This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft
File: PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft (raw, json)
Hash identifier: yX+c03SgMCn+OmtpYBYHoeaL+y0sx0+ABFAsuiYilz8=
Subject key identifier: 00:C7:05:08:3C:AC:F9:36:FA:9E:1C:F3:03:D1:42:3D:85:C1:4B:2A
Authority key identifier: 3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8
Certificate issuer: /CN=A91B10B9/serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8
Certificate serial: 03F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft
Manifest number: 03F3
Signing time: Thu 18 Dec 2025 23:48:52 +0000
Manifest this update: Thu 18 Dec 2025 23:48:51 +0000
Manifest next update: Thu 25 Dec 2025 23:48:51 +0000
Files and hashes: 1: PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl (hash: xmJhJuYPYcHj1bV5g+eujd8vUQL7ASf1ikXG2z273YA=)
2: BCD0F6B0A0FF11EC924D4461C4F9AE02.roa (hash: eYkm574zXfPZBssf+KqgdlPvB8riPVJCVgCP7O8B6S0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl
rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:48:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1016 (0x3f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B10B9, serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8
Validity
Not Before: Dec 18 23:48:51 2025 GMT
Not After : Dec 25 23:48:51 2025 GMT
Subject: CN=694492e4-e6e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:16:6b:2f:24:67:32:cc:65:89:64:7f:30:33:
35:a2:c0:3f:69:ed:86:29:ac:e2:98:db:a4:10:a9:
c2:0a:6e:88:e6:44:00:a7:8e:65:c8:20:a7:4a:63:
bb:9b:a5:e3:70:53:af:d4:76:91:f8:c2:e2:74:85:
3b:ca:31:01:e0:ff:79:a6:5c:36:7e:ea:9d:60:01:
fe:85:fe:69:b5:c2:a5:ac:8b:24:93:33:c8:07:73:
81:7d:5e:48:5c:28:26:b7:11:ad:7c:81:85:9c:33:
bd:da:fe:74:da:00:35:8b:ad:7e:92:30:3f:24:e9:
ac:34:3e:d0:2b:d6:41:7b:4b:bc:65:9d:c2:0d:0d:
db:58:82:2d:7d:98:4d:53:f5:f5:da:d7:ce:84:4b:
49:cd:95:38:24:5e:f3:b2:20:4e:a7:25:2f:51:e5:
66:3f:3b:e9:b2:5e:4c:e1:e2:dc:24:7b:f8:47:7c:
49:d9:ca:bf:99:c3:94:41:cb:e4:a0:95:cf:aa:d0:
cf:ef:70:02:5a:a1:37:32:33:91:9f:b8:ac:fa:dc:
9d:4b:04:74:46:46:95:d5:ae:9a:77:2a:71:27:95:
8a:16:b8:ac:79:84:f7:e3:17:e9:01:c6:bf:77:2b:
58:18:3a:f5:a7:2a:6b:21:44:8c:eb:22:3a:bd:39:
61:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C7:05:08:3C:AC:F9:36:FA:9E:1C:F3:03:D1:42:3D:85:C1:4B:2A
X509v3 Authority Key Identifier:
keyid:3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:65:6b:1b:9e:61:10:42:ff:29:36:1c:94:68:b6:aa:f7:14:
d2:48:e8:6c:b5:68:1a:18:71:97:41:48:a8:a8:86:6c:70:bd:
2c:e2:39:d7:83:d2:f4:e1:ae:6a:78:03:c3:23:93:61:0e:9e:
70:b2:03:36:0f:04:7d:ea:f0:3d:52:d9:9b:91:a8:15:90:87:
ef:9b:64:fc:fc:46:cd:f3:75:0f:c1:42:8b:37:b0:87:0e:a7:
ef:40:42:83:7e:bf:9f:be:cf:b7:71:c7:ac:40:23:65:ce:63:
b6:5c:88:d2:e7:16:28:83:76:dc:5f:9c:26:a7:14:97:b6:e0:
61:8d:9f:39:c0:5f:d2:c4:07:34:ef:d2:7b:b4:79:d5:a8:38:
a5:16:b5:5d:83:1c:0c:08:4b:9a:70:5b:e4:8b:58:15:4b:f3:
d6:92:48:1c:0f:13:fc:c7:9e:d6:43:3f:31:fc:9a:7d:33:5e:
55:cc:a4:eb:97:4d:03:62:ed:c8:b2:b7:ad:49:89:99:7d:03:
08:05:6b:87:de:a5:da:e2:15:69:7a:df:8c:a0:64:23:81:74:
9c:12:07:e5:09:34:b0:fc:49:26:fe:69:37:58:43:d3:fe:ba:
14:2f:f2:e8:cb:9e:a1:da:e6:a2:2a:0d:0e:50:de:38:5e:f9:
7a:20:dc:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjEwQjkxMTAvBgNVBAUTKDNENzdCNTg2QTNGNjgyQzU2M0I2NDI2NTI2Mjg5MUQ0
REE0NkE3QTgwHhcNMjUxMjE4MjM0ODUxWhcNMjUxMjI1MjM0ODUxWjAYMRYwFAYD
VQQDDA02OTQ0OTJlNC1lNmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxxZrLyRnMsxliWR/MDM1osA/ae2GKazimNukEKnCCm6I5kQAp45lyCCnSmO7
m6XjcFOv1HaR+MLidIU7yjEB4P95plw2fuqdYAH+hf5ptcKlrIskkzPIB3OBfV5I
XCgmtxGtfIGFnDO92v502gA1i61+kjA/JOmsND7QK9ZBe0u8ZZ3CDQ3bWIItfZhN
U/X12tfOhEtJzZU4JF7zsiBOpyUvUeVmPzvpsl5M4eLcJHv4R3xJ2cq/mcOUQcvk
oJXPqtDP73ACWqE3MjORn7is+tydSwR0RkaV1a6adypxJ5WKFriseYT34xfpAca/
dytYGDr1pyprIUSM6yI6vTlh9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADHBQg8
rPk2+p4c8wPRQj2FwUsqMB8GA1UdIwQYMBaAFD13tYaj9oLFY7ZCZSYokdTaRqeo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTBCOS9EMTNCRUFBQUEw
RkIxMUVDQTVEMURGNUJDNEY5QUUwMi9QWGUxaHFQMmdzVmp0a0psSmlpUjFOcEdw
NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BYZTFocVAyZ3NWanRrSmxKaWlSMU5wR3A2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MTBCOS9EMTNCRUFBQUEwRkIxMUVDQTVEMURGNUJDNEY5QUUwMi9QWGUxaHFQMmdz
Vmp0a0psSmlpUjFOcEdwNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC5ZWsbnmEQQv8pNhyUaLaq9xTSSOhstWgaGHGXQUioqIZscL0s4jnX
g9L04a5qeAPDI5NhDp5wsgM2DwR96vA9UtmbkagVkIfvm2T8/EbN83UPwUKLN7CH
DqfvQEKDfr+fvs+3ccesQCNlzmO2XIjS5xYog3bcX5wmpxSXtuBhjZ85wF/SxAc0
79J7tHnVqDilFrVdgxwMCEuacFvki1gVS/PWkkgcDxP8x57WQz8x/Jp9M15VzKTr
l00DYu3IsretSYmZfQMIBWuH3qXa4hVpet+MoGQjgXScEgflCTSw/Ekm/mk3WEPT
/roUL/Loy56h2uaiKg0OUN44Xvl6INw7
-----END CERTIFICATE-----
Generated at Sat Dec 20 04:46:35 2025 by rpki-client