This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
File: Q2NMcBuh8e_Oj1aqatHbKUWh258.mft (raw, json)
Hash identifier: fgaR21aWQuqA9jeNeUhG/WBOQESK2201ATorIXlrf74=
Subject key identifier: 58:D8:43:EC:9B:7C:62:F3:68:65:5E:05:98:7A:39:C1:BB:F5:25:20
Authority key identifier: 43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F
Certificate issuer: /CN=A918549C/serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F
Certificate serial: 0106
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
Manifest number: 0103
Signing time: Tue 09 Dec 2025 03:08:11 +0000
Manifest this update: Tue 09 Dec 2025 03:08:10 +0000
Manifest next update: Tue 16 Dec 2025 03:08:10 +0000
Files and hashes: 1: Q2NMcBuh8e_Oj1aqatHbKUWh258.crl (hash: UX8DzL3ccgzys70N9ud95VVJUSjJ23xqwlbAUR6pcWw=)
2: ABA45B1A740611F0B304387CC4F9AE02.roa (hash: 6m3OrJ+Nr9fWhODWggrIoilybpGVkuQ4teq6GCx+Hw0=)
3: 9C6F77784A3211EFBDBCEB2FC4F9AE02.roa (hash: VtLgFQFuvZQFqc3/1iLIm4m/GkaEOorvnwwczfuLsfc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl
rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Dec 2025 03:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918549C, serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F
Validity
Not Before: Dec 9 03:08:10 2025 GMT
Not After : Dec 16 03:08:10 2025 GMT
Subject: CN=6937929b-b057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:10:79:9a:61:95:0e:b6:e7:d7:2e:61:30:66:
01:ee:ee:94:ff:1f:98:13:73:a1:eb:a8:ab:65:c1:
7f:c5:62:95:e1:e1:cf:4f:16:ec:06:5c:05:d5:92:
1e:d0:e5:5d:39:85:2e:0a:3c:d0:73:77:03:23:2d:
39:2e:aa:44:3a:52:a6:fa:4d:08:7d:db:41:a5:93:
a8:bb:61:db:d8:5f:c5:91:26:2a:19:19:d2:c7:bd:
ba:63:0c:9d:03:bf:f5:2e:c2:f8:c0:0a:8b:5d:3a:
06:9b:09:1c:71:1c:b7:6a:4f:ad:f0:94:63:f3:d2:
5e:cd:85:2c:fb:98:0a:1c:ab:7c:17:c7:dc:7b:f1:
c3:b9:bf:c8:90:db:82:b1:41:ee:11:3a:67:55:62:
ad:df:29:bd:2f:30:15:fe:30:92:a2:c4:2e:b0:55:
28:07:5a:52:cc:68:59:d7:df:8c:1f:42:1e:24:98:
66:59:db:25:8d:ac:a4:19:62:cf:0c:26:25:7d:41:
e7:39:66:80:85:83:9e:80:42:6b:48:9b:eb:6e:16:
8f:92:56:a6:4f:83:99:4e:2e:54:ec:98:9d:85:68:
df:83:ee:30:b7:f0:6d:30:c9:03:d1:2d:8a:a1:e6:
35:9e:f7:4d:d4:1e:65:d5:28:be:f3:cc:60:86:75:
e7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D8:43:EC:9B:7C:62:F3:68:65:5E:05:98:7A:39:C1:BB:F5:25:20
X509v3 Authority Key Identifier:
keyid:43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:72:b1:00:a4:af:fc:08:72:b1:02:ef:89:a0:16:ce:81:c8:
36:7d:fb:86:ea:9f:22:a0:7e:93:4f:b2:c8:42:57:fb:3b:c0:
b7:85:ce:3f:eb:df:fc:a1:6a:b9:73:a5:e7:cc:fa:57:b1:75:
f4:35:4c:e9:c9:11:ac:97:c6:9a:02:fe:b2:39:23:de:88:ca:
92:f3:6f:a9:66:b5:52:86:bf:fa:70:20:e7:6e:e8:ee:3a:be:
03:de:bf:48:dd:dc:6e:97:8e:0a:92:bf:2f:7f:2c:65:da:50:
eb:28:34:9a:b6:c6:4b:61:90:ee:f5:f7:f7:dd:63:1b:d8:8c:
e5:6a:78:eb:3b:00:6c:6a:45:be:91:f9:a6:b1:c7:14:0b:10:
4c:8d:1f:c3:70:1e:62:24:91:ef:0c:85:87:a1:39:dd:74:cb:
e5:38:2e:c5:65:37:56:a0:47:dc:8f:48:ce:27:ab:0c:6f:5e:
b9:b7:57:ca:f7:a9:2e:14:d1:93:ef:c3:dd:43:52:45:e8:8f:
49:06:27:46:b7:36:d7:09:a2:ee:67:1e:94:5a:a0:39:07:a9:
bd:44:e8:57:2c:31:25:e9:29:50:9b:c4:d8:b1:bf:15:5e:a8:
d0:c2:2f:eb:2b:1a:f5:9d:14:71:11:da:52:14:c1:0b:b1:e2:
0d:eb:3f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 05:08:35 2025 by rpki-client