This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
File: b3fBnxHTKqqkLiaRb3SC77j5ehw.mft (raw, json)
Hash identifier: IB4nlvQbhU5IPk4d7v57NrqZlpPfKerZQ8qdZ/0UwS4=
Subject key identifier: F6:46:01:0D:35:2B:E6:6B:19:03:8E:D4:0D:59:4C:23:BE:F8:E3:D9
Authority key identifier: 6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C
Certificate issuer: /CN=A913D125/serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
Certificate serial: AE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
Manifest number: AC
Signing time: Fri 05 Dec 2025 04:09:24 +0000
Manifest this update: Fri 05 Dec 2025 04:09:23 +0000
Manifest next update: Fri 12 Dec 2025 04:09:23 +0000
Files and hashes: 1: b3fBnxHTKqqkLiaRb3SC77j5ehw.crl (hash: JyASIW8/KBhbeyXPGawEk8mjhOrdsxDC3p9/spHbjKQ=)
2: 62743016CC1111EFA5744A6FC4F9AE02.roa (hash: 6dXw7Y4MWNrxoZ0iMg2dM88R43+4l/3mUETzTfwLRvg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl
rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D125, serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
Validity
Not Before: Dec 5 04:09:23 2025 GMT
Not After : Dec 12 04:09:23 2025 GMT
Subject: CN=69325af3-7628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cf:60:a5:48:71:c9:01:10:28:f1:ce:2f:28:
fb:4f:ce:6d:c8:00:67:b2:ad:5e:e7:84:e8:f1:a0:
dc:5d:25:a4:29:79:53:45:b9:1e:1b:3b:12:5e:e9:
80:84:2b:34:cc:e4:54:40:32:a1:17:0e:9d:0a:8f:
bb:31:26:4a:20:d2:bf:95:da:a4:a4:ae:6f:27:de:
a3:47:61:c8:49:de:97:3b:fa:d0:fc:8e:bc:fe:d5:
c4:4b:4f:3e:78:f3:e1:83:8d:93:25:a1:d7:a1:e2:
64:1c:f3:92:7f:91:f0:cf:5c:c9:25:32:7c:51:72:
b5:0c:65:72:f9:6f:06:47:2b:65:aa:90:67:d8:8f:
07:0e:c1:5a:f7:88:52:65:42:a7:29:12:9e:1a:03:
20:34:53:6b:46:81:c8:a1:d4:24:da:48:d0:7f:15:
37:71:dc:d2:10:c3:df:56:ee:92:d5:1d:b2:e9:50:
74:69:35:19:c9:27:f7:d5:38:91:2f:16:52:41:f7:
68:53:7d:e1:6d:98:d5:aa:39:94:f7:06:58:df:07:
4a:b5:5b:f9:4b:10:97:dd:b3:45:9f:ca:31:9c:59:
89:bf:1c:dd:e4:66:8c:67:18:a8:27:7e:16:05:0a:
dd:01:00:bd:5a:8e:9d:8d:64:76:41:89:32:38:e1:
b3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:46:01:0D:35:2B:E6:6B:19:03:8E:D4:0D:59:4C:23:BE:F8:E3:D9
X509v3 Authority Key Identifier:
keyid:6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:a8:f4:ce:ad:95:77:54:0c:d8:34:37:4b:8a:29:c6:74:86:
e7:7d:07:9e:66:63:47:fe:1c:db:1c:2f:7b:a1:03:df:d2:c5:
cb:df:db:50:b8:50:51:b8:72:9f:ad:91:95:c8:ea:db:be:8d:
7f:ce:5e:0e:1c:4b:80:33:e5:67:76:00:2c:e1:04:3f:56:35:
d7:1d:70:9d:f6:c2:b3:c7:5f:69:b5:bf:b0:c4:c9:c1:b6:10:
6f:36:7f:f9:a4:d4:88:5e:f2:37:05:2a:5f:fb:40:3f:7b:cf:
e8:34:31:53:3b:56:26:06:bb:44:d3:de:32:1f:7d:c0:0d:b1:
f9:e3:02:d4:bc:cb:29:b3:91:55:10:4f:0a:d8:fe:42:95:96:
0a:55:97:06:3f:22:04:63:d8:f3:f3:6c:23:dd:88:a0:41:fd:
4e:de:fc:fe:17:37:55:dc:4b:14:d9:da:a7:37:91:76:8b:1f:
e6:51:ba:53:8d:e3:56:d6:a0:fc:a0:1a:5c:59:ae:77:34:e9:
15:22:6f:0e:b2:1e:eb:79:e4:68:08:2b:01:4d:d7:90:b3:4a:
4c:45:1a:30:dd:82:68:a6:af:df:34:ea:62:fa:20:97:dc:48:
36:6a:11:f9:e2:21:a5:f1:d3:6f:67:24:2d:e8:f0:4e:41:ce:
44:02:27:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:17:01 2025 by rpki-client