This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
File: 3K6HG3xct5vH7PZ5s7LTyVan2eM.mft (raw, json)
Hash identifier: YdH21pknEOlYp2xYpNpa1y0Re7PxuA2+dl8nXsm/QVM=
Subject key identifier: 59:D2:1A:E8:43:91:AD:54:29:83:49:D9:56:13:1B:40:B2:DA:7F:29
Authority key identifier: DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3
Certificate issuer: /CN=A91604AC/serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3
Certificate serial: 06DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
Manifest number: 06D3
Signing time: Sat 06 Dec 2025 21:06:11 +0000
Manifest this update: Sat 06 Dec 2025 21:06:10 +0000
Manifest next update: Sat 13 Dec 2025 21:06:10 +0000
Files and hashes: 1: 3K6HG3xct5vH7PZ5s7LTyVan2eM.crl (hash: PzD63xncpAkhYn0HHKBIDa8Iscfpf4VLHaoGAxIswvk=)
2: 0081F3D6F22111EE8EEC070EC4F9AE02.roa (hash: FOS9hpfhSMJ/5W+e+NFkrecUhC86TAOPH0uxsIPYP4A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl
rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1759 (0x6df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91604AC, serialNumber=DCAE871B7C5CB79BC7ECF679B3B2D3C956A7D9E3
Validity
Not Before: Dec 6 21:06:10 2025 GMT
Not After : Dec 13 21:06:10 2025 GMT
Subject: CN=69349ac3-81ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f1:b0:69:bc:88:44:18:34:ad:29:28:56:93:
9b:74:20:4c:43:92:de:6b:3a:53:c1:8b:5a:93:a3:
9e:e8:7c:2b:5a:03:6e:0e:c9:a4:f6:69:38:bb:73:
15:c1:92:39:81:0d:ce:42:22:f7:f9:b0:0e:64:fb:
d1:69:e7:c7:92:84:00:bc:f4:88:cd:1e:d3:72:d2:
13:df:9d:b9:56:c2:6a:01:c8:a1:58:a2:76:e3:87:
b6:b8:a0:4a:4f:a6:3b:5e:00:86:a9:e1:a7:f2:5c:
3b:3e:bd:3b:7f:73:3f:e5:da:ff:21:ee:44:19:55:
3f:19:61:62:b9:1e:cd:0d:1f:12:db:bb:db:57:8b:
a6:b9:ae:21:2b:e5:72:f1:b5:04:84:c5:9e:6c:44:
5f:8f:11:0a:3f:b0:d8:7c:59:8d:78:f1:77:9f:02:
45:82:fe:52:68:60:af:c6:ff:d8:0a:b5:38:0f:1a:
69:9d:09:ce:49:93:2c:a4:3c:74:a1:9c:da:ef:f2:
e1:23:a3:16:e2:41:d8:03:15:fc:1b:e8:83:12:f5:
d4:5e:15:19:a7:fa:0c:35:de:ef:a9:95:a2:61:08:
74:db:bc:5d:94:2e:13:85:7b:af:24:1c:6c:69:1c:
a0:42:4e:f3:86:84:5d:c1:7b:21:58:8c:49:fd:e6:
0b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D2:1A:E8:43:91:AD:54:29:83:49:D9:56:13:1B:40:B2:DA:7F:29
X509v3 Authority Key Identifier:
keyid:DC:AE:87:1B:7C:5C:B7:9B:C7:EC:F6:79:B3:B2:D3:C9:56:A7:D9:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K6HG3xct5vH7PZ5s7LTyVan2eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/49720996814511EBB2DD5D4BC4F9AE02/3K6HG3xct5vH7PZ5s7LTyVan2eM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ed:4b:88:7e:fe:0c:8a:7c:2c:0e:e6:55:b9:88:b3:f0:69:
ec:62:86:9f:33:54:de:d1:e1:3a:68:69:29:9b:ae:b5:f1:0f:
d8:0e:9b:06:55:f7:19:83:30:d1:c5:33:fe:39:45:30:d1:7f:
b6:52:cb:25:ff:f9:bc:6c:fe:df:f4:a8:2a:51:bd:2e:3b:38:
ad:98:e1:ff:b0:66:4b:1c:b0:98:d9:3a:de:fc:ca:41:0d:a6:
72:ab:56:ab:01:ab:97:75:14:75:7a:f5:cb:e8:d3:2c:a9:ca:
95:10:a9:9d:16:46:6f:a4:5a:e9:24:76:d3:d9:34:1f:38:59:
05:f2:d2:2a:07:71:d7:aa:43:06:fa:40:70:b4:95:ee:cb:8f:
43:08:63:90:ea:a2:e0:b9:46:ce:ed:3a:e9:b5:82:09:59:05:
bc:0a:f6:98:20:99:0f:b2:56:54:3d:00:3e:37:b1:bf:21:29:
d9:41:4a:f4:86:55:25:2d:a2:bb:a3:b5:e4:d0:de:97:6f:48:
d2:ab:12:4f:c3:a4:ea:d8:bb:95:aa:23:b4:1b:20:54:51:89:
ec:71:e6:1c:fc:a5:8f:4b:ac:b3:75:4e:87:c6:93:e7:59:87:
a4:79:34:eb:62:77:7a:96:02:39:fe:e7:5f:e4:de:c3:16:eb:
3c:47:09:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:15 2025 by rpki-client