This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
File: _qFPI_25d6xkidIQbjXgI7KJaNw.mft (raw, json)
Hash identifier: ++ud80khi+obbNIU6rO1eSjjjcrIoqI2f5gtpDGI+gk=
Subject key identifier: DB:6E:47:96:66:42:77:73:8F:1A:61:03:B8:D9:D8:13:4D:04:8D:82
Authority key identifier: FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC
Certificate issuer: /CN=A91DDCB6/serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC
Certificate serial: 08E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
Manifest number: 08CB
Signing time: Sat 06 Dec 2025 19:39:07 +0000
Manifest this update: Sat 06 Dec 2025 19:39:06 +0000
Manifest next update: Sat 13 Dec 2025 19:39:06 +0000
Files and hashes: 1: _qFPI_25d6xkidIQbjXgI7KJaNw.crl (hash: iW4NQ4zfJuQfOumjvewd5v/H11oh40rL+wQD8aBUXFc=)
2: 9CB5878688DD11ECAC36C11FC4F9AE02.roa (hash: /p1nc+7VxWl9wJcQ4iUMoK6PHm48jxAJkzvga1eMyM8=)
3: 2086256888B911ECAC54E716C4F9AE02.roa (hash: yiCrf2CBs1DTx9LePbZGWl/avup1Zfij9Oz3lNKWDkU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl
rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 19:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2277 (0x8e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCB6, serialNumber=FEA14F23FDB977AC6489D2106E35E023B28968DC
Validity
Not Before: Dec 6 19:39:06 2025 GMT
Not After : Dec 13 19:39:06 2025 GMT
Subject: CN=6934865b-fb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:99:ed:d4:29:60:15:40:01:e3:e1:34:21:cd:
00:7b:23:1b:66:a1:fd:a6:13:98:7f:8e:bc:fa:89:
26:70:b0:1c:49:86:26:1d:4a:50:25:6a:f8:ec:4d:
f7:09:c0:62:0e:41:7c:24:54:14:d8:60:69:62:07:
94:d1:f9:1c:a2:d1:40:2d:af:72:26:db:9d:05:c0:
bf:4a:85:89:89:56:07:b7:ed:61:4c:0b:9f:aa:f8:
a8:4a:dc:bd:1a:88:86:9b:c3:53:9a:34:c8:b6:63:
8b:f1:b2:60:d8:2b:61:d2:26:55:53:49:b1:eb:55:
fd:08:3a:a7:22:57:43:18:3e:6a:ed:9f:05:a5:84:
b7:db:e7:13:fa:ec:cb:37:ca:1f:21:31:a6:0f:14:
95:dd:3f:72:72:71:dc:42:6e:c0:5e:9f:37:89:07:
9b:20:4b:11:9a:9e:37:1d:d9:ba:7b:53:cc:7d:10:
2f:0f:4c:28:bc:ab:2f:b2:69:c3:50:d0:a1:86:54:
10:52:1b:98:5a:5b:44:6f:c5:9c:7c:83:90:c3:d3:
82:92:a6:88:ce:5e:04:5c:17:30:7f:cb:66:12:39:
4c:17:f3:07:2c:82:f0:a7:5a:43:9c:59:05:ab:b5:
f6:b4:b4:88:6f:cd:04:f3:e3:09:67:72:4b:b9:c8:
e0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6E:47:96:66:42:77:73:8F:1A:61:03:B8:D9:D8:13:4D:04:8D:82
X509v3 Authority Key Identifier:
keyid:FE:A1:4F:23:FD:B9:77:AC:64:89:D2:10:6E:35:E0:23:B2:89:68:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qFPI_25d6xkidIQbjXgI7KJaNw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/F077598ECC3D11EA8BC45C29C4F9AE02/_qFPI_25d6xkidIQbjXgI7KJaNw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:b6:1b:9b:73:7c:37:9a:e6:ac:e6:9f:4e:72:d4:5d:b6:9e:
e0:33:80:89:8c:51:22:7d:37:0b:c1:27:db:f1:59:70:1f:da:
86:ca:0b:2b:7a:55:be:2f:36:bc:f7:41:81:12:4d:c9:85:e6:
ba:92:f3:77:16:6a:f2:f0:17:28:dc:35:2d:dc:bd:1f:24:f4:
a4:bc:cd:02:ab:bf:3b:a1:58:a5:8f:ba:d5:62:cf:2b:fb:15:
bd:4c:c5:7a:a5:81:5e:d5:e2:59:bb:1e:7c:e9:6d:29:d4:bc:
c9:67:52:cc:44:4f:d2:24:d2:9d:9a:b8:02:40:5a:2c:e7:95:
ea:42:ae:88:1e:30:08:5e:ee:ed:3b:f4:56:52:4e:6c:27:4b:
34:b3:64:dc:42:7f:ff:71:0d:c5:85:91:05:41:90:bd:3a:f5:
65:45:b0:a0:20:4c:3f:eb:4e:86:b8:32:45:42:b2:b9:b4:1f:
e3:97:68:5b:ba:ff:87:35:89:a3:b7:7c:43:f6:06:25:21:b4:
69:7e:c6:e4:84:b0:93:56:83:81:57:56:2c:ed:73:59:45:b2:
a1:b9:01:ee:76:eb:f8:e4:ee:09:e7:ef:cd:77:e0:a0:97:fd:
4f:a6:10:58:2d:29:cd:66:81:62:94:31:9d:84:c4:8e:ee:75:
a5:4c:a0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 16:59:48 2025 by rpki-client