This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
File: 03F5y7l9aA5qgNwS7kIv6LbjY_U.mft (raw, json)
Hash identifier: 0H6s69eG1gELOAZcmz/6+8WADnigsYJCY+kIAWBX56I=
Subject key identifier: B1:AD:97:D6:76:70:2B:7D:F1:7E:87:9A:94:60:B0:A6:C3:F7:4F:01
Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5
Certificate issuer: /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5
Certificate serial: 07B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
Manifest number: 0749
Signing time: Sat 06 Dec 2025 20:48:41 +0000
Manifest this update: Sat 06 Dec 2025 20:48:40 +0000
Manifest next update: Sat 13 Dec 2025 20:48:40 +0000
Files and hashes: 1: 03F5y7l9aA5qgNwS7kIv6LbjY_U.crl (hash: ict7+kYMnQZvSmJLDJzHI3Ofpmfq8KMLIvTGeKjmgWg=)
2: B46F239C6A8D11EB82AF1144C4F9AE02.roa (hash: UrcHb9Zyjjqupasl1c8DJT8gL2zSGyTRtXJj/YwkNr0=)
3: B24078AA6A8D11EB82AF1144C4F9AE02.roa (hash: uYKsV4sv50u9alr+4EgeUv5NJJKiEhEbHCBbGXsadQo=)
4: B34D07906A8D11EB82AF1144C4F9AE02.roa (hash: QXMJ/jQUAiv47lj1Bpig1n8sU68IQku+vQs4DkbFezU=)
5: B57F14B86A8D11EB82AF1144C4F9AE02.roa (hash: 16YSTY2fnFs4eLLfhffiWxoVMVf5CI9XbA8xhp2Kh5I=)
6: 35BE363E668F11EBA738AF61C4F9AE02.roa (hash: GcUaymkPtkuB9knKnQU1h04sFVKLXXAddmnuYc97Q5c=)
7: 4CBC0878AA5111ECBEC4A312C4F9AE02.roa (hash: nwY3XOAdSWHWQClj8gA6vZzRQBvYNcJIrQ5O7yr8CLI=)
8: E9ECC32008C611EDBC862E48C4F9AE02.roa (hash: 8R/rZ/mbFR6fAD2MephrS/g3rxSP0cp2rY+Gklzx/Zc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl
rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1973 (0x7b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DF1F, serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5
Validity
Not Before: Dec 6 20:48:40 2025 GMT
Not After : Dec 13 20:48:40 2025 GMT
Subject: CN=693496a8-f28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c3:18:fb:2e:40:0b:74:89:8e:5b:00:2c:5f:
fd:dd:cc:70:1a:21:d4:52:fb:b9:83:91:0f:b4:81:
7c:42:b2:bf:3e:8e:12:48:8f:d4:95:af:b0:35:6f:
3c:71:0c:38:01:67:c9:a2:9d:e5:c3:d6:8b:1b:2d:
2e:07:9e:4a:e3:5e:e0:f8:57:68:6b:eb:b5:fb:24:
c1:d7:e1:4d:16:d6:29:5f:de:f1:f3:7a:db:f9:5a:
34:e0:8e:b3:6c:5f:96:d5:09:74:5d:9b:45:8b:4e:
ec:87:21:1f:94:25:76:74:11:86:0d:e5:d4:e0:ac:
3d:63:41:61:a0:12:10:99:56:0b:fa:cb:0a:9c:79:
47:76:99:23:24:db:cd:d9:07:86:dd:88:38:bc:e3:
83:9c:a6:e9:2c:66:69:c9:41:91:79:dd:86:4b:eb:
97:5b:d8:79:6b:a4:5f:e0:b3:92:3d:10:c9:cc:cc:
29:f3:e3:f1:9f:4c:cf:09:6b:a2:5d:74:8f:29:4d:
20:0b:ad:09:7c:1d:b9:fc:a6:5c:d1:c5:0f:0d:df:
00:75:32:30:06:6a:07:5d:6d:54:70:17:b6:81:a5:
df:32:fc:8e:75:59:9c:a6:f0:41:58:8f:34:ed:58:
36:d4:9c:e3:13:e2:6c:0d:d5:eb:6b:17:98:fa:6e:
d7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AD:97:D6:76:70:2B:7D:F1:7E:87:9A:94:60:B0:A6:C3:F7:4F:01
X509v3 Authority Key Identifier:
keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:ab:3f:de:a3:89:74:92:ea:3a:e6:31:f1:c5:9a:30:65:d6:
63:1f:8a:6e:be:6e:5b:07:f1:82:be:96:67:b4:c4:19:b7:95:
8a:4c:89:e3:6b:1a:a7:bb:23:7f:26:ba:bc:0a:01:6b:c9:f3:
94:35:fc:5b:2a:42:61:8a:4a:5f:70:19:2c:73:06:b0:83:71:
03:cb:ea:81:44:02:22:0c:23:a6:4d:3d:d8:59:20:ca:fd:0c:
60:40:1d:fd:c3:6f:88:fe:9b:05:c0:12:16:98:40:4f:76:3d:
b8:e6:e3:33:34:1f:7f:09:2e:c2:82:f1:00:c0:dc:79:7e:58:
2b:09:16:2c:52:8e:65:0d:34:b3:b6:32:3b:ec:49:b6:27:3f:
52:61:5e:50:5b:6f:5f:9b:02:92:41:92:67:c7:c9:fd:b2:f6:
96:a6:cb:c8:e0:e6:8a:b5:da:f9:1c:3b:c3:17:2f:b3:4d:52:
76:fa:d2:49:8a:f9:11:cd:e9:d8:ea:bd:8f:45:be:1c:3c:c2:
e7:a0:20:79:1d:73:25:9b:6d:79:ae:f6:21:f9:2f:3b:c0:3d:
cb:69:3b:ac:6c:98:04:56:5d:6c:28:16:f5:24:31:7b:af:bb:
46:47:c8:a7:98:56:8f:c8:23:f5:81:cc:8f:dc:1e:9c:c1:b0:
bd:b5:cd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:46:43 2025 by rpki-client