This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
File: 34Jss7t6i7KhHuS64uCH6sOnIdI.mft (raw, json)
Hash identifier: 8QOZqfdlqDHoimA5bMKFoGsVI6CsC5VATPJBOKct1Tc=
Subject key identifier: 92:04:DA:44:BF:CA:7F:61:02:EF:2F:66:1A:43:6C:73:75:5D:F4:F5
Authority key identifier: DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2
Certificate issuer: /CN=A91162DE/serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2
Certificate serial: 02D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
Manifest number: 02CD
Signing time: Thu 04 Dec 2025 23:47:08 +0000
Manifest this update: Thu 04 Dec 2025 23:47:07 +0000
Manifest next update: Thu 11 Dec 2025 23:47:07 +0000
Files and hashes: 1: 34Jss7t6i7KhHuS64uCH6sOnIdI.crl (hash: jVpfdZBy9QQ27UAUHAZH7I6CkOsUBBDvgVt5YS/gPTs=)
2: 7C754058415411ED8133414DC4F9AE02.roa (hash: gLcQ/guwMKYVAXT6wLKnevx2zWGWLwzZoBVoVJPP2CI=)
3: C303879E415111EDBC3A1D19C4F9AE02.roa (hash: xW+yKhl4DzZnOJoS6Xn0l4WHvXiDoALnGTFCf25+bew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl
rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 728 (0x2d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91162DE, serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2
Validity
Not Before: Dec 4 23:47:07 2025 GMT
Not After : Dec 11 23:47:07 2025 GMT
Subject: CN=69321d7b-18fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:79:03:f8:93:47:64:bb:60:b5:e0:1a:1c:c5:
11:0e:9a:fc:1d:2b:d2:bc:6b:47:5c:72:3d:97:bd:
82:94:56:cf:c7:cd:92:c9:fb:f2:4e:d4:72:d5:88:
15:43:6f:ce:c7:eb:7a:67:61:18:7e:1c:5d:11:e3:
a9:6d:a3:bb:7d:24:d5:62:34:d7:e3:a1:f1:aa:d1:
03:3f:74:3b:f1:2f:dc:29:de:2d:db:83:31:e0:56:
43:f0:a9:6f:ae:ee:fd:57:f9:34:4b:5b:ce:c2:61:
f6:98:83:ef:ad:63:27:98:64:a5:01:00:23:8a:0f:
83:c0:f6:06:c7:a0:4d:b5:7f:44:3a:49:de:4e:94:
1b:96:e8:be:6e:a0:25:ba:10:64:28:f1:62:4d:3a:
8e:5e:74:dd:55:cd:72:0f:35:23:2d:cb:95:47:50:
4f:7c:c9:d1:39:57:b1:4c:75:b3:2b:55:4a:eb:6e:
04:f5:00:da:1f:89:d9:81:dc:7c:f4:68:03:aa:e3:
d2:dc:fb:77:f9:bf:fb:bf:d7:7c:00:98:16:8b:eb:
8e:fa:3f:34:df:34:cc:52:0d:b1:04:4e:b7:3d:bb:
3e:34:ba:fb:77:22:7c:47:89:8e:84:ab:e7:dd:dd:
49:d1:34:b0:59:12:4b:fd:8e:1d:ed:41:3e:5e:07:
82:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:04:DA:44:BF:CA:7F:61:02:EF:2F:66:1A:43:6C:73:75:5D:F4:F5
X509v3 Authority Key Identifier:
keyid:DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:dc:46:ef:10:39:cf:c2:1a:a9:3b:f0:17:18:e3:68:d2:26:
56:24:eb:c6:13:4e:06:92:5c:8a:37:f1:75:b7:b9:0c:78:2c:
c9:86:b2:31:0d:17:5b:d3:2e:2f:a2:69:cc:d1:bb:b7:20:26:
c9:48:4b:c3:03:6b:c6:88:87:17:de:87:7c:db:1f:50:47:76:
78:52:fa:32:74:d2:e7:8a:47:e8:42:a7:18:db:89:e5:34:ad:
c3:12:10:1b:4d:67:84:96:97:14:42:9a:dd:00:0e:3e:f4:2e:
42:5e:84:92:85:7e:e4:95:b5:8e:45:58:31:73:87:23:5f:7f:
8d:a8:ba:cd:51:f2:28:98:5d:48:d8:b3:65:ca:93:f5:12:09:
75:34:17:00:f0:7c:02:a0:da:d7:69:3d:6a:9e:67:db:81:74:
de:4b:6b:18:92:1c:f2:51:18:3f:ad:e4:5c:97:8c:dd:ca:bc:
b6:00:68:4d:82:08:d6:38:71:89:4f:45:cb:4b:6d:22:3d:60:
16:fe:1d:2e:5e:00:34:ff:9f:e7:f3:0f:c0:d4:32:f6:0d:90:
a7:52:ee:08:90:0f:42:1e:bd:4d:a0:4c:68:b0:0f:98:34:b7:
20:a6:88:27:65:64:5b:02:37:15:16:0f:70:4d:a8:17:0f:a0:
5f:6c:49:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:05:47 2025 by rpki-client