This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
File: qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft (raw, json)
Hash identifier: 0hbHDULRB+fq00G9cH30gT/OdO/MjfrR/p8i9ECakBQ=
Subject key identifier: 5D:03:41:59:96:C6:89:09:89:1B:9F:C2:6B:D9:83:18:C3:EC:CA:A5
Authority key identifier: A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9
Certificate issuer: /CN=A9190587/serialNumber=A9B53F7B619631870928902FF484765741BDA2E9
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
Manifest number: 4A
Signing time: Wed 03 Dec 2025 05:33:32 +0000
Manifest this update: Wed 03 Dec 2025 05:33:31 +0000
Manifest next update: Wed 10 Dec 2025 05:33:31 +0000
Files and hashes: 1: qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl (hash: Gr+JdynibYn4vEAWWHhvpTGw5EojkjFZRjujFVR5GEg=)
2: 0B9DC9A2623711F0B8A15A64C4F9AE02.roa (hash: 5FDU6DEKQtmTGtpdU43fv/DkGAEq2snYHdpdiV+BACQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl
rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 05:33:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190587, serialNumber=A9B53F7B619631870928902FF484765741BDA2E9
Validity
Not Before: Dec 3 05:33:31 2025 GMT
Not After : Dec 10 05:33:31 2025 GMT
Subject: CN=692fcbac-0730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:3d:b4:f3:ea:1a:58:2b:5f:43:e3:2d:c3:
97:d3:57:3e:18:ee:25:76:ee:dc:6f:99:6a:44:0c:
d5:e6:ee:fa:41:0b:ba:79:8f:2d:ea:7b:8b:c4:0e:
29:78:6c:3d:2d:d8:17:e2:7d:33:b6:a2:49:ae:b6:
05:dc:fd:4f:0f:3d:1d:23:9a:65:4c:f7:e1:53:6d:
7d:9a:de:d1:04:f0:78:79:69:c8:8a:d0:b0:d3:42:
b9:05:33:69:aa:d6:b9:e8:c2:32:70:db:a0:40:cf:
96:c4:2b:39:4a:08:d9:6c:6b:6e:ea:1a:42:fa:60:
10:db:cc:d7:47:81:e0:f7:31:da:c9:43:81:70:62:
c3:da:99:ff:34:84:33:3d:c0:96:6c:56:a8:f1:bf:
41:9a:23:fc:74:e2:88:fc:d8:d9:93:d7:17:00:1b:
b8:c2:00:1a:74:1e:b2:92:d6:b9:93:e4:1f:a2:9d:
4a:83:b9:00:a9:38:2a:28:f8:cf:3a:bd:22:52:16:
3f:16:33:4a:f5:4e:80:ce:56:3c:64:21:1b:8b:b4:
73:21:a0:45:e5:4a:95:f9:13:7e:1f:a3:50:ac:26:
ac:53:0a:b4:e8:2e:79:64:4f:8e:cc:51:26:b9:a4:
bc:b0:53:5f:fa:b3:7f:c7:89:c5:93:ae:88:a4:c5:
30:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:03:41:59:96:C6:89:09:89:1B:9F:C2:6B:D9:83:18:C3:EC:CA:A5
X509v3 Authority Key Identifier:
keyid:A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:8e:5a:d4:3a:60:89:1d:19:d0:4e:10:9d:aa:eb:76:75:b4:
05:04:c5:b1:12:88:38:c8:a0:23:66:ac:b8:fb:e1:67:55:98:
6e:f4:6b:1b:89:a1:00:ee:48:d3:96:a4:f7:94:13:2e:59:16:
ce:86:6e:1a:1b:e0:86:a1:ad:5a:20:fb:86:d6:57:04:30:86:
17:b8:c6:ae:48:c6:b5:28:db:d1:08:31:7d:ab:a4:08:14:a6:
ea:2a:c4:29:31:59:78:78:88:2b:a0:18:92:d3:59:4e:c3:1f:
65:f6:41:7d:8d:cc:f6:22:9c:e5:33:8f:2e:5d:83:bb:83:84:
35:48:50:4f:d9:7b:cd:d1:bd:eb:3b:46:a1:09:ec:2b:60:49:
c9:e3:14:1c:e6:e2:3d:d9:6f:84:cc:97:4d:50:50:e0:82:4c:
a0:71:7f:b6:5d:6b:3f:0f:f6:54:03:93:8b:c0:15:8f:5a:b1:
c1:a8:4c:9e:41:fb:82:c6:72:a9:23:37:a3:10:5f:5d:1f:31:
05:db:08:09:3a:a0:70:58:4b:09:93:44:3f:85:61:37:00:5d:
16:a9:c5:7a:b0:b0:ee:b9:45:1e:74:b4:e1:02:4e:c3:ea:fc:
32:c9:ec:a2:11:f2:3f:1b:c4:ad:5c:10:ca:d1:9c:b7:c7:40:
ad:96:85:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:30 2025 by rpki-client