This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
File: E3PX27MxtT_PfCjcDfs-n9p-9JA.mft (raw, json)
Hash identifier: 0NnZwzVs264vHBm4MmOxPmU47cN2iAdOHXdhuCg1wRM=
Subject key identifier: EB:D3:D4:39:04:65:F7:40:45:03:9F:D4:60:8D:69:3E:CD:DA:8C:6E
Authority key identifier: 13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90
Certificate issuer: /CN=A91B9288/serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490
Certificate serial: 052A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
Manifest number: 0520
Signing time: Sat 06 Dec 2025 22:20:33 +0000
Manifest this update: Sat 06 Dec 2025 22:20:32 +0000
Manifest next update: Sat 13 Dec 2025 22:20:32 +0000
Files and hashes: 1: E3PX27MxtT_PfCjcDfs-n9p-9JA.crl (hash: IY6oDBQVEujdnkiOB741MzcDh9HuyCVgdnx6d03ODg8=)
2: E7676A04A13B11F0B587F733C4F9AE02.roa (hash: iFC8MgE5SfSQ16rr4AK5f5Pz7LFrrXaQbjH1tabI/5o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl
rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 22:20:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1322 (0x52a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9288, serialNumber=1373D7DBB331B53FCF7C28DC0DFB3E9FDA7EF490
Validity
Not Before: Dec 6 22:20:32 2025 GMT
Not After : Dec 13 22:20:32 2025 GMT
Subject: CN=6934ac30-ed13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b6:e5:bf:f4:ed:25:19:d8:d0:d7:3c:c0:cf:
c6:53:9f:2a:f9:5f:5b:ab:bc:ec:e4:1b:97:b5:f5:
5d:e7:b2:38:6e:82:19:93:19:7f:a7:47:83:61:ac:
41:ef:50:e7:b3:79:db:bd:fb:b8:b5:e1:4e:97:9f:
e9:24:2d:b7:5e:31:35:c3:9f:34:0d:ff:07:dc:ea:
b5:55:ae:1f:98:f6:18:d7:f7:c7:dd:51:e4:19:2f:
25:44:1e:0d:29:d6:57:96:61:f0:f8:c3:ef:84:78:
fa:03:dd:5d:f2:a3:81:9b:b3:45:a7:d3:e1:b7:60:
cb:73:0f:4a:c1:d8:a7:59:e5:ac:2f:80:f8:59:22:
56:a7:5c:c6:99:b1:3a:59:3a:47:66:8b:1d:50:cf:
6a:db:5b:17:48:02:ff:ab:60:24:66:6f:4b:88:f7:
fe:23:df:13:f2:ae:87:4b:61:ee:05:50:87:9c:4c:
54:cd:a9:10:36:c4:31:6a:e6:35:6e:fa:ec:fd:b9:
9b:6f:86:b8:4b:eb:eb:74:fa:a8:86:33:16:59:4a:
cf:00:63:ff:5c:13:49:15:78:45:3d:1d:03:82:31:
e6:1b:5e:d8:eb:5e:41:d0:8f:62:78:fc:58:0e:ff:
68:1f:20:43:5d:c5:ea:d5:8b:ce:13:35:d5:a9:46:
71:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D3:D4:39:04:65:F7:40:45:03:9F:D4:60:8D:69:3E:CD:DA:8C:6E
X509v3 Authority Key Identifier:
keyid:13:73:D7:DB:B3:31:B5:3F:CF:7C:28:DC:0D:FB:3E:9F:DA:7E:F4:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3PX27MxtT_PfCjcDfs-n9p-9JA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9288/1FDDA7B02C5911ECBAF5F86AC4F9AE02/E3PX27MxtT_PfCjcDfs-n9p-9JA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:5c:fc:68:64:72:c6:db:86:54:85:4e:d0:41:09:0d:9a:1a:
2c:9e:84:97:06:d0:80:21:79:7e:2a:62:54:2b:a4:68:77:1f:
dd:5d:68:0d:92:89:0f:65:a8:49:7d:d5:93:62:7b:80:dc:25:
56:b3:1c:8b:09:7c:9a:07:39:7e:a2:25:33:85:50:5c:1e:20:
11:d2:85:50:57:f2:d0:d1:c6:fe:3f:5d:67:a2:89:b1:ae:49:
3b:0b:d8:66:96:6e:23:8f:72:51:6d:71:e3:37:87:0a:c5:ec:
57:b6:be:48:ae:79:40:c7:c9:00:56:e6:a8:0b:a8:da:24:cb:
84:72:ea:3d:82:2b:84:64:fc:b6:d0:3c:fe:b9:a4:d5:5d:a6:
93:43:8f:73:3a:29:58:17:fb:dd:7b:49:1b:d7:da:69:b7:5f:
30:f4:e5:6c:6d:f8:eb:1b:e9:95:5a:fc:de:da:d7:c8:d9:d4:
45:ed:c6:85:0c:f7:22:49:6f:56:6b:3a:d3:67:15:35:8d:fb:
a4:e1:e9:41:da:58:1e:a9:7b:9d:d3:d6:12:84:9c:ab:65:13:
0e:52:09:d6:38:72:8a:f4:e1:ec:e9:b8:fd:99:99:2f:5f:f3:
de:e8:c4:24:10:f0:b8:54:f4:4e:5d:d4:21:8e:56:24:28:25:
71:23:e7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:51:38 2025 by rpki-client