This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
File: q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft (raw, json)
Hash identifier: YyB1yNFR/Y+IEoMCSZqfBsdqdbGigft1TIeDvqTAtAQ=
Subject key identifier: D2:C1:BB:8E:14:AE:1A:46:35:2A:80:7A:36:B9:02:AA:6C:A9:22:93
Authority key identifier: AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83
Certificate issuer: /CN=A918C5C8/serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
Certificate serial: 05AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
Manifest number: 05A6
Signing time: Mon 22 Dec 2025 22:17:22 +0000
Manifest this update: Mon 22 Dec 2025 22:17:22 +0000
Manifest next update: Mon 29 Dec 2025 22:17:22 +0000
Files and hashes: 1: q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl (hash: WfEhPVjLNL4cVKgz97Ckme0TwTdrfm6kJzp90JsssI0=)
2: 012EAE068C1411EDA66E4F28C4F9AE02.roa (hash: bvK3RLeaCONliQ5wzuPxM2m0myPmTbQv9PJcnbReiQA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl
rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 22:17:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1454 (0x5ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C5C8, serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
Validity
Not Before: Dec 22 22:17:22 2025 GMT
Not After : Dec 29 22:17:22 2025 GMT
Subject: CN=6949c372-2fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0b:a4:26:16:f3:77:e3:52:30:a1:fc:c4:5b:
ec:d4:b5:68:1c:09:04:0a:a6:30:bb:a4:b2:f2:af:
38:e3:d5:24:e1:34:67:95:da:f8:9d:8b:4b:60:68:
05:8d:55:9c:88:6f:4f:2a:79:85:b7:53:71:5a:0f:
87:db:64:ec:08:96:27:7b:2d:b4:71:02:e4:80:fd:
01:3e:dc:78:07:4c:e9:5f:e7:8d:77:0d:d1:5c:f0:
73:a7:63:83:a9:c2:c0:f7:f8:a2:ad:7c:28:d5:28:
ca:1e:02:3d:16:ae:69:1d:16:70:52:d2:35:c6:c9:
6f:19:35:f3:b8:df:35:32:0b:a4:e1:e2:7c:f3:70:
fc:2d:3c:1b:dd:70:56:c0:cd:c1:c6:57:a0:ad:21:
34:10:f8:ac:27:1c:0b:7c:fa:41:ee:c0:09:04:f7:
f7:32:c5:ca:2b:e6:2b:c7:0b:81:c2:da:55:26:1f:
2d:02:c9:54:9a:c8:37:81:9f:da:d8:50:4e:f8:93:
3a:5f:f7:17:1e:9d:55:a0:c8:4f:00:e5:be:8d:2e:
d7:c8:1a:39:1d:53:95:08:86:83:10:67:9e:7c:0c:
e0:3f:93:cb:3c:cd:e7:42:a1:53:d4:42:f9:ee:eb:
6f:c3:8e:06:9a:95:c7:04:d3:1d:6b:3f:0d:a6:62:
07:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C1:BB:8E:14:AE:1A:46:35:2A:80:7A:36:B9:02:AA:6C:A9:22:93
X509v3 Authority Key Identifier:
keyid:AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:13:71:b6:33:9d:b9:cc:74:14:d9:b7:01:c0:44:5a:44:57:
b2:31:92:9f:76:19:00:9b:61:38:86:cd:5a:bf:b2:8b:1f:f7:
1a:67:97:55:a0:10:8c:ad:f6:ea:41:c5:60:b9:78:b1:10:f4:
73:18:e1:d5:47:04:e9:cf:94:5d:0a:17:2c:64:c1:8c:1e:a8:
13:88:8a:a0:2d:48:17:27:d0:9c:31:4d:1d:ad:87:df:9a:ab:
9a:5c:41:ca:23:ee:82:d7:d3:7a:91:dd:c4:4b:75:26:5b:ea:
88:46:c7:a6:1a:29:9f:40:22:5b:de:a7:77:5f:52:3f:f2:39:
1a:2a:aa:ab:52:1d:b7:73:25:55:8e:27:f2:f1:13:7e:a8:bf:
19:ec:4f:06:50:b3:01:51:fc:a5:ba:c0:25:02:1d:da:07:c0:
40:c4:16:8b:87:88:03:f0:22:5b:49:4a:95:2e:09:ae:97:39:
44:18:11:7e:9d:04:ae:a9:50:c6:63:62:43:60:3f:04:9b:d5:
fb:3a:0c:88:4f:22:24:8f:5d:d2:fa:70:02:1c:fd:b0:53:67:
03:d9:e5:34:b8:cd:3e:cb:e1:d1:7b:51:09:3e:e4:af:ce:0f:
4b:ea:8f:5a:50:67:2d:de:5f:65:75:dd:3a:5d:06:d0:0e:db:
99:0c:2d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:22 2025 by rpki-client