This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
File: anm3A54zvprmacUWEDfghAEXYgo.mft (raw, json)
Hash identifier: THsN9fvfhmMP8iy4tGzWsHfcpe+YSNe84+YwPXhJ9B8=
Subject key identifier: ED:F9:71:4C:83:52:FF:93:13:C3:39:F1:93:D2:AE:63:07:D0:A7:71
Authority key identifier: 6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A
Certificate issuer: /CN=A913D1F2/serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
Certificate serial: 0209
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
Manifest number: 01FE
Signing time: Fri 05 Dec 2025 00:49:44 +0000
Manifest this update: Fri 05 Dec 2025 00:49:44 +0000
Manifest next update: Fri 12 Dec 2025 00:49:44 +0000
Files and hashes: 1: anm3A54zvprmacUWEDfghAEXYgo.crl (hash: 555kMGK+f9NfSVxQx8JsLdndkSFVNBCye7d5z+z2sZg=)
2: B7A19306B43111EEB373D20BC4F9AE02.roa (hash: p03IaXdoucRW+JeB0a3V5wQ0r6Xuoboe4Qb2cXTY05U=)
3: B48D2B70087E11EF81D62A76C4F9AE02.roa (hash: DxzDukY3WjBeIpnNW+7kygBvoj2I4tKyrrqWBJti0pE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.crl
rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 521 (0x209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1F2, serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
Validity
Not Before: Dec 5 00:49:44 2025 GMT
Not After : Dec 12 00:49:44 2025 GMT
Subject: CN=69322c28-bb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:96:65:64:8a:eb:30:3c:98:c7:1a:31:69:
ca:ff:c2:0f:a3:bc:e8:e5:12:06:aa:b6:ee:6a:f8:
37:d8:55:a9:2e:eb:ee:0e:42:1b:2c:28:73:db:af:
b5:24:e9:fa:66:71:b1:f0:fe:d2:5b:ab:d4:d3:04:
94:91:8c:64:41:1d:c1:6b:9d:2a:3c:f7:78:44:92:
db:5a:f3:f8:00:86:06:51:e9:28:9b:73:49:1d:b2:
59:dc:a7:54:21:57:fc:ab:73:b9:c5:6f:02:2a:48:
a0:4a:80:87:08:1e:14:60:39:4c:0d:aa:20:ca:c3:
15:2c:6f:b6:4e:0e:57:36:55:b9:06:4d:2e:68:8d:
97:ce:bf:14:ca:11:66:c4:f3:fc:0b:ce:c7:14:af:
e3:29:b6:97:18:5a:09:f8:b3:64:98:28:b5:fd:cb:
23:7a:25:e1:8b:60:08:c7:8d:50:30:5b:87:20:92:
77:60:f9:dd:0c:30:94:61:de:31:97:a0:d7:e2:05:
10:63:85:ef:25:0f:47:02:5f:3a:1b:3c:e0:a5:b7:
31:9a:96:4a:b7:f0:10:f1:7c:a9:ea:59:63:a4:16:
c5:1b:eb:7b:24:ad:50:0c:89:34:44:c0:77:6d:e0:
1c:88:b0:8f:40:fb:d7:68:d0:7c:5b:e3:74:70:39:
03:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F9:71:4C:83:52:FF:93:13:C3:39:F1:93:D2:AE:63:07:D0:A7:71
X509v3 Authority Key Identifier:
keyid:6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:b3:3c:b9:95:cc:47:8e:a6:20:28:8a:63:dd:b2:e3:7c:10:
d4:7a:7a:fe:30:2a:c0:4f:f7:a1:6c:62:da:e3:d3:55:f6:60:
65:57:e0:cb:b5:b0:e6:5f:c1:07:bb:ce:8a:ee:23:c5:42:6f:
c9:0d:da:ca:e4:92:3e:7e:7c:3c:0b:a3:9f:b7:d2:ee:35:76:
a0:1c:57:ea:41:a3:45:be:1f:59:15:42:09:76:7e:2b:b7:8c:
d8:21:fa:7a:bb:27:20:e6:0e:42:ba:c9:a3:4a:3e:fe:16:49:
30:e3:ae:f9:36:d4:4a:c0:81:9c:f3:43:40:ba:25:74:3c:9b:
59:27:99:b5:ae:4b:03:dc:86:4f:84:c2:b5:51:c5:11:65:19:
c2:c4:29:03:32:0f:f5:be:0d:a2:b9:07:6d:d3:a7:cb:d5:76:
5a:30:6c:50:f1:af:48:bf:39:51:5f:30:62:81:f8:d4:70:05:
a4:ad:b7:d5:ae:69:16:be:e9:1f:ba:54:36:f3:9d:fd:9a:3c:
43:19:d0:01:ee:44:62:78:cf:8f:4c:45:a4:e7:ca:cc:83:17:
75:39:93:ac:3b:97:2b:42:7d:b4:a1:b6:14:0c:8c:87:b2:1c:
0e:cc:0d:02:18:0e:10:dc:05:ec:eb:81:60:bf:29:36:66:1c:
24:38:2d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:03:24 2025 by rpki-client