This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
File: 3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft (raw, json)
Hash identifier: Ia8+sMuP8Z/6bozp8SO+sQGsglCbR/Ea2CuGZ/J02e8=
Subject key identifier: 5A:48:BD:25:CE:00:F0:2E:85:C8:68:55:F6:F6:5A:FA:C3:1D:98:18
Authority key identifier: DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4
Certificate issuer: /CN=A91BA447/serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4
Certificate serial: 0B78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
Manifest number: 0B71
Signing time: Thu 18 Dec 2025 18:47:06 +0000
Manifest this update: Thu 18 Dec 2025 18:47:06 +0000
Manifest next update: Thu 25 Dec 2025 18:47:06 +0000
Files and hashes: 1: 3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl (hash: gKrN4UXTmSAQQeiV0diDIOIf6nf5J7FMR6IBRd/VJLE=)
2: 07F14B9C426411EABA91B569C4F9AE02.roa (hash: F4BgB3+37H1vj4fhyDwAENhQ6lWTOrd3il938AR6caY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl
rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 18:47:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2936 (0xb78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA447, serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4
Validity
Not Before: Dec 18 18:47:06 2025 GMT
Not After : Dec 25 18:47:06 2025 GMT
Subject: CN=69444c2a-fd60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:df:27:60:21:29:1a:dd:55:7a:98:f4:b7:
ab:f3:4d:07:8b:45:b8:f6:63:a3:9b:84:5b:a7:e5:
90:4b:de:57:69:b5:3b:aa:fa:0c:bc:91:4b:10:38:
dc:d6:de:c4:ca:93:1d:63:ec:bc:ea:11:d5:6b:6c:
20:d4:9c:f2:d0:59:71:1c:8f:99:ec:0c:6b:12:2d:
c3:c8:1c:19:31:2b:f9:da:fe:06:6a:54:e6:1f:4c:
28:9d:8e:66:b6:ca:84:27:b4:26:38:ca:53:a9:fc:
3c:13:ef:12:45:cc:54:60:8c:1c:a9:e4:64:94:32:
a3:a5:2e:db:05:75:09:37:b8:cb:56:26:b9:4a:47:
de:f8:4e:ea:c9:a3:4e:ea:b1:77:d1:c4:2f:8b:21:
03:88:86:2f:29:1c:44:a1:6f:93:45:68:58:7d:57:
e5:aa:ac:e0:28:b1:a1:25:0f:99:36:61:9c:80:f5:
5e:bf:89:1c:eb:c5:bb:3e:73:3d:e5:6e:60:67:51:
87:2f:cd:a0:57:49:2f:ec:32:77:ac:c8:e9:51:20:
99:4a:07:86:8d:0c:16:3a:09:1f:c1:fc:7a:15:9f:
ac:e0:81:0d:f1:49:41:8d:3c:ed:e4:90:04:c6:9d:
de:25:e3:ff:5a:53:cc:d0:fb:74:4b:ad:cf:a2:64:
5b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:48:BD:25:CE:00:F0:2E:85:C8:68:55:F6:F6:5A:FA:C3:1D:98:18
X509v3 Authority Key Identifier:
keyid:DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:1c:88:77:cc:b2:2e:4a:fc:3e:19:a9:ac:b1:e7:6b:d6:48:
09:00:5e:fc:50:c3:5b:6e:c3:e4:fb:49:b9:46:f8:6c:ab:ff:
dd:f4:30:16:d3:67:9b:13:9e:17:b8:cb:31:f6:68:4b:c8:49:
da:28:aa:2a:7a:63:fd:4e:4b:53:f5:06:e3:76:46:75:09:11:
ec:95:1b:3c:04:59:1a:a5:3c:d4:76:d2:c8:a2:7c:8a:55:5c:
ba:cc:36:04:61:36:37:2c:b9:00:c3:b3:3a:43:b5:ed:77:8a:
03:0b:2e:1a:93:00:80:e1:82:29:bb:36:dd:b1:40:64:b1:f0:
01:43:e7:9b:a8:05:2b:f6:b3:dc:26:70:bc:03:5c:43:9b:41:
17:a8:3f:14:cd:19:35:8f:73:0e:da:95:1f:86:20:95:3d:eb:
80:53:38:57:21:50:1b:bc:70:df:65:64:7a:75:34:f0:95:8c:
9b:f6:ad:a8:06:52:19:08:a4:97:f7:2e:52:15:09:74:8a:22:
ba:d7:b3:3f:e9:47:52:79:96:87:39:8e:41:30:e6:ac:f5:5b:
30:5f:1b:e5:d4:ce:26:9d:91:67:24:2a:bd:f6:03:d2:47:fe:
8e:e7:17:9e:98:b9:46:55:5b:e6:14:72:6b:84:09:41:8a:c0:
a5:4f:4c:5c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkE0NDcxMTAvBgNVBAUTKERDOThCNTQ0QjE2QzQ5QTk4REQwNTg1Q0Y5NjcyNDI2
NDE1NTJFQTQwHhcNMjUxMjE4MTg0NzA2WhcNMjUxMjI1MTg0NzA2WjAYMRYwFAYD
VQQDDA02OTQ0NGMyYS1mZDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArn7fJ2AhKRrdVXqY9Ler800Hi0W49mOjm4Rbp+WQS95XabU7qvoMvJFLEDjc
1t7EypMdY+y86hHVa2wg1Jzy0FlxHI+Z7AxrEi3DyBwZMSv52v4GalTmH0wonY5m
tsqEJ7QmOMpTqfw8E+8SRcxUYIwcqeRklDKjpS7bBXUJN7jLVia5Skfe+E7qyaNO
6rF30cQviyEDiIYvKRxEoW+TRWhYfVflqqzgKLGhJQ+ZNmGcgPVev4kc68W7PnM9
5W5gZ1GHL82gV0kv7DJ3rMjpUSCZSgeGjQwWOgkfwfx6FZ+s4IEN8UlBjTzt5JAE
xp3eJeP/WlPM0Pt0S63PomRb5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpIvSXO
APAuhchoVfb2WvrDHZgYMB8GA1UdIwQYMBaAFNyYtUSxbEmpjdBYXPlnJCZBVS6k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTQ0Ny81RjRDNkNGMjQy
NjIxMUVBOTRDNUM0NjZDNEY5QUUwMi8zSmkxUkxGc1NhbU4wRmhjLVdja0prRlZM
cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNKaTFSTEZzU2FtTjBGaGMtV2NrSmtGVkxxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTQ0Ny81RjRDNkNGMjQyNjIxMUVBOTRDNUM0NjZDNEY5QUUwMi8zSmkxUkxGc1Nh
bU4wRmhjLVdja0prRlZMcVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAjHIh3zLIuSvw+Gamssedr1kgJAF78UMNbbsPk+0m5Rvhsq//d9DAW
02ebE54XuMsx9mhLyEnaKKoqemP9TktT9QbjdkZ1CRHslRs8BFkapTzUdtLIonyK
VVy6zDYEYTY3LLkAw7M6Q7Xtd4oDCy4akwCA4YIpuzbdsUBksfABQ+ebqAUr9rPc
JnC8A1xDm0EXqD8UzRk1j3MO2pUfhiCVPeuAUzhXIVAbvHDfZWR6dTTwlYyb9q2o
BlIZCKSX9y5SFQl0iiK617M/6UdSeZaHOY5BMOas9VswXxvl1M4mnZFnJCq99gPS
R/6O5xeemLlGVVvmFHJrhAlBisClT0xc
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:15:40 2025 by rpki-client