This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
File: Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft (raw, json)
Hash identifier: H3o6w2N4V72UXMkPMKSdbqfqN5WD4ZDWIwuu/o736Pg=
Subject key identifier: 75:FB:C9:55:2F:6C:59:AD:48:C8:69:7C:4B:3D:5D:E4:1F:8F:5D:FD
Authority key identifier: 42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22
Certificate issuer: /CN=A91DF9B9/serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22
Certificate serial: 01C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
Manifest number: 01C1
Signing time: Fri 19 Dec 2025 02:14:00 +0000
Manifest this update: Fri 19 Dec 2025 02:13:59 +0000
Manifest next update: Fri 26 Dec 2025 02:13:59 +0000
Files and hashes: 1: Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl (hash: SFvDDWcpcPfXvqylCaD4AZEi5PlqRhYzwD7L15JfIX8=)
2: F3484DBA34CE11EEBBA9D046C4F9AE02.roa (hash: quzgA63SpLjcb7xHGEjv3O11w0qxKCOwrlK8xFLHM54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl
rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 02:13:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF9B9, serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22
Validity
Not Before: Dec 19 02:13:59 2025 GMT
Not After : Dec 26 02:13:59 2025 GMT
Subject: CN=6944b4e8-7028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:83:75:97:33:ff:31:ae:fc:41:cd:0c:a7:
b4:18:17:af:6d:94:17:55:f1:44:57:d0:85:42:95:
24:9a:4a:3a:70:4b:a8:07:d8:0e:1f:8a:01:4e:00:
a8:ba:c0:ab:74:16:e3:1a:e4:ba:dd:8d:3e:45:a5:
6b:11:84:a3:29:7f:04:96:1a:05:37:1c:e4:c7:3b:
cb:d6:77:6c:17:02:21:c5:58:ee:a9:78:af:93:2f:
0d:55:25:c8:b8:de:54:74:62:96:5c:9d:f4:dd:55:
3b:f1:1e:62:d4:5d:88:bf:a2:05:cb:e9:f8:7f:4a:
67:c3:e5:a5:6f:69:de:4b:f8:d3:01:40:c9:65:61:
e7:42:ef:66:9b:7a:90:a4:7f:df:c3:55:20:65:9d:
16:29:0d:80:a2:c6:5f:7b:c6:6d:33:fc:04:20:ae:
fd:9d:e9:15:67:a9:49:53:2d:8d:0a:45:f1:94:06:
7a:0b:16:08:37:51:f1:b3:51:a3:de:00:f7:a9:ed:
dc:cb:2d:de:c5:be:9b:23:cf:8d:85:0d:d9:3c:5d:
8d:15:59:83:70:01:ca:26:c3:79:c9:8a:c4:00:0b:
25:d1:b1:fa:84:16:b4:7b:06:3c:8e:92:d4:fc:15:
a1:c5:1f:ab:97:44:d1:0a:8d:cf:90:bc:1c:f3:4c:
2a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FB:C9:55:2F:6C:59:AD:48:C8:69:7C:4B:3D:5D:E4:1F:8F:5D:FD
X509v3 Authority Key Identifier:
keyid:42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:09:f6:5f:8f:26:b6:0c:fc:77:9b:db:bb:73:48:61:a0:91:
a0:a9:00:62:bf:03:f7:75:63:7b:6d:13:bc:2a:ef:06:44:62:
6f:e8:c7:55:18:c0:8d:01:39:c9:f1:5b:cf:f5:1f:6c:1f:6d:
d9:eb:75:ae:bb:5b:5a:12:fa:34:54:2b:92:e3:b4:1d:11:90:
bb:3c:74:64:43:6b:d9:02:e2:d1:49:53:c2:b0:97:48:cf:5a:
9b:f5:d2:88:8a:fe:82:a5:f2:ca:27:2c:94:48:f8:e4:13:79:
44:e1:9e:c2:7e:fb:2d:f0:09:bd:2c:f1:b3:9f:6a:65:7c:03:
04:9b:be:c7:2b:36:75:53:f3:3d:2b:a7:aa:d9:94:56:97:cc:
b6:7b:ed:b2:de:ca:43:7e:a1:19:4e:eb:cc:78:6f:ab:2d:82:
63:62:2b:55:1f:a7:b7:cd:3d:ab:5b:35:8e:4d:69:ae:cb:a3:
7c:49:42:ce:38:b3:d0:b1:0f:ea:58:6f:7f:31:90:1c:a8:88:
a3:1f:28:5a:0f:b4:87:4d:71:08:1a:01:7f:8a:dc:1c:96:3f:
a0:be:26:56:c4:19:aa:92:80:95:d9:c7:d4:d7:98:7b:37:61:
2b:50:c9:d0:49:a8:f9:8a:9d:6c:71:b7:64:24:d1:30:4e:c9:
21:18:e6:14
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REY5QjkxMTAvBgNVBAUTKDQyQ0U1MEUxQUM3MzNENUExNjZCNTQyQzNDNDkzMDlG
MzY1NkJGMjIwHhcNMjUxMjE5MDIxMzU5WhcNMjUxMjI2MDIxMzU5WjAYMRYwFAYD
VQQDDA02OTQ0YjRlOC03MDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApGWDdZcz/zGu/EHNDKe0GBevbZQXVfFEV9CFQpUkmko6cEuoB9gOH4oBTgCo
usCrdBbjGuS63Y0+RaVrEYSjKX8ElhoFNxzkxzvL1ndsFwIhxVjuqXivky8NVSXI
uN5UdGKWXJ303VU78R5i1F2Iv6IFy+n4f0pnw+Wlb2neS/jTAUDJZWHnQu9mm3qQ
pH/fw1UgZZ0WKQ2AosZfe8ZtM/wEIK79nekVZ6lJUy2NCkXxlAZ6CxYIN1Hxs1Gj
3gD3qe3cyy3exb6bI8+NhQ3ZPF2NFVmDcAHKJsN5yYrEAAsl0bH6hBa0ewY8jpLU
/BWhxR+rl0TRCo3PkLwc80wq3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHX7yVUv
bFmtSMhpfEs9XeQfj139MB8GA1UdIwQYMBaAFELOUOGscz1aFmtULDxJMJ82Vr8i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjlCOS85NTFGOThFQTMy
RDIxMUVFODY5RkRCNzFDNEY5QUUwMi9RczVRNGF4elBWb1dhMVFzUEVrd256Wld2
eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FzNVE0YXh6UFZvV2ExUXNQRWt3bnpaV3Z5SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RjlCOS85NTFGOThFQTMyRDIxMUVFODY5RkRCNzFDNEY5QUUwMi9RczVRNGF4elBW
b1dhMVFzUEVrd256Wld2eUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCfCfZfjya2DPx3m9u7c0hhoJGgqQBivwP3dWN7bRO8Ku8GRGJv6MdV
GMCNATnJ8VvP9R9sH23Z63Wuu1taEvo0VCuS47QdEZC7PHRkQ2vZAuLRSVPCsJdI
z1qb9dKIiv6CpfLKJyyUSPjkE3lE4Z7Cfvst8Am9LPGzn2plfAMEm77HKzZ1U/M9
K6eq2ZRWl8y2e+2y3spDfqEZTuvMeG+rLYJjYitVH6e3zT2rWzWOTWmuy6N8SULO
OLPQsQ/qWG9/MZAcqIijHyhaD7SHTXEIGgF/itwclj+gviZWxBmqkoCV2cfU15h7
N2ErUMnQSaj5ip1scbdkJNEwTskhGOYU
-----END CERTIFICATE-----
Generated at Sat Dec 20 20:10:13 2025 by rpki-client