This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.mft
File: QVaOgAk79NEF6TJNX4ISRTGsQT8.mft (raw, json)
Hash identifier: 1prGlmv+yOORhmsJLlat7sEPjaYr1aMLZ9V1bcD2EE0=
Subject key identifier: 7E:23:90:A1:F2:F3:37:02:DD:33:E7:03:83:39:2A:6C:61:96:79:10
Authority key identifier: 41:56:8E:80:09:3B:F4:D1:05:E9:32:4D:5F:82:12:45:31:AC:41:3F
Certificate issuer: /CN=A91B6A04/serialNumber=41568E80093BF4D105E9324D5F82124531AC413F
Certificate serial: 10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVaOgAk79NEF6TJNX4ISRTGsQT8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.mft
Manifest number: 10
Signing time: Tue 23 Dec 2025 06:49:13 +0000
Manifest this update: Tue 23 Dec 2025 06:49:13 +0000
Manifest next update: Tue 30 Dec 2025 06:49:13 +0000
Files and hashes: 1: QVaOgAk79NEF6TJNX4ISRTGsQT8.crl (hash: 5FzZY7/MRZ746uqne5uUVpoowL1hGNk+Lil0uRsSC18=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.crl
rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVaOgAk79NEF6TJNX4ISRTGsQT8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 06:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6A04, serialNumber=41568E80093BF4D105E9324D5F82124531AC413F
Validity
Not Before: Dec 23 06:49:13 2025 GMT
Not After : Dec 30 06:49:13 2025 GMT
Subject: CN=694a3b69-fc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b5:af:ab:da:1d:e7:55:82:3a:d4:b5:ed:c7:
e6:e0:81:74:f6:36:d1:9d:92:b1:22:b8:fa:07:e1:
3b:58:bd:89:97:69:5b:25:5e:7f:91:8a:a3:98:e9:
05:7a:32:53:45:98:11:6c:7e:22:c3:97:34:5d:f1:
e2:28:b9:e7:f7:18:a0:78:a5:17:4c:c2:11:a2:05:
26:e9:54:66:ec:2a:e6:4c:cc:40:2c:f4:93:b4:6a:
4b:a4:f0:d5:1e:8f:26:6a:fc:ce:cc:ed:41:b7:f7:
0d:48:87:6f:97:90:22:57:d9:36:73:1d:6b:ff:b9:
7f:32:fe:aa:38:73:a4:0b:5c:06:e6:83:b6:6a:74:
00:36:12:a2:cf:60:34:a0:9f:f7:db:5a:ac:e3:6d:
c8:2d:78:ef:23:b6:58:ea:61:3b:41:13:9f:dd:22:
c7:73:fb:36:bd:9e:b9:fa:4e:c3:7f:94:d3:84:fe:
2f:ed:8f:4e:f1:45:d2:0b:38:6d:49:30:bc:2d:ae:
05:3f:0e:93:62:cb:d6:ae:58:fd:1c:fa:e2:c5:3c:
80:59:d1:c5:41:01:d3:9e:9e:e5:d0:9a:7c:71:d1:
79:4f:18:9d:b5:52:c5:2a:eb:34:0b:2e:4b:f1:78:
9c:c5:f3:e7:61:7e:c5:cd:79:71:6b:ed:94:03:74:
63:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:23:90:A1:F2:F3:37:02:DD:33:E7:03:83:39:2A:6C:61:96:79:10
X509v3 Authority Key Identifier:
keyid:41:56:8E:80:09:3B:F4:D1:05:E9:32:4D:5F:82:12:45:31:AC:41:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVaOgAk79NEF6TJNX4ISRTGsQT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6A04/30D77996C9AE11F0BA222745C4F9AE02/QVaOgAk79NEF6TJNX4ISRTGsQT8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:96:28:e6:27:4f:31:d2:00:3d:dc:a5:0f:11:70:4f:44:fb:
ba:2e:30:c3:f3:00:04:aa:37:6e:c6:59:62:b8:a6:fd:08:8a:
fc:f3:e5:bf:59:4f:0e:c8:88:1f:04:4f:9a:d9:91:44:5a:12:
3c:cd:85:04:19:13:a0:c5:5f:05:6c:29:12:51:e4:6c:1f:0c:
dc:75:96:1e:e8:36:7b:0c:64:e5:80:e2:af:0b:2b:09:f4:d3:
f1:8e:7a:7b:21:94:41:87:45:95:3d:c2:82:53:eb:e3:b5:55:
63:a3:5a:21:e7:ce:46:94:e8:fd:d1:54:6a:56:3b:ba:4a:5d:
8a:64:30:99:73:0c:e4:fb:a0:35:b9:ad:8c:a4:a2:ee:23:f7:
c4:97:33:c2:cd:35:18:d2:1a:e0:5c:f3:45:db:4e:c5:59:88:
36:aa:23:ea:a3:76:4a:b5:0c:04:a3:dd:9c:87:ae:88:7d:b0:
7b:7f:65:70:7f:03:28:6f:ff:4b:34:8a:bd:3c:e4:26:d2:64:
77:bd:43:ac:ae:ff:70:87:15:05:0b:d4:ae:9c:c1:70:b4:02:
85:1c:15:24:12:9a:3e:d1:07:0c:af:cd:d7:9d:c3:f3:70:ab:
3a:d6:77:85:9c:2a:1c:4c:d3:19:8d:e7:17:08:b0:b4:f7:82:
10:7a:46:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:05:06 2025 by rpki-client