This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
File: SXu3JxgnnbzJhdum05s2Vn9E56o.mft (raw, json)
Hash identifier: lLWcFJlUJUrUuPiNDXAbxNjM3Q6xoV4TT5LnoVubjas=
Subject key identifier: 16:23:0C:A0:5C:3D:EE:D4:4A:01:6E:D6:20:79:95:0B:B9:30:8B:7F
Authority key identifier: 49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA
Certificate issuer: /CN=A9123059/serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA
Certificate serial: 3C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
Manifest number: 3B
Signing time: Fri 05 Dec 2025 05:20:16 +0000
Manifest this update: Fri 05 Dec 2025 05:20:16 +0000
Manifest next update: Fri 12 Dec 2025 05:20:16 +0000
Files and hashes: 1: SXu3JxgnnbzJhdum05s2Vn9E56o.crl (hash: 4ywdSmSZLMsZeH/bXgEr9ANT7WPWIUANqf9TrTbMdLM=)
2: 1A52B0BA8A8811F0A0F59D1FC4F9AE02.roa (hash: eUyFtijE7ulYYeR6FE4HWasF4D8cnPdrEPGMIUGgb2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl
rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:20:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123059, serialNumber=497BB72718279DBCC985DBA6D39B36567F44E7AA
Validity
Not Before: Dec 5 05:20:16 2025 GMT
Not After : Dec 12 05:20:16 2025 GMT
Subject: CN=69326b90-8af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b3:c8:38:31:03:6e:40:50:23:eb:b0:52:c4:
28:8f:03:5c:3d:91:71:27:05:7c:30:4a:1b:15:93:
32:e8:62:06:a3:70:fb:0f:94:a9:34:da:00:9c:97:
1a:d4:8d:0e:7e:86:a3:40:e4:14:6f:5a:69:7c:e3:
0f:5b:08:6b:82:c4:02:3f:c6:bd:ea:29:ba:26:a6:
3a:87:27:14:22:4c:c1:82:f5:2f:a6:c6:96:a8:65:
00:c0:af:2e:cc:c4:56:2e:c1:e6:1c:83:05:7d:31:
50:b6:c5:eb:89:a7:7d:7d:93:6d:74:0c:86:9c:ae:
01:a7:71:db:73:f9:66:de:9b:e0:38:ab:e1:2f:d9:
23:b7:c2:09:2b:56:79:48:0d:d1:1b:10:d1:6b:33:
0a:28:d5:69:5c:35:ac:e2:04:35:57:fb:14:e7:8e:
2b:65:99:22:ac:a5:a5:fa:4e:a1:05:bb:0f:4b:8e:
d5:73:e5:b0:04:79:79:a0:c6:51:f9:0f:78:b3:34:
4c:41:32:7b:0b:f8:ae:e1:80:b4:dc:46:2d:b4:bc:
ac:e0:c9:f7:4d:f9:61:d2:6b:8c:42:9b:53:43:fe:
5d:91:1d:40:80:17:c8:4a:e7:1a:77:98:c4:03:50:
57:21:11:c0:a9:23:59:08:0e:31:66:68:b7:fd:ea:
71:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:23:0C:A0:5C:3D:EE:D4:4A:01:6E:D6:20:79:95:0B:B9:30:8B:7F
X509v3 Authority Key Identifier:
keyid:49:7B:B7:27:18:27:9D:BC:C9:85:DB:A6:D3:9B:36:56:7F:44:E7:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SXu3JxgnnbzJhdum05s2Vn9E56o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123059/B2CEA7F679F611F09CE9C328C4F9AE02/SXu3JxgnnbzJhdum05s2Vn9E56o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:33:58:d9:42:84:0f:18:fc:28:fe:d2:38:75:32:67:0b:cb:
bd:da:d3:81:f7:2a:c1:a6:78:74:5d:27:1e:ed:21:1f:b0:a8:
89:23:df:9f:24:6a:60:16:e8:a1:1d:4d:79:16:03:cf:a3:2c:
c1:0c:49:f9:41:15:03:9d:c3:d6:d0:bb:dc:f9:0a:aa:cb:a4:
fa:d3:40:67:3c:d4:93:b5:ca:b2:c6:98:39:c1:9b:2d:1b:e1:
c1:bc:be:d4:66:c0:26:27:d5:18:5f:16:e4:27:9c:c1:e2:ca:
3f:10:3a:6a:29:fa:45:15:e2:8c:42:e7:47:20:08:5c:5f:b6:
f0:cd:a5:62:74:ae:24:57:24:6f:ab:a4:b2:4b:77:f5:00:99:
62:32:42:d3:10:90:3a:41:8d:72:19:07:57:5c:d1:de:49:b3:
6f:6e:3b:74:ac:9b:dc:b7:74:9e:87:b8:a5:94:5b:0b:5b:3f:
b5:cf:c5:b1:84:97:7e:f1:64:94:28:d0:cc:93:44:3d:81:f2:
65:d2:8c:b5:73:50:35:b1:28:7e:ca:ed:6d:92:28:63:ba:2c:
b3:25:e0:15:57:b4:48:2f:49:96:ae:67:c9:42:90:ad:86:48:
f5:da:ef:95:a1:f8:b9:7b:1c:d5:85:a8:28:1f:9f:2b:c6:90:
2a:18:33:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:16:49 2025 by rpki-client