This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
File: 1h3BeAj1jg-ZsoUs50hg-FPLINs.mft (raw, json)
Hash identifier: 2VUCje6b2zsyzrfTc4+jjKM9ZNnQIrI5Xi69h1Ozx84=
Subject key identifier: 2B:16:85:A6:53:9B:6C:1F:33:80:18:C2:86:C5:48:BC:48:10:A3:27
Authority key identifier: D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB
Certificate issuer: /CN=A916FD2B/serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB
Certificate serial: 0217
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
Manifest number: 0212
Signing time: Fri 05 Dec 2025 00:34:23 +0000
Manifest this update: Fri 05 Dec 2025 00:34:22 +0000
Manifest next update: Fri 12 Dec 2025 00:34:22 +0000
Files and hashes: 1: 1h3BeAj1jg-ZsoUs50hg-FPLINs.crl (hash: HDaElSDWUoxZZODEsvf9Sh311jID7tFb1inOT+9AHO0=)
2: FB4FC092A83811ED94EE0437C4F9AE02.roa (hash: PwUsQccop9Cf8FtxwxhpO1uR6/Yqyp0+oubBrUUdudU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.crl
rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:34:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FD2B, serialNumber=D61DC17808F58E0F99B2852CE74860F853CB20DB
Validity
Not Before: Dec 5 00:34:22 2025 GMT
Not After : Dec 12 00:34:22 2025 GMT
Subject: CN=6932288f-ec5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:be:a9:e6:4d:e8:43:3a:1d:26:72:4d:e2:30:
46:16:a1:26:98:b2:f7:9a:2c:8f:2e:67:06:6f:36:
c0:33:cb:a8:d8:ca:13:26:08:22:96:b3:f4:a4:d8:
ce:25:cb:27:9a:9d:d3:9e:d6:85:1d:1a:ec:1d:9e:
a9:ba:f2:5c:94:4a:e1:0c:e5:13:c5:b9:70:0f:74:
d5:af:c4:c6:66:de:df:18:a8:9b:83:f2:fa:66:4d:
d9:0e:d1:3f:16:84:bf:37:2b:73:02:99:3e:95:f4:
e0:3f:9f:33:10:fb:e4:66:52:6d:6e:7c:ad:ad:06:
d9:db:06:e8:c0:35:0e:2a:ae:3a:d1:d7:0a:8a:6c:
b5:dd:2e:2e:09:de:aa:c7:21:28:54:ac:42:08:cb:
5e:72:6d:67:16:13:9d:32:89:68:b9:3d:0b:23:b3:
fe:fe:26:b9:2e:c5:4e:14:a1:eb:ff:20:3c:07:fe:
3a:ce:8d:fb:9e:4c:85:ca:6e:ac:9c:92:52:6e:68:
bc:9b:b1:42:07:b1:2e:ad:a5:0a:6d:49:55:be:0a:
a0:31:76:7d:c8:c1:34:23:4f:e9:40:05:44:2f:23:
7c:64:d9:85:16:dc:dc:8a:50:d4:1a:b6:8b:01:5a:
ef:fb:9c:ea:25:59:39:a1:23:53:25:b4:f9:a5:c2:
9c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:16:85:A6:53:9B:6C:1F:33:80:18:C2:86:C5:48:BC:48:10:A3:27
X509v3 Authority Key Identifier:
keyid:D6:1D:C1:78:08:F5:8E:0F:99:B2:85:2C:E7:48:60:F8:53:CB:20:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1h3BeAj1jg-ZsoUs50hg-FPLINs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FD2B/3F86D79AA83511EDA776AB30C4F9AE02/1h3BeAj1jg-ZsoUs50hg-FPLINs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:30:88:60:27:b1:12:94:db:9e:ef:e7:df:59:05:33:a9:2d:
61:a4:a2:ad:49:8a:54:4c:0d:8f:2b:c2:95:41:3e:a7:e3:9b:
9e:82:88:bc:a1:69:53:da:92:cb:3a:1f:77:db:8a:0a:ff:40:
48:53:f3:36:e0:09:3b:82:5d:bd:91:ea:11:b3:30:a8:29:5a:
09:0e:ef:9b:e3:4b:21:53:b5:66:cc:5a:69:21:8e:b3:80:f2:
89:dc:c9:a5:b5:ec:f6:fb:7d:67:60:a8:c7:e8:25:0e:fa:8e:
ec:9d:27:81:76:32:59:c9:e8:35:66:e6:71:49:0a:d9:41:47:
ba:7e:9c:28:2d:8e:6d:38:5b:54:14:97:33:b6:97:e3:74:8d:
74:81:ef:80:e4:17:d9:a0:9f:51:dd:fc:05:cc:6b:27:e1:21:
43:3d:11:f7:1c:68:c1:59:5d:16:ff:a1:42:d6:e9:30:f4:0b:
45:5a:a2:ab:50:e6:ed:41:3d:48:ef:c3:63:d4:96:61:5a:5e:
a4:9d:d3:1a:1c:12:1f:94:12:c7:01:08:46:ed:72:56:d9:04:
30:c8:cd:92:84:b4:d2:25:6c:a2:6b:fb:10:8c:18:03:00:ac:
01:78:b8:a7:54:af:f9:a2:5b:38:35:98:49:da:4a:b7:7a:92:
88:11:49:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:53:31 2025 by rpki-client