This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft
File: 3SNdNwiQmzPViUtMzckQXGH9Fq4.mft (raw, json)
Hash identifier: rJ0Y4Xr8u7e7uETeb+m47pahcN5MCeW9jnDap4Pis6I=
Subject key identifier: 9F:3E:04:B3:A4:2D:9C:32:4D:61:DD:6D:E6:8F:EB:3B:77:EF:70:0E
Authority key identifier: DD:23:5D:37:08:90:9B:33:D5:89:4B:4C:CD:C9:10:5C:61:FD:16:AE
Certificate issuer: /CN=A91B8C13/serialNumber=DD235D3708909B33D5894B4CCDC9105C61FD16AE
Certificate serial: 01DE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3SNdNwiQmzPViUtMzckQXGH9Fq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft
Manifest number: 01DD
Signing time: Sat 20 Dec 2025 15:10:44 +0000
Manifest this update: Sat 20 Dec 2025 15:10:43 +0000
Manifest next update: Sat 27 Dec 2025 15:10:43 +0000
Files and hashes: 1: 3SNdNwiQmzPViUtMzckQXGH9Fq4.crl (hash: XaeYHelndd29hLJGK1/YypkoDkEdkmKXw5AgHECKxhM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.crl
rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3SNdNwiQmzPViUtMzckQXGH9Fq4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 14:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478 (0x1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8C13, serialNumber=DD235D3708909B33D5894B4CCDC9105C61FD16AE
Validity
Not Before: Dec 20 15:10:43 2025 GMT
Not After : Dec 27 15:10:43 2025 GMT
Subject: CN=6946bc74-3099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:9b:7b:df:88:e6:77:19:6d:f6:61:0b:2a:
98:a0:36:6c:16:9c:e3:63:7b:45:44:19:f5:1e:22:
a2:f5:f7:00:ec:00:04:0a:84:a5:b1:a4:e0:ab:d8:
e8:1a:13:33:df:cc:2a:bb:a1:06:d2:50:13:fa:03:
80:f7:2c:2a:01:df:7c:ff:c9:1c:2a:f1:ed:2f:f4:
30:74:3a:46:99:5b:41:45:1f:84:42:cc:e7:88:3f:
38:bc:ca:b1:9f:7d:72:bf:d4:2e:88:f6:cb:a7:3e:
fa:27:48:5c:ea:56:74:c9:d4:a7:5a:f8:f9:73:be:
39:8b:ef:f0:e5:8b:b8:ec:d5:06:b8:da:29:83:d6:
e5:ff:d2:ab:e7:4a:9b:42:59:02:9c:7f:2a:16:b0:
86:59:e2:da:8b:a5:98:e4:f8:7c:88:2d:56:01:bc:
61:c4:9e:b0:d3:79:27:37:61:a1:a6:bf:06:da:0e:
cd:5e:af:b1:c4:ec:81:a8:1c:ad:53:25:31:02:c1:
c2:d6:6c:c7:61:32:41:eb:c9:ac:e0:a1:cc:c2:47:
4c:81:02:a3:a0:f2:98:3b:a5:45:f5:5b:7e:52:eb:
fe:b0:38:4c:a2:b4:38:51:81:f5:49:c2:3e:91:c5:
98:9f:ed:b3:f3:a3:19:1b:73:47:19:06:f6:e3:79:
7d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3E:04:B3:A4:2D:9C:32:4D:61:DD:6D:E6:8F:EB:3B:77:EF:70:0E
X509v3 Authority Key Identifier:
keyid:DD:23:5D:37:08:90:9B:33:D5:89:4B:4C:CD:C9:10:5C:61:FD:16:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3SNdNwiQmzPViUtMzckQXGH9Fq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/D06117160B2D11EE867E6A17C4F9AE02/3SNdNwiQmzPViUtMzckQXGH9Fq4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:b1:d5:9f:ea:87:86:ab:30:8d:38:2d:79:6e:35:5a:66:9c:
d3:ed:3c:6a:ae:a6:66:ee:55:fe:13:2e:6b:02:2a:ec:58:ea:
fe:8b:d0:19:f6:dd:5f:35:13:1e:d2:6c:6e:45:35:34:6d:45:
c4:05:87:45:63:02:b2:94:ea:57:5d:49:2e:dd:dd:06:cc:c5:
02:98:b8:be:99:52:ac:82:6c:a1:a8:3e:90:f2:c4:56:1d:40:
eb:4e:ca:5a:67:36:ab:b7:ce:7a:bf:bc:aa:6a:92:f9:4a:d7:
cd:99:4e:c5:c8:8d:71:d6:f4:72:21:67:81:22:28:57:d9:7f:
35:11:48:b0:14:97:65:51:37:c2:29:7c:81:4d:e7:3e:3d:34:
1a:52:71:04:54:26:45:bc:e4:aa:f1:07:ce:1e:e9:c5:3c:9e:
52:2a:4a:0a:d6:fb:58:50:d1:42:30:45:9a:fb:6d:e6:3a:51:
f5:30:c9:56:b6:62:43:85:c8:d0:9e:15:33:42:d8:dc:af:64:
82:b7:16:d3:bc:97:54:d5:3d:d9:b2:83:a7:c8:7d:72:38:10:
f7:ad:d6:2b:cd:58:e5:e2:06:45:21:47:be:1b:e2:28:f2:5a:
8d:99:0f:a5:54:c8:98:2e:4e:1e:a6:79:e3:b6:00:ec:b3:3b:
95:fd:5b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:25:11 2025 by rpki-client