This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
File: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft (raw, json)
Hash identifier: mkS9raq22n4pWGfLRT3jF4210o0UDrTkrmvCSumMezk=
Subject key identifier: DB:8C:09:97:53:18:16:ED:E0:D7:8B:66:BC:F2:06:7D:98:F1:4B:7C
Authority key identifier: DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B
Certificate issuer: /CN=A9182762/serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B
Certificate serial: 2FD6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
Manifest number: 2FA9
Signing time: Sat 06 Dec 2025 15:16:35 +0000
Manifest this update: Sat 06 Dec 2025 15:16:34 +0000
Manifest next update: Sat 13 Dec 2025 15:16:34 +0000
Files and hashes: 1: 3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl (hash: 0Q1/23aUJMTZUGOGjMnYstCpVjefeJBIxf4IpI7wN18=)
2: 4ECD37E0B13D11E59299870AC4F9AE02.roa (hash: zwQt0U0MX29MPa93PKs9TYXFxS+49eXVEwZ6lR+uSHo=)
3: 502355A2B13D11E59299870AC4F9AE02.roa (hash: odNG2CTuocV+iFzm6p+rsTOH7z1wG0je4WOLqIbugr8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl
rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12246 (0x2fd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182762, serialNumber=DCB30ECF78A13375EE525278F9CFD30F7C58AA8B
Validity
Not Before: Dec 6 15:16:34 2025 GMT
Not After : Dec 13 15:16:34 2025 GMT
Subject: CN=693448d2-053f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:53:4c:c9:86:38:a7:58:c6:54:c6:f7:13:28:
7f:80:c9:68:ba:f0:93:28:10:59:82:0b:5c:41:21:
d3:3a:5c:d9:a5:cc:a1:fb:3e:b3:a7:cf:35:c1:f8:
d6:91:5c:7c:95:89:13:ab:fd:82:2b:d8:34:3d:13:
3e:ee:18:1f:73:7e:5b:ec:e6:44:e7:91:c1:29:ea:
d4:8d:6c:b5:56:e2:ae:05:c2:7a:34:5b:b3:9f:2b:
be:f7:1e:b5:70:75:0c:60:9b:1e:6c:a4:87:17:26:
4d:7c:cd:dd:5a:fd:a7:f5:94:d5:23:3f:35:d0:f2:
0b:8c:fd:6a:dc:69:5a:b1:a5:86:39:b3:be:f7:3c:
23:7b:b5:26:5d:02:7d:4c:47:fa:cb:4f:16:fd:1a:
5a:ec:78:36:7c:68:51:f5:a9:2f:94:78:36:4d:0f:
f0:74:13:2b:0b:b4:12:92:b1:1c:5b:9f:99:c3:ed:
d1:f0:88:9f:bb:bc:f6:43:92:c6:54:19:eb:6d:6a:
e7:ab:a3:45:2a:cb:40:f8:ed:fc:91:87:a3:53:45:
08:e8:2f:f3:8d:1c:6c:ac:8d:43:37:b8:8b:a4:20:
fa:e6:01:12:4a:22:04:dc:b9:1d:0b:a6:10:94:40:
3a:6d:39:51:78:16:b1:2d:cc:d0:59:56:1e:0c:66:
6e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8C:09:97:53:18:16:ED:E0:D7:8B:66:BC:F2:06:7D:98:F1:4B:7C
X509v3 Authority Key Identifier:
keyid:DC:B3:0E:CF:78:A1:33:75:EE:52:52:78:F9:CF:D3:0F:7C:58:AA:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3LMOz3ihM3XuUlJ4-c_TD3xYqos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182762/8AAE0F8C283711E3B52BD33B5911EA32/3LMOz3ihM3XuUlJ4-c_TD3xYqos.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:b9:3d:c4:92:ab:d9:14:ae:df:61:92:02:b6:7b:b9:fb:4d:
52:b4:09:9b:0e:67:8e:0f:ce:80:8e:99:b0:e3:69:7d:89:24:
30:62:63:01:e1:a2:04:2b:a0:c1:5c:59:a9:09:ee:1d:43:08:
c6:45:78:81:b8:0b:3c:38:d9:79:9b:bc:1e:5e:f5:fa:ec:99:
9a:d4:94:a9:b3:b6:19:44:74:87:ca:ba:b2:b8:01:0b:f9:50:
07:15:aa:e2:a3:d5:fd:c6:1a:c0:3d:38:1f:dd:12:09:dc:7b:
29:3f:e3:e7:8a:a3:96:19:b1:4a:22:8f:c9:1f:2c:14:9d:69:
3a:f9:3e:1d:d1:be:ff:55:22:2f:18:54:fd:60:8f:e4:8d:95:
cf:b4:11:5d:47:0b:23:3d:6a:93:9a:1b:28:8c:fa:86:8b:67:
f9:24:d4:77:06:5b:82:b6:b4:46:05:f3:ba:bb:0b:9b:2e:0c:
81:29:84:ac:e4:8b:d2:06:46:a7:57:64:df:ab:a8:71:58:23:
b7:e7:c6:02:8d:88:02:71:e5:cd:29:6e:37:fd:d7:dc:4f:cf:
00:11:34:f0:d5:30:7e:8b:7e:07:b1:60:da:3f:c9:24:74:25:
44:ca:98:a2:96:9f:14:1f:61:ab:48:d1:d5:6e:f1:9c:1a:f3:
c9:c9:dc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:42:39 2025 by rpki-client