This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
File: qgt4LbmTLiL93vDD91WW7glF4S0.mft (raw, json)
Hash identifier: aI7RRFrt+pYMFw4PkRROMDl9yxs/dLJmrZQsJNDCq1I=
Subject key identifier: C6:75:78:D9:11:BD:59:39:75:EC:5F:3D:7F:55:0F:8C:D6:F3:48:D7
Authority key identifier: AA:0B:78:2D:B9:93:2E:22:FD:DE:F0:C3:F7:55:96:EE:09:45:E1:2D
Certificate issuer: /CN=A917C909/serialNumber=AA0B782DB9932E22FDDEF0C3F75596EE0945E12D
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
Manifest number: BF
Signing time: Sun 21 Dec 2025 05:06:21 +0000
Manifest this update: Sun 21 Dec 2025 05:06:20 +0000
Manifest next update: Sun 28 Dec 2025 05:06:20 +0000
Files and hashes: 1: qgt4LbmTLiL93vDD91WW7glF4S0.crl (hash: A6XBCSotcMdtT/mmvOetKOJJo85p0dNhI2PN9tUFSQM=)
2: 3A0E0B1CD47511EF91EA0832C4F9AE02.roa (hash: pAj7NdDmToipkIAovmtOfynK/RP/8C5/+xzCsvCxUC8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.crl
rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 05:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C909, serialNumber=AA0B782DB9932E22FDDEF0C3F75596EE0945E12D
Validity
Not Before: Dec 21 05:06:20 2025 GMT
Not After : Dec 28 05:06:20 2025 GMT
Subject: CN=6947804d-1100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:e9:ec:3d:c7:70:40:a5:b9:59:2f:c6:2c:
c9:56:1d:74:4c:39:ec:ca:4f:fe:96:2f:af:e1:f4:
b9:2a:f4:f0:62:55:59:b7:4e:7e:4f:ac:a9:45:fe:
cf:44:fb:da:60:bd:fd:aa:a9:29:4c:e0:6c:50:fc:
79:5a:d6:64:83:17:f5:c3:5e:05:91:fc:a9:7e:ca:
2b:5f:21:7a:43:4e:09:83:ee:b1:c6:62:43:4b:7c:
58:61:d6:8b:4b:bb:25:0c:8c:b0:fe:83:1c:ad:30:
ab:5d:8b:34:63:99:05:89:94:29:3d:a4:b5:f6:68:
d2:5d:74:a6:75:3e:a1:c1:6a:04:c5:b2:10:61:72:
e2:18:ab:b4:ca:e6:a9:5e:ed:c5:ff:88:0c:b0:5b:
a8:26:bd:ce:3d:12:86:84:2b:c4:ce:0a:52:41:bf:
43:2d:74:63:03:11:8b:4a:89:59:05:90:de:f2:2a:
31:55:15:f2:9f:e7:a3:43:f0:56:4b:3e:f8:87:09:
9e:ea:72:e8:34:9a:e5:40:c3:e1:08:2e:31:e6:7b:
78:05:1d:5c:23:42:f2:cd:dd:95:e5:86:53:3c:8b:
f1:66:85:8a:af:f1:a5:ef:db:8a:50:cf:50:56:76:
fc:ef:4d:8b:cc:ec:8c:d9:a6:f7:75:f3:e7:4d:bd:
a3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:75:78:D9:11:BD:59:39:75:EC:5F:3D:7F:55:0F:8C:D6:F3:48:D7
X509v3 Authority Key Identifier:
keyid:AA:0B:78:2D:B9:93:2E:22:FD:DE:F0:C3:F7:55:96:EE:09:45:E1:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:72:ae:89:b7:5a:9e:17:61:25:b8:4f:db:05:2b:c1:2f:39:
3b:6c:94:5a:d4:ff:d9:39:3a:17:64:02:35:2f:07:36:da:41:
d7:2d:31:b7:7f:27:f8:73:99:fd:28:4f:6c:a9:9d:0d:31:20:
1b:c4:88:8c:2e:1a:cb:95:c2:5e:49:aa:66:01:9d:b6:8a:47:
50:be:db:cb:52:6b:75:72:13:5d:2e:cb:55:71:79:98:bb:a8:
07:80:9d:d2:05:70:7e:02:67:28:a5:c6:9d:1c:30:01:f8:df:
09:f2:19:a4:db:0f:21:46:e1:16:4d:e1:43:39:1e:cb:7b:cb:
72:67:cc:1f:13:d9:c9:d4:f4:9d:30:bc:88:11:ec:0f:d6:87:
df:62:99:d6:9b:61:ee:74:56:3e:79:1b:50:dc:fa:57:cf:6d:
c0:a8:b9:90:ac:4a:50:96:d9:2a:6b:3b:75:8b:b3:45:97:c5:
7d:d9:ef:49:a5:43:20:04:bf:55:e5:de:a5:31:da:01:75:ae:
8f:be:3b:26:6e:85:42:36:a7:dc:de:26:e5:36:75:ab:7f:28:
fd:a5:93:e2:d5:8e:5a:59:c6:1d:4e:2b:55:0c:b1:93:d3:c3:
68:7f:5f:ca:bb:08:52:7f:6b:a9:07:7e:49:f4:d6:0c:93:ed:
f2:3c:f9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 03:08:15 2025 by rpki-client