This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
File: QVQG7YC02Sekeai6BCEWri0RoaY.mft (raw, json)
Hash identifier: paUQZxo2CBGTT0NkDGrVpXozHSvlWUWbGbQzE0XnhbY=
Subject key identifier: 64:6B:61:F1:B7:48:6B:AD:FD:DB:E0:C8:A0:35:3A:65:1C:B1:17:BD
Authority key identifier: 41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
Certificate issuer: /CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Certificate serial: 194B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
Manifest number: 1920
Signing time: Wed 10 Dec 2025 16:03:06 +0000
Manifest this update: Wed 10 Dec 2025 16:03:05 +0000
Manifest next update: Wed 17 Dec 2025 16:03:05 +0000
Files and hashes: 1: QVQG7YC02Sekeai6BCEWri0RoaY.crl (hash: 8Lk0a8s9Bn/I4u58Cde9iReX0AJwDGSliZsP5Xlu490=)
2: 62C9C1CEE03111EEBECE581EC4F9AE02.roa (hash: /HjqJb3HeVbYY01kD6wIaTbG/Ekr2hN/Y4VOZSnVUZ8=)
3: 215F871ECF5E11F0872AA04EC4F9AE02.roa (hash: wXQTHLnxlobISfO/uP19l950cYfOxZoHNCPztVyG7Ow=)
4: 43E9842C185A11EF9D0C4338C4F9AE02.roa (hash: irpR0h3jscaijLl59Cc3m/8UUXHvczEBFVSowrAT4Uk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl
rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Dec 2025 16:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6475 (0x194b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFBA1, serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Validity
Not Before: Dec 10 16:03:05 2025 GMT
Not After : Dec 17 16:03:05 2025 GMT
Subject: CN=693999b9-5212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:5a:37:c6:fd:6e:30:00:4d:d9:d1:74:5b:
ed:4f:d8:e0:13:2a:c8:ea:db:06:34:c1:07:9a:72:
02:59:56:93:3b:c1:00:35:02:6d:c7:05:3b:84:68:
2d:0e:c8:5d:7b:28:84:4c:d9:36:00:ee:fa:ca:fe:
47:3a:51:cf:09:90:b3:08:ad:2b:21:04:27:0e:ff:
e5:68:1c:3a:f6:8e:33:75:f6:ba:a6:ff:17:32:e1:
9c:1a:69:43:08:95:06:d6:18:f0:7f:69:2a:6b:91:
e0:be:65:0b:d0:43:d5:24:6f:3a:6a:9f:68:ec:77:
4d:11:d0:a4:11:df:56:9c:0e:c6:05:02:55:a1:e9:
52:f9:4a:bb:55:17:52:bf:45:11:20:0f:21:ed:7d:
85:0e:41:2c:22:b8:64:78:5d:0f:9f:59:04:08:45:
f4:56:65:53:1d:3c:c4:c4:97:fa:cc:31:db:33:ae:
c0:ec:22:dd:91:b3:c5:8f:24:5a:0a:20:0a:bf:c7:
ab:11:4e:f2:7d:b3:d2:47:f0:cf:f4:1f:ab:c7:28:
32:44:5f:0e:e3:f1:1e:48:08:74:89:2a:b2:2f:62:
dd:e4:d7:30:f4:00:1c:8c:c1:2d:40:b4:36:9f:0b:
81:cd:1c:a3:cb:d5:6f:fa:c9:44:f8:87:6c:7e:db:
52:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6B:61:F1:B7:48:6B:AD:FD:DB:E0:C8:A0:35:3A:65:1C:B1:17:BD
X509v3 Authority Key Identifier:
keyid:41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:22:97:9d:c5:ff:1f:9e:d9:1a:5b:f9:a6:45:81:48:f7:9a:
ca:ce:e7:97:39:41:96:5e:e8:75:71:73:15:43:5b:41:ba:f2:
22:5f:0d:a5:a9:9d:96:0d:12:60:11:5b:33:51:60:de:1b:43:
3c:63:91:8f:c4:b0:a2:91:20:35:6e:27:e6:e9:ec:a8:59:60:
4c:2d:ca:b3:b9:63:57:ec:03:65:5c:c5:42:55:a9:38:80:40:
77:06:de:42:e6:cd:2a:68:99:76:ea:64:ed:24:65:22:da:7a:
09:69:a2:91:12:ad:84:81:e0:b9:a3:60:78:1a:c4:c9:7e:29:
68:f4:4f:a5:a5:7e:8b:7a:7d:a9:d1:bd:0b:01:52:72:97:a9:
12:1f:4b:7e:75:90:a7:d7:65:9a:7c:69:1d:28:ba:08:97:33:
0f:f6:b8:4f:15:40:8c:21:7c:4b:af:10:da:db:ca:48:c4:6c:
61:ed:6a:c0:ca:8c:15:5d:31:ab:11:36:39:af:4f:f5:78:2c:
f9:bf:42:14:3b:e0:43:cc:86:3c:35:e9:72:10:78:4e:03:d8:
47:f0:9d:2e:43:24:4c:52:ad:e9:4c:c3:4a:2e:23:4d:b0:3b:
cf:bb:e3:ec:9f:3e:6d:b2:51:32:5a:35:95:d3:35:31:75:b0:
a0:87:d9:e3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUZCQTExMTAvBgNVBAUTKDQxNTQwNkVEODBCNEQ5MjdBNDc5QThCQTA0MjExNkFF
MkQxMUExQTYwHhcNMjUxMjEwMTYwMzA1WhcNMjUxMjE3MTYwMzA1WjAYMRYwFAYD
VQQDEw02OTM5OTliOS01MjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwKBaN8b9bjAATdnRdFvtT9jgEyrI6tsGNMEHmnICWVaTO8EANQJtxwU7hGgt
DshdeyiETNk2AO76yv5HOlHPCZCzCK0rIQQnDv/laBw69o4zdfa6pv8XMuGcGmlD
CJUG1hjwf2kqa5HgvmUL0EPVJG86ap9o7HdNEdCkEd9WnA7GBQJVoelS+Uq7VRdS
v0URIA8h7X2FDkEsIrhkeF0Pn1kECEX0VmVTHTzExJf6zDHbM67A7CLdkbPFjyRa
CiAKv8erEU7yfbPSR/DP9B+rxygyRF8O4/EeSAh0iSqyL2Ld5Ncw9AAcjMEtQLQ2
nwuBzRyjy9Vv+slE+IdsfttSZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRrYfG3
SGut/dvgyKA1OmUcsRe9MB8GA1UdIwQYMBaAFEFUBu2AtNknpHmougQhFq4tEaGm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkJBMS8yQUQ1MUY0Qzk5
MDMxMUU3QTVFOTVDNkZDNEY5QUUwMi9RVlFHN1lDMDJTZWtlYWk2QkNFV3JpMFJv
YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FWUUc3WUMwMlNla2VhaTZCQ0VXcmkwUm9hWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RkJBMS8yQUQ1MUY0Qzk5MDMxMUU3QTVFOTVDNkZDNEY5QUUwMi9RVlFHN1lDMDJT
ZWtlYWk2QkNFV3JpMFJvYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCcIpedxf8fntkaW/mmRYFI95rKzueXOUGWXuh1cXMVQ1tBuvIiXw2l
qZ2WDRJgEVszUWDeG0M8Y5GPxLCikSA1bifm6eyoWWBMLcqzuWNX7ANlXMVCVak4
gEB3Bt5C5s0qaJl26mTtJGUi2noJaaKREq2EgeC5o2B4GsTJfilo9E+lpX6Len2p
0b0LAVJyl6kSH0t+dZCn12WafGkdKLoIlzMP9rhPFUCMIXxLrxDa28pIxGxh7WrA
yowVXTGrETY5r0/1eCz5v0IUO+BDzIY8NelyEHhOA9hH8J0uQyRMUq3pTMNKLiNN
sDvPu+Psnz5tslEyWjWV0zUxdbCgh9nj
-----END CERTIFICATE-----
Generated at Thu Dec 11 23:01:21 2025 by rpki-client