This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
File: B3vNZjsOY7316bgJr3Gu8eWt9js.mft (raw, json)
Hash identifier: 7KBF1JKXlaSAt8r2u2QcOKbCEMXFHCKYlRjW1idtAXU=
Subject key identifier: 8B:B3:A5:DA:9F:B8:6D:0E:36:3F:BD:2F:B0:78:A6:16:47:D6:17:2A
Authority key identifier: 07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B
Certificate issuer: /CN=A9134309/serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
Manifest number: 63
Signing time: Fri 05 Dec 2025 04:57:34 +0000
Manifest this update: Fri 05 Dec 2025 04:57:34 +0000
Manifest next update: Fri 12 Dec 2025 04:57:34 +0000
Files and hashes: 1: B3vNZjsOY7316bgJr3Gu8eWt9js.crl (hash: JLEaa8I0ZFYZl/Hc4CZxm6heIcfRV0061VWgUU7npeo=)
2: 0322BF5A6D3411F0A208C05DC4F9AE02.roa (hash: WQ8BuE65YXtQyTIurkyDNftfUcfnYZp85uvlHfPR7PU=)
3: 13CC532280EC11F0A973810CC4F9AE02.roa (hash: YUDZaJzqTJAMIH2aYnffmm6rXB/hTcHYJMvuVkjpDWs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl
rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:57:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134309, serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
Validity
Not Before: Dec 5 04:57:34 2025 GMT
Not After : Dec 12 04:57:34 2025 GMT
Subject: CN=6932663e-5b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5d:a3:4b:5f:42:d9:2f:7c:2a:87:d2:22:c6:
ca:11:fb:3b:cb:0e:c5:b5:27:6c:7a:a8:04:3a:d2:
96:93:24:0c:a3:2f:c9:23:f0:f2:32:3b:3b:e4:8c:
98:b6:7a:a8:62:8a:06:ea:4b:62:f7:f0:91:a2:53:
34:38:e3:69:26:cf:7f:d0:7c:f9:92:83:6d:20:be:
4f:8c:fc:76:14:0f:fd:ab:64:44:a7:7f:33:fe:c8:
1b:ea:e4:76:34:8f:e9:6c:ab:e6:7d:5d:b4:42:87:
76:17:34:35:f1:c7:91:12:c1:9b:da:f2:94:a7:45:
38:57:c2:a5:87:b8:97:df:8a:8a:35:c5:83:13:18:
4a:0b:3b:5e:0c:1e:06:f9:9a:0b:0d:d0:77:5d:43:
8f:d2:61:53:59:f4:25:ba:56:20:84:39:31:00:63:
fa:0a:f9:75:59:13:0c:f5:67:fe:87:ab:a7:e0:89:
3f:5f:f7:7a:4e:12:89:0a:b9:1d:64:71:dc:c3:03:
5d:26:a3:f9:19:e1:d7:66:9a:f6:be:1d:eb:a5:dd:
b6:a7:c8:40:ba:34:2d:a2:2b:6f:8e:02:63:ca:60:
96:0b:32:82:16:3d:20:de:a7:fc:15:e0:d2:e1:16:
19:45:5b:24:b5:8a:5f:c1:05:f6:b9:e4:44:2f:7a:
0b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B3:A5:DA:9F:B8:6D:0E:36:3F:BD:2F:B0:78:A6:16:47:D6:17:2A
X509v3 Authority Key Identifier:
keyid:07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:4b:34:37:c9:81:80:2e:01:be:e1:d3:1b:e7:58:f3:7d:d7:
a9:1a:a6:3e:36:0d:14:93:2a:d5:72:94:10:e5:26:5e:e3:75:
d6:8b:85:52:8a:70:5a:a1:db:7c:eb:5f:9d:03:d0:d4:7a:5c:
bb:c6:f3:d1:c0:b1:37:7c:42:09:c4:31:b0:98:52:d1:80:71:
7a:2b:f3:61:3a:a0:0d:4c:ec:63:22:e9:76:9a:41:b6:f5:35:
61:d9:4b:89:d3:cd:01:42:10:f0:bc:25:87:af:44:75:2f:db:
80:95:69:c5:b8:7a:4e:fe:8d:f0:61:8a:c9:62:04:68:2f:e2:
51:3c:27:1b:b9:48:bd:a8:29:80:fe:31:f0:92:c0:bc:fa:40:
27:71:5f:c8:c1:c8:4a:85:a7:2c:4d:2b:dd:83:3d:11:fe:01:
da:93:40:26:6a:9b:39:8e:53:05:b3:75:cd:a2:c5:4e:f7:6d:
9e:d8:24:07:6c:fa:3a:e2:f5:0c:45:95:72:77:79:d9:35:b4:
f7:92:7d:65:01:5e:4f:94:46:e1:07:5e:68:10:32:4c:63:3b:
e8:7c:e0:d0:a0:33:4a:ac:0d:9e:8d:a1:3e:59:89:e6:93:a6:
79:ba:09:23:0c:a8:26:da:41:26:96:91:6f:09:af:6b:87:00:
02:6b:33:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:28:54 2025 by rpki-client