This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft
File: 3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json)
Hash identifier: M+ol6Ur0mpo5Oc09Sjbdu6f3WkMc12lkaY9rCMjQeXI=
Subject key identifier: 76:5E:80:E2:11:76:4C:4A:7A:4B:3C:54:33:9B:70:C8:82:75:3B:D1
Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09
Certificate issuer: /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809
Certificate serial: 03BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft
Manifest number: 03B5
Signing time: Wed 24 Dec 2025 23:48:53 +0000
Manifest this update: Wed 24 Dec 2025 23:48:53 +0000
Manifest next update: Wed 31 Dec 2025 23:48:53 +0000
Files and hashes: 1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: LP/N5s1i7Y7turqVg9VO8egyc+C7v1qAyjiHcWR40Vc=)
2: A4F1EAECC09211EC8950E57AC4F9AE02.roa (hash: /dpglo9CFx73F4sqDk7WZ21gpjG8xDFFFJkPbHJ8/V0=)
3: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: NYEcly+S03KH8Gz/ED4JBmnf9asUtp3vEim2ZrMueG0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl
rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 23:48:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 958 (0x3be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915ABD7, serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809
Validity
Not Before: Dec 24 23:48:53 2025 GMT
Not After : Dec 31 23:48:53 2025 GMT
Subject: CN=694c7be5-05ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1e:be:98:64:02:a2:f6:1c:b6:e4:6c:76:4d:
73:cb:79:ae:eb:f7:b3:f4:3b:e8:e0:c8:8a:da:fe:
b3:ce:33:24:3d:e2:4b:46:26:fe:e0:07:e6:b0:68:
6c:01:04:52:db:61:c7:c7:24:f4:fd:8d:38:ec:96:
40:9d:07:a3:a0:e1:56:c7:bc:2d:38:18:b0:91:c2:
99:af:d1:cd:2a:d8:b2:eb:9e:cf:22:5c:c0:a1:99:
97:0e:9c:1d:c1:07:3e:7c:a7:2d:ac:29:af:1e:f0:
e0:d1:c5:dc:69:10:5c:60:78:ed:67:59:01:85:30:
5e:05:60:4f:bc:33:76:74:37:83:ad:7b:b1:b9:56:
48:2c:40:da:82:75:8e:50:26:60:9f:78:5e:6c:f0:
d4:65:95:55:41:69:49:7b:f1:25:a1:87:d5:79:8d:
e6:1b:0d:f7:64:e0:24:0e:53:88:2a:3c:88:4f:c8:
b9:94:1e:26:17:d7:50:15:93:b6:4c:9e:df:69:d4:
77:57:4c:81:e3:4b:1d:5a:e3:10:9c:00:c8:a2:df:
23:c4:8b:9a:00:65:17:dd:ca:7a:8d:d3:1b:7a:bc:
0b:c3:1f:5a:8f:ba:ef:5b:86:dd:91:3a:77:37:b9:
72:84:24:94:41:dd:24:28:e5:00:8d:44:2c:1f:03:
6a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5E:80:E2:11:76:4C:4A:7A:4B:3C:54:33:9B:70:C8:82:75:3B:D1
X509v3 Authority Key Identifier:
keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:76:d0:13:24:ee:9a:7e:d2:47:bd:e3:d0:5f:5e:4e:32:4b:
c6:6f:88:f6:b6:25:2f:65:f5:b8:3f:4a:c0:a3:07:ce:dc:10:
31:9a:28:68:1f:7d:07:9d:9a:22:c8:f8:69:3a:84:ec:b2:a8:
27:77:86:ef:be:2f:11:9c:5b:4b:71:f8:5e:8a:8f:ea:23:20:
4e:a4:56:bc:99:4b:8b:65:27:5d:36:43:bf:8f:52:8b:8f:68:
cb:ca:ea:2b:35:1c:1c:f8:60:ab:99:85:01:05:8e:6d:c2:aa:
68:6c:5f:62:ee:bb:5e:02:4d:2e:94:ac:6b:c0:a2:ad:75:c0:
ae:1a:9a:12:2f:18:cc:83:4d:82:08:9f:f6:ca:71:67:8c:dd:
f2:a2:c4:36:63:bd:40:51:21:d9:74:2d:59:8e:07:0e:ae:37:
d0:aa:2a:0e:8f:34:35:45:cd:e7:0b:37:e3:d2:c4:ab:47:f5:
00:cc:4a:cc:bf:6b:40:9e:64:09:be:f1:b7:f3:0a:a2:82:97:
c9:b9:d6:b6:18:dc:cf:f9:79:e5:5c:85:6e:ad:00:e2:f7:f7:
db:ed:0e:3e:18:cf:c8:50:a5:73:8a:16:0d:83:a4:8b:98:fe:
1d:e0:b0:b0:f7:03:c9:5f:c8:be:34:06:62:f5:a5:a8:a3:b9:
8d:e7:3a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 01:29:56 2025 by rpki-client