Signing time: Tue 23 Dec 2025 03:37:03 +0000
Manifest this update: Tue 23 Dec 2025 03:37:03 +0000
Manifest next update: Tue 30 Dec 2025 03:37:03 +0000
Files and hashes: 1: qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl (hash: cnQnkYdLrRTChUvXZCFKvodveGSiyr2Fgh/qlVFhU30=)
2: 77BB354CC1E711F0BF1FBB0DC4F9AE02.roa (hash: GnAy7gUWULKK+0ha0Z5VnbvN7dc+3rJnS4hS/5snCUs=)
3: 362B52EA31C511F0B796F75DC4F9AE02.roa (hash: 32ChZuN5aLmUO2MNOxKOn9C6wDIBYJGI4WGeVTj7tjg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl
rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326 (0x146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91705D7, serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
Validity
Not Before: Dec 23 03:37:03 2025 GMT
Not After : Dec 30 03:37:03 2025 GMT
Subject: CN=694a0e5f-0ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:83:41:5b:ae:7e:c3:e2:99:b8:17:65:f1:91:
b8:12:a7:22:7b:f1:6b:90:e9:29:87:d1:a8:58:69:
d2:ef:60:a5:e0:17:4a:45:e5:0a:53:06:78:0f:e2:
40:21:ca:b2:07:c1:fe:6c:b9:12:aa:5d:e2:9c:06:
a8:1b:07:d7:fc:51:31:9e:04:78:4e:e5:46:c5:97:
1f:06:51:e2:c5:28:74:11:82:c4:23:67:a7:3d:28:
c5:5a:66:c1:94:b8:9b:e0:21:40:01:23:34:73:80:
49:ed:ad:72:40:47:39:66:ec:30:e3:bc:c7:7b:a4:
74:07:a4:6b:e2:4d:e2:ac:65:61:8b:8d:eb:d8:32:
aa:09:d7:bb:ca:57:f7:10:e3:47:71:fb:bf:07:c4:
54:32:f7:1c:4a:83:e0:78:15:7c:56:1d:1c:c4:d8:
40:6a:98:01:88:df:38:e6:92:af:eb:02:fa:f3:91:
32:d2:35:78:8f:10:39:d6:ea:08:08:a7:06:48:6b:
ca:50:6d:0e:64:b9:29:dd:e8:be:47:58:8f:bf:26:
24:17:7f:3b:47:1c:29:1d:fe:28:e4:c8:4b:98:51:
c8:e1:1a:4d:29:e8:5a:33:e0:a4:33:a6:bd:a0:15:
5b:f7:df:70:a9:a3:e6:e4:77:09:d4:11:ee:76:5d:
d7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:71:87:35:0D:D3:C6:BC:9F:F3:B3:F5:F8:FB:7F:01:73:7B:7C:1C
X509v3 Authority Key Identifier:
keyid:AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:44:58:91:66:68:61:d4:29:62:a3:e2:0d:dc:3e:44:22:48:
67:2c:b8:bf:8e:ff:a4:ac:d7:f0:34:e7:93:30:2a:51:1b:0e:
9f:f9:ab:4a:3f:9a:02:39:0b:2d:cf:99:0e:25:fa:9e:f5:87:
ea:59:56:97:f9:75:18:fd:18:6e:37:c3:0e:63:29:78:4d:62:
10:9d:be:ce:c2:55:36:aa:10:a5:59:e4:83:b6:6b:36:f4:a3:
20:03:f4:92:a7:d1:ca:56:99:a3:4e:f8:3e:a5:2f:f4:fd:1e:
c8:25:4d:ae:d3:4b:6f:99:c0:f5:fb:49:49:3b:32:3c:8a:ea:
62:9b:fe:21:52:57:b4:98:f9:da:fc:9a:4b:be:57:48:96:ae:
47:53:52:04:75:ab:ae:70:32:e0:07:cd:89:5a:c2:dd:1c:a4:
56:e5:24:12:12:c5:e9:c9:de:8b:02:e0:47:e5:c4:8e:07:03:
13:0f:34:2e:95:03:1a:58:51:a8:c4:d4:fc:ef:d7:b6:70:61:
00:0f:56:82:0b:a7:83:26:26:30:44:9a:6a:89:c5:8c:12:41:
e6:68:5e:c5:0c:51:ac:b5:da:1a:95:01:40:03:a7:11:04:72:
36:60:36:1a:47:90:54:c2:c9:de:86:75:b0:32:4c:4a:05:bd:
f2:54:a7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 04:52:07 2025 by rpki-client