This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.mft
File: Py6661HMOPlbMj3QyF7oMK_jN7M.mft (raw, json)
Hash identifier: /eAANUhns1s8deGB9Z608Q0XC8oE9uwWrYUGPWwyONU=
Subject key identifier: 3E:54:41:29:AC:3D:1B:EA:E8:78:66:81:F4:74:93:2F:E2:09:C4:E3
Authority key identifier: 3F:2E:BA:EB:51:CC:38:F9:5B:32:3D:D0:C8:5E:E8:30:AF:E3:37:B3
Certificate issuer: /CN=A91C430B/serialNumber=3F2EBAEB51CC38F95B323DD0C85EE830AFE337B3
Certificate serial: 1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Py6661HMOPlbMj3QyF7oMK_jN7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.mft
Manifest number: 1C
Signing time: Fri 05 Dec 2025 05:37:11 +0000
Manifest this update: Fri 05 Dec 2025 05:37:11 +0000
Manifest next update: Fri 12 Dec 2025 05:37:11 +0000
Files and hashes: 1: Py6661HMOPlbMj3QyF7oMK_jN7M.crl (hash: zriFb3srhBUWqsRRXoS6/qLbvsrVH/HIogBjXEW+E98=)
2: B32AFC52A7CF11F0923B7A2BC4F9AE02.roa (hash: 1T9AoDGEXF0ooXdUIU1R51E1ZLMSnltdHdoWX3h7RIY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.crl
rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Py6661HMOPlbMj3QyF7oMK_jN7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C430B, serialNumber=3F2EBAEB51CC38F95B323DD0C85EE830AFE337B3
Validity
Not Before: Dec 5 05:37:11 2025 GMT
Not After : Dec 12 05:37:11 2025 GMT
Subject: CN=69326f87-efa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:79:5c:ee:7e:3b:f7:be:97:d1:bd:fb:ae:a0:
52:42:c5:84:74:6c:1b:0f:96:57:fb:e6:f7:0e:61:
a7:08:7a:28:27:51:e2:ba:1a:9d:9b:80:52:db:43:
15:17:17:83:be:56:28:53:cb:50:96:bb:ff:ae:c5:
a2:34:06:d8:b5:53:6f:ae:5a:3c:a2:18:9f:96:61:
ac:3f:9a:73:b0:db:3e:80:75:5c:31:4c:b3:eb:11:
56:0a:16:2c:73:27:45:dc:24:5b:22:34:45:76:c1:
3a:2e:d0:49:01:a5:91:67:53:cd:73:84:4b:8d:ac:
bf:ff:c9:0b:f6:7a:2e:a4:dc:4b:63:65:70:95:4b:
7d:a0:8c:fc:63:d6:48:53:bb:49:59:7a:9b:a0:68:
48:76:c6:3f:5e:33:4f:85:8a:ae:25:5c:80:78:50:
b2:15:5c:52:3a:36:f4:55:5c:3c:45:d9:4e:5e:da:
1c:ee:68:b8:3c:e9:a7:bf:06:17:89:cb:60:07:e5:
b3:79:ce:88:51:cf:9c:ba:10:85:78:32:77:46:20:
c7:f8:bb:14:7b:63:05:01:52:e7:60:9f:20:7b:f1:
81:5c:91:94:7b:3a:2c:35:26:76:f0:c1:c2:48:15:
bf:ab:4c:42:9a:d3:cf:2c:d1:3c:a4:95:36:7e:a1:
3f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:54:41:29:AC:3D:1B:EA:E8:78:66:81:F4:74:93:2F:E2:09:C4:E3
X509v3 Authority Key Identifier:
keyid:3F:2E:BA:EB:51:CC:38:F9:5B:32:3D:D0:C8:5E:E8:30:AF:E3:37:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Py6661HMOPlbMj3QyF7oMK_jN7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C430B/8D03A43AA7CE11F097894528C4F9AE02/Py6661HMOPlbMj3QyF7oMK_jN7M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:f9:09:44:90:61:87:b8:8b:53:35:2f:de:fe:d6:bf:ad:ff:
48:60:0c:6d:7e:18:14:bb:d9:ad:3e:aa:20:29:44:93:83:0e:
f8:3d:ef:26:5c:98:fc:88:3a:35:d2:15:d3:df:7f:e5:82:ec:
84:47:1b:0e:44:eb:81:55:ac:96:d1:11:30:e7:f5:c5:28:28:
02:c2:d1:5c:8d:8f:6e:73:c6:d3:c4:66:9d:ee:a0:51:45:ae:
e1:9c:56:f3:58:dd:cb:cb:ad:8d:e3:d0:71:1b:d8:06:04:75:
f4:d7:2c:c0:75:a2:04:8f:26:23:20:70:57:a5:51:ec:98:f6:
cc:ea:1d:7c:68:36:fa:2a:c3:c4:b8:66:fb:46:aa:88:17:74:
d0:ae:96:61:66:ad:53:26:14:e0:b6:79:56:f9:d9:11:f9:6b:
11:a5:7d:a5:05:6f:91:5b:b7:b3:1e:1e:e1:54:1d:3f:37:42:
a6:54:ab:02:ed:44:3b:b0:cd:ba:50:37:cf:64:39:33:3d:94:
88:fd:ad:29:a4:0c:b4:b0:4d:97:a6:b2:c0:3a:6d:34:fe:c7:
de:a1:70:98:bc:b4:72:78:68:f0:1e:fa:32:a1:7e:a2:aa:55:
67:f9:aa:6e:f8:97:43:7d:67:75:c9:3b:88:34:71:64:e4:3a:
69:f3:b5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:27:10 2025 by rpki-client