This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
File: quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json)
Hash identifier: CmTrv6DSrF2joFzHc23GU40t+lxLibKBLOliII6Bgzs=
Subject key identifier: AE:52:FB:97:95:CF:E8:8E:70:1B:99:48:69:A0:6D:74:C6:90:9B:F8
Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
Certificate issuer: /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Certificate serial: DD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
Manifest number: D7
Signing time: Wed 03 Dec 2025 04:05:02 +0000
Manifest this update: Wed 03 Dec 2025 04:05:02 +0000
Manifest next update: Wed 10 Dec 2025 04:05:02 +0000
Files and hashes: 1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: kussn/5X/uCnOogFaD2Mk/9hjFHJ7ETAKSx9wMzZEb8=)
2: 7CEBE3D254CC11F0A18D9383C4F9AE02.roa (hash: MhC1AUnnrCM4ujHXiGVbZ9ds9R03Dh/i7EuqXSdVjoQ=)
3: 0A6CBB6E54CD11F0A3E48084C4F9AE02.roa (hash: zutu0HkO4ucOHeH/2JeJGru547OHviuXA/RDD+leiEs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 04:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Validity
Not Before: Dec 3 04:05:02 2025 GMT
Not After : Dec 10 04:05:02 2025 GMT
Subject: CN=692fb6ee-fb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b4:ac:d7:17:72:d2:44:3f:a6:54:f3:37:f1:
8f:c4:56:57:0b:d9:ca:d7:db:86:0a:d1:7e:4c:d6:
b8:ae:d1:3d:8f:e4:8f:87:80:4e:07:c6:c5:c8:11:
a2:f0:00:11:bb:05:22:08:dd:3f:df:24:23:ff:4f:
89:ce:e2:8e:06:24:84:74:80:93:50:2c:a0:4e:4e:
32:ee:45:cc:75:02:00:1b:d0:6e:35:59:92:d7:2c:
4c:1d:73:77:ed:35:fd:76:75:03:35:02:fb:98:78:
73:43:d4:ea:71:ec:db:09:f8:24:77:95:3f:66:eb:
db:e5:9c:09:da:04:02:27:a2:4d:d2:2c:5f:e4:3e:
e4:d6:d7:fc:cf:7d:69:1e:ea:a7:9e:18:ff:99:89:
40:00:ee:06:fc:69:85:7a:b2:ce:b8:65:ea:21:84:
11:63:a9:ff:44:72:63:ac:f8:fd:18:ee:db:35:42:
42:3f:f4:c2:c7:aa:93:97:c9:56:fe:a3:40:7b:e3:
94:6e:61:a0:59:85:69:cd:0d:cd:e6:fe:0f:f9:28:
55:2b:59:fa:ce:fe:2e:c2:f8:9b:52:68:0a:06:6a:
0a:25:0e:0f:27:21:10:94:b4:d2:8a:d6:1d:0b:07:
15:9c:19:b7:a1:37:30:26:2d:fa:43:3b:57:83:11:
2c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:52:FB:97:95:CF:E8:8E:70:1B:99:48:69:A0:6D:74:C6:90:9B:F8
X509v3 Authority Key Identifier:
keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:04:cf:46:2c:e2:f8:95:ff:8a:74:41:cb:11:26:c1:3d:44:
c9:3c:5b:97:55:ab:d2:78:ca:74:d0:d2:11:28:15:56:c5:d2:
82:e3:6e:d1:fd:cc:a6:b8:7a:82:e8:55:00:09:88:9e:31:bd:
a8:da:8d:62:45:13:9a:88:25:e2:be:c0:e5:2a:36:72:8d:46:
32:1e:53:23:0f:64:93:13:92:75:b5:c8:66:f5:d2:51:95:2c:
e1:d4:9d:0b:e7:2d:2e:ee:6b:6a:ad:a9:58:98:37:96:a6:38:
51:6e:c0:e2:4a:07:9d:02:c8:16:0e:5f:c3:0e:a3:69:ee:43:
d0:29:f4:de:c9:59:55:6f:8e:43:5d:29:dd:c1:49:c0:82:08:
24:de:a1:03:ee:6a:0a:bf:bc:a1:d4:f1:25:91:3b:e6:34:22:
75:dd:d2:94:ac:1b:49:3c:a9:97:78:15:00:12:33:47:7d:89:
da:d4:b2:1d:a2:cc:2f:f6:8e:fe:06:ff:df:97:86:7a:bb:a9:
09:07:47:f9:f5:9d:83:87:8d:1f:9d:a1:af:6f:55:f1:8c:ad:
eb:e9:35:fc:d7:f3:2e:16:7a:bc:3f:92:c8:b2:05:fe:18:5f:
e5:29:1f:2b:f7:18:cf:a6:f8:da:ff:cf:f0:37:77:b6:ab:e5:
31:3e:b9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:14:35 2025 by rpki-client