This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
File: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft (raw, json)
Hash identifier: vZEUkzRVyVCKyz8WiXXMGg8hjbvCQZXS4sxer8qyAK0=
Subject key identifier: 03:2C:21:22:6A:FF:CE:CD:23:56:90:06:9A:6C:46:51:BA:92:7E:D1
Authority key identifier: 41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12
Certificate issuer: /CN=A91D8BB1/serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
Certificate serial: 62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
Manifest number: 62
Signing time: Wed 03 Dec 2025 05:18:27 +0000
Manifest this update: Wed 03 Dec 2025 05:18:27 +0000
Manifest next update: Wed 10 Dec 2025 05:18:27 +0000
Files and hashes: 1: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl (hash: YMMOZn2+xe4rfrIRlQpe3GbnwGvoleCITrNtdk9cg/Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl
rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 05:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8BB1, serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
Validity
Not Before: Dec 3 05:18:27 2025 GMT
Not After : Dec 10 05:18:27 2025 GMT
Subject: CN=692fc823-80dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:39:08:4d:a8:70:20:04:78:83:53:42:e3:fe:
f5:77:92:8e:42:40:a3:45:0d:94:2e:32:ea:69:5f:
11:87:ae:68:87:95:65:69:d2:45:ee:17:d0:fe:70:
ec:6d:8d:78:0b:84:7b:2f:90:0b:9b:fd:b0:20:6c:
bc:e6:75:e6:04:2b:2c:1d:a0:a0:54:f9:68:97:8f:
c7:89:9c:b0:9b:89:5e:00:93:d8:9b:99:69:a7:f3:
a8:6b:45:ba:98:69:50:e0:86:7c:27:dc:be:26:df:
a5:79:61:d4:ad:c0:7b:b5:8d:67:80:8e:24:2c:e7:
f6:96:0d:b3:cb:7f:fd:c8:37:b0:f4:69:2c:c8:08:
59:2f:e0:bb:b0:04:8d:21:93:b2:2b:31:cc:cd:4c:
51:41:c3:f1:2b:66:2c:d3:6f:4e:1e:10:25:90:0a:
12:a8:a0:4c:ef:af:75:be:78:21:32:5f:13:42:52:
70:a4:5d:6f:bb:b4:01:38:ae:a6:2b:11:86:88:c7:
3c:66:87:83:9f:5a:b1:f7:f0:e0:83:13:d6:a9:a6:
15:d4:b6:b4:64:59:59:ce:cd:9b:8c:98:1e:f2:70:
85:8c:54:af:05:5e:eb:08:79:3f:34:26:d6:56:84:
6f:56:2e:eb:7e:f8:58:15:02:0b:f6:b1:eb:79:9f:
d2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2C:21:22:6A:FF:CE:CD:23:56:90:06:9A:6C:46:51:BA:92:7E:D1
X509v3 Authority Key Identifier:
keyid:41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:57:5d:e6:92:cc:a0:91:1d:33:a5:52:57:98:0c:92:e1:37:
25:df:b6:19:c0:64:41:b2:ff:94:24:34:7e:fb:cc:a4:cd:e0:
fb:e8:93:67:3f:02:6d:73:a7:3a:08:b5:86:2d:f8:e4:61:d7:
04:9d:bb:ed:ef:c2:c4:68:70:b6:6c:11:7c:2e:94:86:17:4d:
39:af:92:f7:ab:30:86:bd:a5:14:20:d5:15:64:2e:32:ef:27:
9f:1e:5d:8c:12:41:ae:31:67:ea:19:09:24:37:5f:01:01:04:
1d:05:b5:4a:24:e7:64:3d:d6:a4:3f:11:3e:15:26:35:4c:2f:
8f:24:53:a8:8b:2f:3e:4b:6c:47:db:fb:74:14:af:76:d1:ec:
c6:03:f2:67:dd:6c:5f:fe:19:3f:69:d8:16:68:b7:16:f9:f5:
1e:0d:73:69:04:0e:52:18:8c:b3:0f:84:7f:2a:3d:9e:29:71:
43:15:ee:02:d6:50:61:67:45:79:83:6e:37:ab:c4:f5:eb:34:
0a:bf:c7:e3:ee:b1:2a:ca:8b:bd:ae:7f:50:b5:d4:54:9b:d3:
6a:16:97:d0:94:3c:14:73:b2:d4:1b:ee:a8:f2:33:11:96:64:
b2:20:f0:18:18:e9:4e:79:08:1b:14:a5:06:28:64:93:61:69:
c2:04:0f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:56:37 2025 by rpki-client