This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
File: 3yS01RxnhB3WAN0qYXhrzpiHhmc.mft (raw, json)
Hash identifier: 74hrLxA6P6jag6zpQUByrKe4nwjMAJCY13Tg8WqXnyQ=
Subject key identifier: 7D:6A:53:27:C5:1E:72:F4:68:88:32:FD:E0:6B:84:A4:DC:6C:3B:85
Authority key identifier: DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67
Certificate issuer: /CN=A91813ED/serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667
Certificate serial: F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
Manifest number: F2
Signing time: Fri 05 Dec 2025 03:18:51 +0000
Manifest this update: Fri 05 Dec 2025 03:18:51 +0000
Manifest next update: Fri 12 Dec 2025 03:18:51 +0000
Files and hashes: 1: 3yS01RxnhB3WAN0qYXhrzpiHhmc.crl (hash: LpoYjN2g/vTFZccEfOxzfcT6c6EVeKxGZ9chblUaSrI=)
2: B21985725F3711EFA108CA0CC4F9AE02.roa (hash: hjZJ+P+DDZEo0McDoaqGVpFBbzW2XOruqYUk9+Z9bak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl
rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:18:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91813ED, serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667
Validity
Not Before: Dec 5 03:18:51 2025 GMT
Not After : Dec 12 03:18:51 2025 GMT
Subject: CN=69324f1b-a537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:fe:45:a2:5d:cd:cd:53:62:2d:74:0a:9c:
60:55:55:e0:ea:be:2a:19:b4:d1:74:53:fc:51:4e:
df:4c:b8:df:61:0b:64:63:77:2c:bf:f8:e1:5f:0d:
e2:5d:8b:48:7d:9d:f3:ce:8d:06:bd:8e:ea:8e:30:
a4:76:85:b5:7c:49:65:e4:04:0b:94:d5:98:92:8d:
24:4b:91:ec:ba:38:00:86:4b:1d:70:66:e6:80:8d:
5a:9f:4c:4a:54:b8:41:60:88:1b:ed:17:1c:50:0e:
64:32:d0:bd:77:01:67:68:da:ff:2d:b2:39:69:f5:
f1:55:3e:83:28:8f:ca:14:04:ae:09:2d:f5:3a:ff:
76:a5:4f:00:ce:84:0a:da:50:1f:81:52:ac:3e:c3:
38:6d:43:06:43:04:ef:81:39:2e:0f:96:70:f1:aa:
77:23:77:d4:f0:12:5e:96:06:a4:c7:f7:8a:f4:3a:
14:5c:23:02:96:9b:d7:5d:64:ff:e6:58:f8:11:b3:
62:f6:18:b9:a4:31:ab:22:d5:54:91:7a:7a:31:74:
62:df:00:72:39:5c:42:a2:e8:d7:45:27:be:33:98:
2a:90:9c:25:43:47:c4:32:60:d2:0c:31:6f:b8:de:
76:07:70:fc:4e:82:69:d6:fc:4e:3d:a1:f2:d2:a1:
02:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6A:53:27:C5:1E:72:F4:68:88:32:FD:E0:6B:84:A4:DC:6C:3B:85
X509v3 Authority Key Identifier:
keyid:DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:91:fc:6b:0b:4d:4e:11:64:29:96:25:0b:12:60:e1:ee:f9:
2b:ea:aa:9f:aa:9c:05:5b:f5:a0:91:3e:df:3f:e0:d6:23:1c:
42:b1:c9:bb:e4:09:bd:94:f5:0e:aa:a5:4f:17:5f:87:a3:34:
ab:72:7f:81:6d:96:0e:a5:0b:a4:29:d4:58:e9:1e:8a:af:ac:
4a:1e:61:fd:fb:8e:3a:35:ef:b1:fb:19:54:08:b2:31:42:17:
59:d3:7c:2f:ab:2f:70:1f:d5:56:a7:36:90:4b:f5:4f:36:eb:
60:df:18:e1:32:7d:4a:21:b8:d6:d1:08:37:68:dc:7b:16:e1:
dd:4a:8d:ed:33:b3:2d:1a:2d:52:50:b1:dd:c3:c3:fb:32:03:
d1:d0:a6:a3:d0:29:62:92:17:18:c7:08:34:65:aa:1d:a2:63:
ed:cd:53:be:9b:37:97:e3:96:c9:2b:36:ec:80:1c:a6:33:ea:
96:a9:b1:5c:7b:38:82:9e:9c:36:fd:d2:08:1d:a9:86:6e:7d:
2a:11:db:3a:78:79:9e:9c:75:9e:18:fe:d3:60:36:b9:82:02:
39:ba:98:6d:bf:f7:b3:a8:1f:60:9e:81:eb:a4:d0:1a:83:9f:
d9:79:81:b2:a9:ee:2a:63:4e:31:4f:5c:ff:a6:0c:5d:a7:f0:
d1:18:3b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:34:57 2025 by rpki-client