This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
File: Pj3GKtNpQScHmphxdsIYwJs-yf0.mft (raw, json)
Hash identifier: oVP1O+U/SjbqXXjaQhWm0U/jrsnra6kbXI3pZSISAwA=
Subject key identifier: FD:D7:A6:CD:EA:6E:6E:A9:3A:9A:0C:24:E5:73:00:ED:D0:37:8A:30
Authority key identifier: 3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD
Certificate issuer: /CN=A916559E/serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
Certificate serial: 2C67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
Manifest number: 2C45
Signing time: Sat 06 Dec 2025 15:19:28 +0000
Manifest this update: Sat 06 Dec 2025 15:19:27 +0000
Manifest next update: Sat 13 Dec 2025 15:19:27 +0000
Files and hashes: 1: Pj3GKtNpQScHmphxdsIYwJs-yf0.crl (hash: s6BVXQX/xkzgA7YdSZf0/tdrYqG0S6d/sG7QH8XDbFE=)
2: 5E736B1EEE2C11ECBDA4362BC4F9AE02.roa (hash: T0b8C7d4bWsc3EyPhNVtAAt07MQZYtmIX9CE+cnW0sk=)
3: A37B20206FE111E9B3465D70C4F9AE02.roa (hash: JeRljMwzQH3/92nSWVH5RymJInEM50zHuR37MlUO73U=)
4: C49CBEFCD27711ECAAC6BD51C4F9AE02.roa (hash: wKTcwQ/I5JRFgJ3BEd5QarAu/YHgWoWcx44Njrdtc4g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl
rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11367 (0x2c67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916559E, serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
Validity
Not Before: Dec 6 15:19:27 2025 GMT
Not After : Dec 13 15:19:27 2025 GMT
Subject: CN=69344980-6ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9d:59:b2:c2:fb:91:47:cc:47:6e:b2:dd:b6:
e7:54:94:b2:1b:d7:dc:56:46:e2:52:8d:53:c8:9e:
07:b1:f4:3e:97:e6:31:21:06:7a:89:17:c8:a9:ec:
99:c9:cf:33:6e:cd:a0:cc:d0:15:f1:48:b3:8b:7e:
72:23:73:77:b6:fb:32:ce:46:4d:5e:5c:12:95:cd:
3b:93:a5:b5:53:bf:3c:04:fd:af:bb:1d:bc:ef:b8:
b2:8e:67:cf:8b:79:fa:f1:f8:42:0a:ba:aa:3e:dc:
ab:d9:9d:e3:a2:cf:e9:41:18:65:27:16:01:db:73:
a3:5c:8d:06:90:72:e3:7a:e0:6f:f3:02:2d:6c:d0:
0e:75:ff:98:01:65:cf:38:e1:5e:e9:9d:32:03:50:
13:9b:6a:49:d7:31:6f:a5:f7:e5:37:d7:ea:2b:95:
85:2d:4f:db:74:be:7c:f1:97:1d:7e:43:3c:0a:a5:
80:be:74:40:74:cd:c4:2e:76:af:24:01:b6:15:db:
78:2a:0b:d3:98:49:5c:c1:84:f4:38:78:18:c2:3a:
4e:30:55:3a:e9:2a:0e:40:d8:07:16:38:9d:51:91:
a4:ab:37:83:9a:28:03:0e:18:c5:25:05:cd:4a:90:
99:a7:50:b7:9b:ab:bb:34:1f:2b:a6:fb:02:94:60:
de:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D7:A6:CD:EA:6E:6E:A9:3A:9A:0C:24:E5:73:00:ED:D0:37:8A:30
X509v3 Authority Key Identifier:
keyid:3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:d4:ef:81:11:24:35:d6:9f:2e:82:76:dd:10:80:a6:c6:ba:
10:71:51:4e:2b:ce:37:e6:ac:e2:f0:42:fa:19:d5:7d:6b:de:
97:06:6d:17:85:7a:09:6d:2f:9d:d7:17:31:08:c9:b1:de:02:
78:3b:cd:81:76:60:29:90:30:02:89:8c:7a:ed:df:2a:03:8b:
7a:fc:ce:6c:10:65:47:c4:4c:db:8a:da:58:01:ef:3a:4f:7f:
ae:31:23:29:9d:40:af:45:ee:7e:89:4e:cb:2d:85:9c:bf:dd:
c1:f0:de:3e:3a:a1:80:41:bb:f9:40:a5:ff:1c:33:00:89:46:
70:d7:16:b8:54:d4:e2:00:57:19:c6:bc:e8:20:0a:43:e7:0c:
81:46:0b:78:13:00:93:29:aa:4b:d2:d0:57:24:74:f7:30:60:
7b:66:f7:4e:73:3f:d8:47:ae:24:a9:c2:7b:aa:be:28:4c:95:
f2:3e:d6:ab:31:21:80:23:18:c0:66:37:5c:fa:12:a1:ec:29:
f4:1a:f1:af:a8:4a:f5:d6:e0:b5:24:72:01:fe:a9:9f:2b:dd:
18:b2:5e:e8:4b:af:5d:9e:7e:63:6a:b7:71:71:77:bb:06:df:
e3:c7:30:2b:7e:a4:d7:ea:1b:85:53:df:ae:b9:c2:d7:d0:97:
d4:f6:57:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:01:27 2025 by rpki-client