This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft
File: qCkvYgTIIT15H6bMqvV4UZTvgaA.mft (raw, json)
Hash identifier: yAETasVAeu7QDLMDTMkHIqQd9jgWbz3/TSvBkd9YSIk=
Subject key identifier: E2:37:38:92:63:E6:57:C3:62:DA:B0:2F:0E:57:9F:E9:15:EA:CC:20
Authority key identifier: A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0
Certificate issuer: /CN=A91FDEFE/serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0
Certificate serial: C7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft
Manifest number: C6
Signing time: Tue 09 Dec 2025 03:50:32 +0000
Manifest this update: Tue 09 Dec 2025 03:50:31 +0000
Manifest next update: Tue 16 Dec 2025 03:50:31 +0000
Files and hashes: 1: qCkvYgTIIT15H6bMqvV4UZTvgaA.crl (hash: LOX/4YKZC/jW8KUIkkUe1ZFWKT6HRcuXgTH5uu5KAFo=)
2: E7695EC6A53411EFB98AFE51C4F9AE02.roa (hash: Lu7YmWMIdl1OwrJtUhBGFe6+OAHwy7pjCKEXO1Xq/dY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl
rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Dec 2025 03:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDEFE, serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0
Validity
Not Before: Dec 9 03:50:31 2025 GMT
Not After : Dec 16 03:50:31 2025 GMT
Subject: CN=69379c87-0163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0c:65:b0:ea:38:d0:e4:1f:7c:1e:ab:e0:f0:
21:51:0c:0d:5e:ce:7a:d6:79:af:02:6f:44:e5:b0:
27:e2:30:20:b4:99:4f:0e:29:e1:54:80:d8:6e:1a:
5f:66:04:41:d6:8a:c2:9d:f7:9c:7f:58:b9:04:bf:
d5:41:dc:35:4f:27:0d:df:8e:ad:55:48:09:85:13:
88:53:05:55:61:8d:0a:a7:39:9d:ed:65:7f:f3:1a:
8d:a2:39:73:00:7c:fe:ff:97:0b:9e:a2:28:6d:35:
65:e9:b9:37:d8:8a:3c:9c:ef:dd:f8:8e:2b:2c:f4:
6b:3a:53:f5:c6:1b:3e:67:43:fa:c1:15:4c:9f:4c:
6c:4d:23:0e:fd:96:fb:24:c8:2c:79:31:bf:e3:80:
2d:b3:03:d0:c8:f5:5e:0c:b0:91:a9:90:a6:a7:12:
ec:09:d9:0b:bd:df:b9:72:48:d7:5c:00:43:d8:f4:
fd:7b:7b:d0:d0:9b:62:e1:13:b1:5a:af:e4:c6:72:
56:b1:75:47:ec:7b:48:cc:84:65:28:7e:ee:52:8c:
a0:ed:4e:0b:b1:c9:9e:85:0c:f5:d4:eb:43:10:5c:
67:8c:f8:21:3e:90:78:a6:8f:49:33:4b:98:de:af:
be:2a:a3:87:81:be:d6:ab:af:b9:e4:e6:65:95:8e:
58:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:37:38:92:63:E6:57:C3:62:DA:B0:2F:0E:57:9F:E9:15:EA:CC:20
X509v3 Authority Key Identifier:
keyid:A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:a1:34:62:15:ce:85:11:48:f6:3c:da:d3:b7:1f:29:30:c3:
e3:25:c1:dc:d6:82:a1:a7:64:82:e9:7b:91:ef:5d:d3:ee:db:
2f:9a:67:10:a7:7c:e2:d4:e1:67:38:ba:21:48:dc:a8:64:7e:
14:f0:91:0c:ac:b2:76:b1:99:cf:02:b9:e2:9b:4a:02:18:95:
b5:eb:62:8c:72:35:d2:4e:fb:9f:01:47:e0:0c:fd:72:b9:c6:
9c:f7:dd:15:66:b0:02:79:5d:e6:47:f9:44:f7:3e:f2:ff:e5:
2a:fe:8d:11:7d:37:68:17:34:90:93:60:2e:74:88:41:f1:db:
a4:4b:73:9f:d1:3a:a8:c4:1d:42:ca:7d:bc:89:7d:b5:e4:63:
51:f2:71:84:a7:16:6f:a7:12:96:72:58:d7:a6:95:2c:9b:c2:
04:cb:c1:02:ca:c8:96:62:e5:ad:37:22:61:51:d7:9b:4b:70:
72:9c:7f:b1:16:17:37:21:a2:e5:64:2e:3c:1a:e8:a0:67:90:
52:ab:91:c7:14:f0:61:f9:57:6d:80:5d:15:1d:2d:aa:0e:40:
6e:6a:4e:0e:9f:2b:42:94:eb:ae:97:9f:8b:77:a0:f7:60:35:
e4:8a:ab:19:7f:3f:29:b1:08:7d:1e:e0:6d:07:91:03:68:47:
f7:67:6a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 13:52:10 2025 by rpki-client