This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
File: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft (raw, json)
Hash identifier: 3OkayPj5Xi2FQAwY5qq4SBLb6HI/XHUUAuI4I7lh/Lw=
Subject key identifier: CC:55:3D:9D:A0:EC:CE:1F:21:88:81:99:99:B6:0A:5C:4E:3A:A7:37
Authority key identifier: 3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC
Certificate issuer: /CN=A917AB94/serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC
Certificate serial: 0311
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
Manifest number: 030B
Signing time: Sat 06 Dec 2025 23:44:12 +0000
Manifest this update: Sat 06 Dec 2025 23:44:12 +0000
Manifest next update: Sat 13 Dec 2025 23:44:12 +0000
Files and hashes: 1: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl (hash: nJfAWNb7APWEIdJB62Y044TEgxtL3JnICvDLnnMAWpI=)
2: 865AA3E400FC11EDAA69A61DC4F9AE02.roa (hash: lRZm7R1XzhUUnYkMhnYwCmY95i90cE75koEdjvOdBVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl
rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 23:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 785 (0x311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AB94, serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC
Validity
Not Before: Dec 6 23:44:12 2025 GMT
Not After : Dec 13 23:44:12 2025 GMT
Subject: CN=6934bfcc-b6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5e:8f:2b:2f:6d:81:6a:4b:28:b9:35:46:04:
6f:03:31:3a:ee:be:1d:7d:d2:eb:0a:af:05:d4:e0:
4e:38:e1:cf:99:f8:4a:3f:cb:c4:77:af:29:75:53:
02:dd:06:ab:ce:5b:71:0d:2a:87:71:a3:4f:3c:f6:
95:7a:bb:b4:0f:83:44:b4:f2:2d:93:f8:4d:c1:09:
3e:6a:96:04:65:1a:5c:09:e9:0b:0a:71:b6:bc:58:
83:f4:d7:8d:1c:0a:af:1a:c4:4e:8f:82:18:e2:06:
ba:25:c4:13:b9:4a:cf:f0:90:68:df:6b:9a:61:16:
33:13:6f:7b:d4:16:f0:bb:75:f4:1e:02:52:6e:6e:
81:19:fe:3c:82:87:12:3d:07:94:40:89:a3:ae:0d:
12:08:ac:3b:22:78:09:d3:3d:bc:f3:c1:8e:0d:4a:
6c:bd:e4:67:e7:71:93:e5:b7:d3:18:fa:2e:e7:1d:
c5:72:b9:07:78:09:81:ee:73:8c:ce:7f:9f:cf:74:
e2:92:f6:95:78:77:fc:54:4f:b8:49:c6:2e:d9:be:
24:bb:84:85:0e:72:ac:2b:a1:87:b5:29:5e:53:61:
ea:a0:5d:6a:9f:e4:6b:60:d9:ad:3d:ed:e9:75:c9:
dd:1e:7b:3d:ce:39:58:84:23:e0:f8:95:67:53:21:
e9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:55:3D:9D:A0:EC:CE:1F:21:88:81:99:99:B6:0A:5C:4E:3A:A7:37
X509v3 Authority Key Identifier:
keyid:3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d2:40:e9:66:5d:ad:78:e0:03:c0:e5:01:cb:fb:ff:29:81:
87:91:8c:57:6c:81:3e:71:c4:34:c3:5a:2b:b9:34:25:72:0d:
9f:82:a5:75:15:2a:93:ec:11:2f:49:5e:cd:e9:fb:07:7d:a6:
c5:fc:e1:05:79:a2:13:b8:33:1d:db:38:c8:9f:2d:d0:16:49:
88:81:4c:36:fe:16:8f:29:42:7b:4a:81:cc:12:37:b5:76:cc:
74:35:5c:fd:1d:2b:bc:ce:f9:c7:44:6a:b1:6e:6d:e6:10:d3:
a7:73:fb:98:a7:63:b8:d3:b4:02:5c:1a:22:02:2b:5d:7b:ba:
5b:dd:33:11:f3:08:b7:36:a5:53:cc:43:ca:38:3f:04:ca:30:
a9:e9:5f:95:dd:0e:04:82:7d:2e:eb:93:e3:48:ea:58:de:89:
60:4d:9f:d5:54:97:77:1d:0f:91:0f:0b:a6:bd:53:3c:84:54:
44:62:be:e6:bc:cc:bf:d4:de:1c:bd:65:39:1d:b1:31:f7:aa:
1c:8a:da:c2:8a:63:02:c6:7c:dc:e4:fc:a5:16:bc:96:8c:3e:
7e:4b:17:67:3a:09:f5:58:d8:8e:b5:15:a3:8b:34:d9:27:14:
0a:2e:5d:84:53:d4:62:e6:b7:6a:09:69:d5:ee:2f:49:e8:c4:
7b:8f:98:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:34:50 2025 by rpki-client