This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft
File: _3wGiSUYZz7M4Ea2pxfzU85TxQk.mft (raw, json)
Hash identifier: 6R9Cr+VNsHxPOCpuBVAf8cbNtMpqL2cPlf7wXe9QwiE=
Subject key identifier: AC:0D:FE:86:61:1C:AF:BE:80:07:B2:70:3C:19:B3:9F:14:D9:30:B7
Authority key identifier: FF:7C:06:89:25:18:67:3E:CC:E0:46:B6:A7:17:F3:53:CE:53:C5:09
Certificate issuer: /CN=A91476FE/serialNumber=FF7C06892518673ECCE046B6A717F353CE53C509
Certificate serial: 91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft
Manifest number: 8E
Signing time: Fri 19 Dec 2025 05:37:36 +0000
Manifest this update: Fri 19 Dec 2025 05:37:36 +0000
Manifest next update: Fri 26 Dec 2025 05:37:36 +0000
Files and hashes: 1: _3wGiSUYZz7M4Ea2pxfzU85TxQk.crl (hash: t+94F3xErSixYEbTVILRvqyk8NBB6o/rC26v0Yl1p9g=)
2: CC704C6639B711F09D08292CC4F9AE02.roa (hash: M1ecwuMzW/hIMvSj6913M6NZRe+PJV/YKqOHZ/y8oF0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.crl
rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 05:37:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91476FE, serialNumber=FF7C06892518673ECCE046B6A717F353CE53C509
Validity
Not Before: Dec 19 05:37:36 2025 GMT
Not After : Dec 26 05:37:36 2025 GMT
Subject: CN=6944e4a0-1696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0b:c5:3b:0d:8d:d4:a6:b1:14:3d:4f:0c:4f:
b4:72:2f:33:8f:3a:96:67:48:3d:22:0c:57:63:1c:
1e:bd:be:81:76:68:8d:7e:1b:ef:6b:86:d3:b6:12:
f2:d3:fe:e6:50:11:e2:8f:92:ad:e3:dd:fb:d2:20:
c8:e2:49:cc:01:ca:6b:eb:07:02:bf:e9:28:34:9c:
1e:7f:71:98:7a:ed:a0:0b:2a:49:e8:a9:9c:59:ca:
fa:0a:78:a9:ae:a7:44:83:51:2a:53:63:f6:a6:c2:
c1:6a:6d:13:bc:82:87:0b:48:17:00:83:fb:56:ca:
5b:0d:53:10:07:87:8f:7a:2e:40:9a:c4:bd:c0:17:
ec:94:d7:7d:f5:53:21:ad:51:a6:e9:10:5b:df:a4:
36:6d:74:44:4f:98:52:55:db:0a:62:ed:9d:a1:81:
7d:5c:84:f5:13:53:ea:9d:4e:64:36:a3:61:ba:b0:
7d:62:49:9e:2d:77:de:78:a1:c9:dc:1c:c1:9b:ca:
0c:d9:bd:0a:0f:cb:6c:a5:bf:3d:98:08:dd:3e:18:
54:e7:70:e6:fd:41:0d:a7:27:37:a5:13:52:df:94:
8f:da:21:a9:28:f4:e3:4d:fb:9e:d9:e2:eb:f5:54:
99:a9:96:ab:2a:5d:04:1a:f7:90:c7:80:15:72:e9:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0D:FE:86:61:1C:AF:BE:80:07:B2:70:3C:19:B3:9F:14:D9:30:B7
X509v3 Authority Key Identifier:
keyid:FF:7C:06:89:25:18:67:3E:CC:E0:46:B6:A7:17:F3:53:CE:53:C5:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_3wGiSUYZz7M4Ea2pxfzU85TxQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476FE/90FE4720083711F09DB91B70C4F9AE02/_3wGiSUYZz7M4Ea2pxfzU85TxQk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:f3:32:7c:1f:52:39:83:9e:4b:77:4c:82:69:ab:77:86:0f:
d7:25:af:dc:3f:0c:cc:c0:f5:98:71:c0:c6:90:6d:3e:ac:14:
7c:96:16:29:b1:1d:18:61:ac:0c:30:b5:8f:c6:5b:81:80:7b:
1d:90:a6:89:9e:99:2b:df:30:dd:bb:f0:48:77:df:2a:1d:1b:
43:60:a3:cd:b7:1b:aa:e0:f0:f4:b0:7c:6b:d6:8c:e3:3f:5c:
ce:4c:47:ed:bc:02:ef:cc:02:63:07:73:36:97:46:aa:c7:20:
75:7e:70:24:a2:6f:db:1f:87:2c:d3:24:21:53:71:6e:cd:c2:
22:ba:6f:94:3d:fc:c1:84:b8:ec:e5:6d:33:74:bb:70:bd:1b:
d0:ef:dc:fc:73:19:ed:ec:b4:7f:4f:51:7d:57:f1:a1:ca:bb:
d4:37:09:ed:e6:2f:7f:c2:ba:32:3f:1a:57:f2:26:e1:e8:8e:
b5:5d:aa:fd:f9:51:44:08:15:6c:6e:d8:76:b5:f2:35:62:5d:
82:77:a5:74:ea:f9:a8:82:97:de:b3:f7:7c:7c:04:ba:87:6c:
70:16:d0:1a:83:f1:bd:3a:64:67:df:3f:e2:17:f1:d5:77:94:
b2:37:72:a0:7e:4c:c9:f2:7b:81:b3:33:ad:9f:e9:e1:65:c8:
63:b3:8b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:50:48 2025 by rpki-client