This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft
File: w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft (raw, json)
Hash identifier: 6fZiTeNWjBMmnRcN6qDcxa2hv1mEGFmPweEJVuW+KfQ=
Subject key identifier: 1C:EF:3A:3A:A8:CD:33:98:94:89:2C:E3:56:7B:BA:FB:60:FC:34:FF
Authority key identifier: C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A
Certificate issuer: /CN=A9143921/serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A
Certificate serial: 016C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft
Manifest number: 0167
Signing time: Fri 05 Dec 2025 02:09:30 +0000
Manifest this update: Fri 05 Dec 2025 02:09:30 +0000
Manifest next update: Fri 12 Dec 2025 02:09:30 +0000
Files and hashes: 1: w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl (hash: Dy+AfIfuZif3c6XqtHhGZzwfha3cnEuru31ZnH9eVdc=)
2: FD252B2CB8FF11EE96506121C4F9AE02.roa (hash: NtM1gljDSWkXNtqDJR3psbzkHxJ8rzF6tLIeyvY/heg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl
rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143921, serialNumber=C37568234ABEC7980F6E177D48D0B431640DD33A
Validity
Not Before: Dec 5 02:09:30 2025 GMT
Not After : Dec 12 02:09:30 2025 GMT
Subject: CN=69323eda-6b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b8:97:a3:2f:27:e5:39:da:70:04:c6:c9:dc:
61:45:54:fe:11:c6:0c:a8:ce:cf:94:f0:20:4a:25:
52:2c:69:d2:f8:ce:b4:28:d1:b5:3b:62:48:f8:ed:
69:1c:4e:48:26:a6:66:4d:07:69:70:a7:30:7d:53:
31:3d:d7:c2:39:14:2d:dd:a0:42:f1:b2:ee:f6:05:
2a:70:bd:85:1c:f0:f6:5a:84:f6:37:0d:67:21:22:
d5:6a:16:60:6f:7a:24:2f:19:92:ae:2e:5b:47:ef:
fb:a2:5f:25:64:c4:4f:d3:78:2a:a2:88:36:19:f0:
42:3d:c9:0d:d2:34:68:f6:ff:f5:ee:72:f2:04:df:
1b:3d:63:4e:34:2a:84:14:e4:31:01:25:9e:ea:96:
a0:3d:6d:36:96:36:02:5f:ce:28:bf:1a:12:99:e8:
e6:d9:e0:aa:0d:e8:df:85:01:7e:ce:6f:84:9f:a1:
ee:f0:65:1a:3b:31:9c:67:91:af:ab:00:21:c0:bd:
ec:ee:79:91:a9:d0:ec:d3:ec:9a:18:f6:6a:67:da:
b7:c5:19:f2:da:30:df:4f:7d:96:d5:72:8a:5f:62:
19:f7:67:1f:61:4f:57:68:9c:10:c0:69:e3:7a:7d:
1c:71:90:30:41:5f:a0:55:b6:85:10:3b:a7:b2:58:
79:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EF:3A:3A:A8:CD:33:98:94:89:2C:E3:56:7B:BA:FB:60:FC:34:FF
X509v3 Authority Key Identifier:
keyid:C3:75:68:23:4A:BE:C7:98:0F:6E:17:7D:48:D0:B4:31:64:0D:D3:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w3VoI0q-x5gPbhd9SNC0MWQN0zo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143921/E95C7DACB28811EEAA235519C4F9AE02/w3VoI0q-x5gPbhd9SNC0MWQN0zo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4d:ea:31:b3:d2:51:57:c9:f2:63:a5:cf:a3:4e:ab:a1:27:
5a:e6:05:f2:00:88:7f:f3:9a:26:99:c9:40:1a:df:55:6f:74:
24:0b:f5:bd:d3:93:47:4c:eb:d3:99:27:42:27:c9:e1:98:90:
e8:95:0f:2f:d0:0f:eb:1b:77:8b:42:2d:3a:a2:ff:e2:19:e6:
91:8d:9f:45:b8:d4:1f:53:84:53:5b:b0:ee:b2:36:f0:c7:c4:
df:72:68:3d:ac:91:bd:ce:41:e4:54:9d:29:80:d8:17:65:e1:
ae:f7:99:e6:8a:47:34:ac:b5:25:be:94:12:45:52:0f:57:99:
16:0d:a3:a0:20:e4:a8:49:d5:ca:a4:1c:f4:59:84:97:a3:c5:
24:9c:bd:b6:e5:54:50:6c:41:de:2a:07:fd:1f:19:7e:3b:c3:
6a:5b:ed:83:cc:e9:84:87:e1:e6:a9:52:99:4c:6a:a0:b6:54:
82:c6:65:b2:21:13:8c:5a:c5:0c:b2:59:8b:d2:e2:98:27:7a:
70:03:1f:46:20:c9:d3:f9:ea:ff:53:a3:6d:41:2b:7b:54:28:
db:45:ac:67:88:2d:86:3e:d1:0b:c3:3a:34:9b:15:00:20:68:
31:95:cf:11:2e:40:39:22:5f:42:15:f6:1b:03:00:e0:92:6c:
77:d9:c5:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDM5MjExMTAvBgNVBAUTKEMzNzU2ODIzNEFCRUM3OTgwRjZFMTc3RDQ4RDBCNDMx
NjQwREQzM0EwHhcNMjUxMjA1MDIwOTMwWhcNMjUxMjEyMDIwOTMwWjAYMRYwFAYD
VQQDEw02OTMyM2VkYS02YjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxbiXoy8n5TnacATGydxhRVT+EcYMqM7PlPAgSiVSLGnS+M60KNG1O2JI+O1p
HE5IJqZmTQdpcKcwfVMxPdfCORQt3aBC8bLu9gUqcL2FHPD2WoT2Nw1nISLVahZg
b3okLxmSri5bR+/7ol8lZMRP03gqoog2GfBCPckN0jRo9v/17nLyBN8bPWNONCqE
FOQxASWe6pagPW02ljYCX84ovxoSmejm2eCqDejfhQF+zm+En6Hu8GUaOzGcZ5Gv
qwAhwL3s7nmRqdDs0+yaGPZqZ9q3xRny2jDfT32W1XKKX2IZ92cfYU9XaJwQwGnj
en0ccZAwQV+gVbaFEDunslh5iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzvOjqo
zTOYlIks41Z7uvtg/DT/MB8GA1UdIwQYMBaAFMN1aCNKvseYD24XfUjQtDFkDdM6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzkyMS9FOTVDN0RBQ0Iy
ODgxMUVFQUEyMzU1MTlDNEY5QUUwMi93M1ZvSTBxLXg1Z1BiaGQ5U05DME1XUU4w
em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3czVm9JMHEteDVnUGJoZDlTTkMwTVdRTjB6by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MzkyMS9FOTVDN0RBQ0IyODgxMUVFQUEyMzU1MTlDNEY5QUUwMi93M1ZvSTBxLXg1
Z1BiaGQ5U05DME1XUU4wem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCaTeoxs9JRV8nyY6XPo06roSda5gXyAIh/85ommclAGt9Vb3QkC/W9
05NHTOvTmSdCJ8nhmJDolQ8v0A/rG3eLQi06ov/iGeaRjZ9FuNQfU4RTW7Dusjbw
x8Tfcmg9rJG9zkHkVJ0pgNgXZeGu95nmikc0rLUlvpQSRVIPV5kWDaOgIOSoSdXK
pBz0WYSXo8UknL225VRQbEHeKgf9Hxl+O8NqW+2DzOmEh+HmqVKZTGqgtlSCxmWy
IROMWsUMslmL0uKYJ3pwAx9GIMnT+er/U6NtQSt7VCjbRaxniC2GPtELwzo0mxUA
IGgxlc8RLkA5Il9CFfYbAwDgkmx32cWq
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:29:38 2025 by rpki-client