This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
File: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft (raw, json)
Hash identifier: CRTz7dBmTcbl52FDyO/v/wA6bCIeiJ0DLsBgsKqFrRA=
Subject key identifier: 73:6D:13:D6:65:F0:01:70:9E:C9:B8:86:67:95:59:02:2F:F9:15:E6
Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
Certificate issuer: /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
Manifest number: B6
Signing time: Sun 07 Dec 2025 07:28:48 +0000
Manifest this update: Sun 07 Dec 2025 07:28:48 +0000
Manifest next update: Sun 14 Dec 2025 07:28:48 +0000
Files and hashes: 1: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl (hash: wmCNr+xwG2sXgA+yo1HU50EciwbKaEnMcSdoLk7TSFA=)
2: 5CEF82D2D33E11F0AD0B405AC4F9AE02.roa (hash: lpBz8HpFIqfsqCV19EQkmpFSbAEYeJCPchDGn0DYL7E=)
3: 5E2D7894562911F0A243A66DC4F9AE02.roa (hash: w0THdO9T6h078pEq3+Lht0f7Z/7SLZrFg+11EWkOMY4=)
4: 7B4FD608BEEB11F0AEDDAC25C4F9AE02.roa (hash: iwbEqaCxKmbwG8HWY/Xyjd6spo1BsNrw7Oh89SRylss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 06:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Validity
Not Before: Dec 7 07:28:48 2025 GMT
Not After : Dec 14 07:28:48 2025 GMT
Subject: CN=69352cb0-111f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8b:8b:26:49:b7:07:8a:a3:82:17:6d:00:40:
ce:45:11:8a:65:78:dd:0d:fb:2b:79:3a:7c:85:9c:
e9:74:5c:9f:10:b5:82:e1:08:7f:68:ea:a8:b7:48:
00:18:33:c0:bb:66:3e:c5:01:0b:ca:01:dd:b3:8d:
3c:13:a0:17:a8:ec:4e:b8:0d:84:f4:ca:26:a4:e7:
59:15:07:e2:e0:a8:3a:60:6a:70:83:88:70:9d:4b:
4f:a8:08:b4:8a:53:58:ef:56:94:3d:b0:c9:ea:d8:
c7:85:14:f5:28:56:ce:6f:83:51:b4:2b:f2:5b:1b:
13:32:fc:61:97:94:09:c0:d1:9c:dc:ba:ec:1d:50:
7b:fb:2b:f7:4a:f9:72:1d:df:61:b7:fd:b9:21:a0:
ca:8e:58:73:63:b8:72:fc:37:a9:48:89:0b:6f:7e:
06:38:a5:b5:81:b7:cb:42:f3:ef:fd:43:81:1d:a6:
83:9f:62:d8:89:fa:88:7b:e9:9f:8c:dc:c7:62:4f:
60:4a:ca:99:34:7a:dc:85:a8:ec:a0:d6:a3:21:8d:
5d:52:b5:ef:70:03:8e:d9:fa:56:22:60:4d:c0:23:
75:b7:2a:26:2a:1a:18:64:6b:a3:05:c9:4b:d8:a0:
b9:51:f8:64:df:1c:bf:85:b8:b1:bb:1b:41:d7:34:
36:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6D:13:D6:65:F0:01:70:9E:C9:B8:86:67:95:59:02:2F:F9:15:E6
X509v3 Authority Key Identifier:
keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:7f:43:1f:ac:0c:2d:b6:b1:b9:c6:1b:1a:14:30:b1:74:99:
ee:6b:48:8c:61:ca:5c:73:e8:47:b3:75:96:ed:0e:38:c8:f0:
89:f0:64:56:71:79:1c:ef:1d:0f:a6:28:f2:59:21:ad:31:6c:
fe:68:85:d2:8f:0f:42:16:48:a2:0b:39:cf:83:9f:3e:87:ba:
5c:72:ac:bb:e3:d3:e8:43:3e:5d:5b:bd:99:6a:ba:5a:d4:bd:
aa:67:1b:51:e9:78:ac:e8:d1:45:24:c4:0c:43:42:7c:43:ff:
b0:7a:d2:eb:83:f3:a3:79:98:92:3b:4a:52:b9:3c:04:d4:d2:
04:c7:eb:bc:c2:a3:13:87:24:58:32:23:8b:4a:38:ee:73:14:
59:d5:9b:dc:9c:e5:60:ba:c8:31:df:fc:ad:97:8e:f5:38:75:
18:e3:83:d8:b0:50:20:19:5b:49:26:ed:f5:bb:8d:e7:7f:52:
b5:04:5e:f8:ec:fa:ca:34:1e:d1:d2:d3:b6:e7:d5:1b:77:8a:
0c:ba:6d:55:1a:e0:ff:8b:ff:be:6d:15:9b:66:cb:dc:84:09:
20:49:53:db:61:7e:81:09:73:01:93:09:ad:6f:45:e3:eb:25:
1d:92:85:51:52:be:aa:20:e4:7f:84:80:08:fd:3c:ec:f8:e9:
a5:16:d3:cd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjdFRUIxMTAvBgNVBAUTKERFRjMzMTdDQkQxNEQ3REJBQTI3QkZGRTNGRTVBN0I4
QTZFRENGQjkwHhcNMjUxMjA3MDcyODQ4WhcNMjUxMjE0MDcyODQ4WjAYMRYwFAYD
VQQDEw02OTM1MmNiMC0xMTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArouLJkm3B4qjghdtAEDORRGKZXjdDfsreTp8hZzpdFyfELWC4Qh/aOqot0gA
GDPAu2Y+xQELygHds408E6AXqOxOuA2E9MompOdZFQfi4Kg6YGpwg4hwnUtPqAi0
ilNY71aUPbDJ6tjHhRT1KFbOb4NRtCvyWxsTMvxhl5QJwNGc3LrsHVB7+yv3Svly
Hd9ht/25IaDKjlhzY7hy/DepSIkLb34GOKW1gbfLQvPv/UOBHaaDn2LYifqIe+mf
jNzHYk9gSsqZNHrchajsoNajIY1dUrXvcAOO2fpWImBNwCN1tyomKhoYZGujBclL
2KC5Ufhk3xy/hbixuxtB1zQ2KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNtE9Zl
8AFwnsm4hmeVWQIv+RXmMB8GA1UdIwQYMBaAFN7zMXy9FNfbqie//j/lp7im7c+5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0VFQi9GNTdDOTRCMEQz
QkExMUVGOTQ3QjA1ODBDNEY5QUUwMi8zdk14ZkwwVTE5dXFKN18tUC1XbnVLYnR6
N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzN2TXhmTDBVMTl1cUo3Xy1QLVdudUtidHo3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
N0VFQi9GNTdDOTRCMEQzQkExMUVGOTQ3QjA1ODBDNEY5QUUwMi8zdk14ZkwwVTE5
dXFKN18tUC1XbnVLYnR6N2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBRf0MfrAwttrG5xhsaFDCxdJnua0iMYcpcc+hHs3WW7Q44yPCJ8GRW
cXkc7x0PpijyWSGtMWz+aIXSjw9CFkiiCznPg58+h7pccqy749PoQz5dW72Zarpa
1L2qZxtR6Xis6NFFJMQMQ0J8Q/+wetLrg/OjeZiSO0pSuTwE1NIEx+u8wqMThyRY
MiOLSjjucxRZ1ZvcnOVgusgx3/ytl471OHUY44PYsFAgGVtJJu31u43nf1K1BF74
7PrKNB7R0tO259Ubd4oMum1VGuD/i/++bRWbZsvchAkgSVPbYX6BCXMBkwmtb0Xj
6yUdkoVRUr6qIOR/hIAI/Tzs+OmlFtPN
-----END CERTIFICATE-----
Generated at Sun Dec 7 09:02:10 2025 by rpki-client