This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
File: M3tFD93J_HAiHaXKCXhYhbHRt8w.mft (raw, json)
Hash identifier: QHmk4kSDGtNEgUYUxIoql7fXeiJGTXhNDegdznXMXko=
Subject key identifier: 11:A3:37:F3:FA:2F:9F:5A:09:2A:CE:CE:F8:6E:9D:17:E2:C1:30:1F
Authority key identifier: 33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
Certificate issuer: /CN=A912981B/serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
Certificate serial: 0171
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
Manifest number: 0165
Signing time: Thu 25 Dec 2025 03:10:38 +0000
Manifest this update: Thu 25 Dec 2025 03:10:38 +0000
Manifest next update: Thu 01 Jan 2026 03:10:38 +0000
Files and hashes: 1: M3tFD93J_HAiHaXKCXhYhbHRt8w.crl (hash: K/jppuy01n+s1Id8CT2hifi6OKKLqtFRuWB+nsOd29o=)
2: 9D107CE43FD311F08A76B677C4F9AE02.roa (hash: M4xxwp5XL8JXkQpTNZQamOx/rEaiqoV0xB/oQh2Nk2Y=)
3: 9DD56C2A3FD311F08A76B677C4F9AE02.roa (hash: EhoFh5hj1fnJIAYm7dVoqkfeol8zF4Op7mwB2iCWpG0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl
rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Jan 2026 03:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912981B, serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
Validity
Not Before: Dec 25 03:10:38 2025 GMT
Not After : Jan 1 03:10:38 2026 GMT
Subject: CN=694cab2e-1596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:64:59:7c:4c:d6:fc:38:77:ef:40:03:b3:5e:
04:3f:34:92:f2:a8:34:33:f9:bd:91:19:c0:8e:90:
08:de:3e:e9:6e:5a:7d:e0:94:bc:5c:37:66:b4:0e:
0e:ee:2e:b9:7b:32:c9:7c:57:7a:02:fb:7d:21:85:
a9:07:9c:62:06:e5:2c:03:af:9e:9c:53:a0:44:20:
cf:e8:96:f2:8f:3d:93:6e:e5:83:a8:e3:db:89:75:
c8:89:af:db:8a:90:2d:c8:17:6c:5b:7c:e8:2c:ae:
c4:36:d6:1c:c1:61:d6:eb:86:20:84:14:e7:ea:5c:
ac:d9:ff:94:f4:d8:27:72:c8:e8:cc:de:a5:af:c1:
d5:63:e2:5d:02:6a:d8:ea:3a:dd:27:5b:13:db:ca:
69:c6:e1:67:4f:45:d1:43:c3:82:13:54:09:3f:60:
82:93:c3:23:9a:9a:91:5e:6a:30:bb:77:01:a1:4b:
c8:31:65:6b:de:d6:56:1b:50:e3:1d:68:be:bb:54:
e1:b3:59:f8:e4:4b:d6:6d:f8:65:04:3b:50:3f:cc:
24:1b:88:6d:f7:78:98:e0:71:db:fe:93:91:64:fd:
7e:45:a7:bd:36:10:39:c4:fa:ae:e2:a8:86:5f:0f:
72:11:8e:68:b6:42:ba:96:7e:ee:27:a4:81:df:d3:
ea:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A3:37:F3:FA:2F:9F:5A:09:2A:CE:CE:F8:6E:9D:17:E2:C1:30:1F
X509v3 Authority Key Identifier:
keyid:33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:49:34:a0:e2:dc:ad:4c:d5:2b:92:25:c2:9b:ba:31:35:a0:
93:10:f8:65:76:3b:7f:e6:75:22:1e:96:92:10:ae:49:59:7f:
99:0d:0a:fc:e2:ee:ff:9f:fd:18:4b:57:9c:e0:30:38:05:fa:
11:7e:7d:e6:70:d4:82:0f:65:cf:05:8e:07:05:e5:3a:6e:2c:
30:55:17:43:88:e0:da:82:d6:d0:28:cc:7e:35:e7:af:5f:1b:
5a:9f:6b:a9:69:c1:00:5f:87:13:bf:58:dd:f9:c1:b5:da:14:
c7:e1:49:4e:82:58:07:41:35:e2:d0:06:88:31:9c:81:3a:61:
4f:62:15:f7:8f:24:93:b7:c2:c7:0a:52:8a:ca:e6:22:6c:37:
2a:f4:13:8e:b9:5b:77:7f:29:09:83:74:b3:ff:11:e0:92:53:
c9:40:f0:b2:02:cc:30:bb:e5:1c:1f:62:7d:8c:f9:24:8f:ba:
28:d3:59:77:46:b3:54:20:09:a7:5f:28:58:97:bd:27:19:8b:
08:6f:54:c6:03:1b:51:11:1c:72:be:a0:2c:00:4c:eb:27:6d:
6e:2e:2a:0c:5f:a3:d5:47:71:47:00:8b:32:76:a6:b2:af:ea:
7f:14:b1:69:bf:86:c3:f4:eb:56:8a:80:ac:99:2e:ff:d2:72:
d4:62:9e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 09:16:34 2025 by rpki-client