This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
File: PUfmaHu030DFGwOkVZwQyiL2dy8.mft (raw, json)
Hash identifier: CUP/dUR0YjqVAbh0r/6ObxcAnTOeB1694gw7PnFt0+U=
Subject key identifier: 34:70:F3:07:67:4A:4B:EC:4C:77:3B:0C:62:51:27:92:59:AF:06:5B
Authority key identifier: 3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F
Certificate issuer: /CN=A91AA5C6/serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F
Certificate serial: 01BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
Manifest number: 01B0
Signing time: Fri 05 Dec 2025 01:29:48 +0000
Manifest this update: Fri 05 Dec 2025 01:29:48 +0000
Manifest next update: Fri 12 Dec 2025 01:29:48 +0000
Files and hashes: 1: PUfmaHu030DFGwOkVZwQyiL2dy8.crl (hash: Z9zZ+0wxxD2sJwmHGgSAwpYmbbKkaXpuLpuM5UahD48=)
2: EA1E8B8A51C711EE9A3CC954C4F9AE02.roa (hash: zLJmvWY7239Phf4yPfDTSksmKOjgZNQc6mllvDN5PGA=)
3: FAA2E3324C3811EEB7116433C4F9AE02.roa (hash: lp3xmOm8VpMKZjMN4wnKudx9lNNJk9A7QEoVNpNZM/Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl
rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446 (0x1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA5C6, serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F
Validity
Not Before: Dec 5 01:29:48 2025 GMT
Not After : Dec 12 01:29:48 2025 GMT
Subject: CN=6932358c-47ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:57:1e:2c:65:3e:80:6c:b2:34:4b:6d:39:b1:
18:86:a3:2e:b2:c8:ad:ff:eb:1d:23:9c:55:3f:14:
b2:e3:99:be:dd:f5:6b:97:2a:bf:7b:5f:a6:c5:9e:
67:a7:25:97:a1:19:aa:02:29:93:c2:05:91:35:b8:
dd:1d:7c:76:ea:f0:03:dc:d2:1d:b0:99:e7:8b:90:
0f:79:37:ec:e2:fd:64:8a:02:a6:e8:4b:50:c0:c9:
9a:03:90:fb:d0:31:7e:12:f6:8b:8e:12:eb:28:78:
28:d4:15:f3:da:92:85:18:83:9a:f2:68:3d:c1:69:
93:84:29:91:2c:38:2a:d6:9e:32:40:36:fe:d1:90:
d7:6a:ba:3c:57:f4:2d:4a:09:1c:2b:0b:c4:de:75:
d5:df:47:08:14:48:04:fa:75:b2:3c:c2:c7:ee:bc:
ad:ab:cf:e4:dd:ba:2e:01:62:73:42:6e:8b:23:6f:
c7:57:13:70:a1:d2:aa:b2:e4:9f:59:c7:2f:3c:d2:
52:9d:98:4d:4b:f5:d9:0a:93:f4:cd:b6:f1:af:c8:
0a:bc:58:d5:50:65:81:84:c6:69:75:36:9c:de:52:
40:48:c3:d9:42:33:f1:03:90:c8:a4:53:16:d5:12:
d8:f2:83:14:52:30:ba:b2:98:67:be:b7:63:8d:4e:
2a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:70:F3:07:67:4A:4B:EC:4C:77:3B:0C:62:51:27:92:59:AF:06:5B
X509v3 Authority Key Identifier:
keyid:3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:60:d8:15:f1:5f:80:fa:f1:83:25:94:76:1d:77:98:b9:ab:
05:e9:cb:f3:ae:5c:40:e5:15:bd:42:a1:e8:db:64:a9:eb:e3:
a0:65:ad:22:00:bb:d3:1a:5b:cb:bc:9a:86:87:59:93:e0:a8:
94:46:f6:80:be:3f:4a:d5:fa:3d:b1:cc:5e:38:4b:15:4f:cb:
22:ba:af:2a:aa:fe:b2:a8:a9:17:7a:b9:1f:3a:8e:cc:f5:bf:
ab:23:20:d9:72:1c:6c:47:59:68:2e:f4:18:6e:a8:49:29:32:
4e:82:0b:d9:3c:13:ce:eb:93:3b:8f:be:6a:db:5b:4f:e5:7e:
65:c7:54:94:bb:88:69:e1:b8:80:45:25:eb:ac:b6:10:80:29:
bf:3c:bf:d3:84:81:35:80:9e:25:85:f3:43:23:08:2e:54:a8:
06:df:b9:ae:8e:a4:e4:11:1f:64:61:41:0b:23:e4:91:0f:ba:
45:8d:46:66:da:1b:5a:ab:24:42:15:e6:ab:6e:ba:5f:a2:1f:
6f:ed:ed:26:94:fb:8c:90:02:7e:fa:09:c3:c6:58:88:10:48:
30:52:0a:8f:72:bf:e1:9d:28:f2:a5:d8:b5:b6:ce:f3:52:e6:
86:be:08:e3:1f:ff:7e:7a:8d:d8:bd:99:ed:f0:04:9a:e5:de:
35:c6:44:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:26:04 2025 by rpki-client