This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
File: pi3nVqmxabvP97VW1DMAlV1A4yA.mft (raw, json)
Hash identifier: gJH4rWn3eeIlylutICWhdnfzdBhxxOEJ6rjA+sc5scE=
Subject key identifier: 7B:81:25:D0:A6:E6:94:2C:57:5E:F1:7D:63:48:EA:DD:62:77:4F:EC
Authority key identifier: A6:2D:E7:56:A9:B1:69:BB:CF:F7:B5:56:D4:33:00:95:5D:40:E3:20
Certificate issuer: /CN=A91104BD/serialNumber=A62DE756A9B169BBCFF7B556D43300955D40E320
Certificate serial: 0BA3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
Manifest number: 0B9C
Signing time: Sat 06 Dec 2025 18:17:21 +0000
Manifest this update: Sat 06 Dec 2025 18:17:21 +0000
Manifest next update: Sat 13 Dec 2025 18:17:21 +0000
Files and hashes: 1: pi3nVqmxabvP97VW1DMAlV1A4yA.crl (hash: xoQf9+KA2l1A5pnpasW1PChpY4/W2kdH6gZc28vfEiE=)
2: D326CC30384411EA9D540B58C4F9AE02.roa (hash: y7gm3Ye3cCKsMlMiwHP3v0HJTLEmZvMTdt93lWQK5j4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.crl
rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 18:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2979 (0xba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91104BD, serialNumber=A62DE756A9B169BBCFF7B556D43300955D40E320
Validity
Not Before: Dec 6 18:17:21 2025 GMT
Not After : Dec 13 18:17:21 2025 GMT
Subject: CN=69347331-870c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:1e:de:8d:d8:61:68:7f:46:df:bb:eb:d1:
77:5c:4e:59:6e:23:b2:ca:19:4a:e2:58:d7:f9:d7:
b1:ca:43:bc:f8:d3:f3:e3:a0:f0:b3:ac:1f:54:97:
4a:a1:d8:df:81:7e:f7:6f:b7:2a:7b:17:25:2e:64:
15:14:c0:67:64:c6:4a:cd:4c:68:b6:64:b9:9b:bf:
32:a2:77:42:76:60:78:b4:cc:73:d8:2f:2f:22:46:
de:b1:1c:68:59:a9:d7:7e:d5:30:54:b2:53:6b:68:
e1:4e:8e:d2:2d:10:63:8b:eb:d5:9e:01:fd:89:1e:
8e:e0:11:9f:15:7a:b9:de:2b:7d:9c:d3:03:b5:47:
22:93:f1:f1:ad:5a:db:6e:56:d9:28:69:24:f7:66:
b7:95:e8:0f:3c:94:83:d5:84:2d:7f:27:88:ce:a8:
d6:84:46:8b:98:50:49:fe:a5:eb:0f:13:82:42:3e:
0c:9a:26:30:c5:63:d6:c3:b5:52:a2:8f:4a:e3:d1:
12:38:a6:fe:0a:61:9e:43:86:45:7c:a6:0d:37:29:
69:78:30:74:e8:bd:a7:c7:cf:1e:42:6b:aa:36:fd:
e5:16:bd:64:dc:ed:cb:28:e8:6d:e4:a7:d8:ad:b9:
95:6a:3b:00:8e:35:62:40:3e:6c:c4:19:95:e2:16:
f0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:81:25:D0:A6:E6:94:2C:57:5E:F1:7D:63:48:EA:DD:62:77:4F:EC
X509v3 Authority Key Identifier:
keyid:A6:2D:E7:56:A9:B1:69:BB:CF:F7:B5:56:D4:33:00:95:5D:40:E3:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pi3nVqmxabvP97VW1DMAlV1A4yA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104BD/4373D50C384311EAA6192E53C4F9AE02/pi3nVqmxabvP97VW1DMAlV1A4yA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:b2:ed:d8:94:5e:8f:c2:46:5a:a5:f8:34:c4:42:3a:b9:9c:
05:48:95:22:67:46:3b:ce:c8:2f:cc:8a:b7:e8:97:93:45:08:
b8:aa:45:2a:da:6f:c4:59:b9:08:da:d3:b6:8f:bf:88:25:b7:
9a:03:3f:d9:3c:93:19:68:ad:f3:d1:93:ca:d3:72:98:70:45:
f3:2e:76:6a:15:13:14:f2:72:40:a4:99:58:ab:68:c5:3c:de:
0c:ca:d3:87:76:33:8f:7b:d0:2e:95:0a:1a:7f:3c:72:2c:05:
3e:95:87:8b:e6:81:4c:1c:a3:ae:4e:7f:e8:d3:0e:cd:df:cd:
b0:bc:75:b3:aa:1b:1a:4a:1b:d0:9f:de:82:5b:8d:da:9e:00:
2b:c3:b0:7b:fb:7f:ac:50:48:e8:cb:d2:1f:05:55:89:15:d3:
7e:2e:0c:cd:c4:05:41:23:8d:fd:4a:88:cb:84:a1:dd:57:bc:
b9:c8:62:85:4a:73:96:02:54:94:c1:9c:88:5b:dc:4a:d7:94:
1f:28:c7:1c:80:5e:b4:7c:6c:79:8b:61:28:0e:cd:ed:c4:c0:
9b:e4:07:5d:8e:6a:f9:b9:e4:1f:de:e0:8d:5d:a9:67:d4:e0:
b8:c3:68:fc:16:02:4d:b3:7e:76:5c:7a:7a:dc:97:b2:8b:4e:
1e:9e:1a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:57:09 2025 by rpki-client