This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
File: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft (raw, json)
Hash identifier: A2Tx9Vy8wO7j8JfLoRcZRh+f33kDx6xIEvAM2FH37Hc=
Subject key identifier: 6B:1C:12:42:4E:B8:35:43:AE:7F:E2:92:A8:8B:59:53:5F:D1:74:0C
Authority key identifier: DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51
Certificate issuer: /CN=A91D1691/serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
Certificate serial: 18F6
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
Manifest number: 18EF
Signing time: Sat 06 Dec 2025 15:32:57 +0000
Manifest this update: Sat 06 Dec 2025 15:32:57 +0000
Manifest next update: Sat 13 Dec 2025 15:32:57 +0000
Files and hashes: 1: 3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl (hash: NJabF3ZD45EiAms9z5JtIadyhkdPSszE8YJ8LVOydLA=)
2: AEA7C9C0818911EA81577016C4F9AE02.roa (hash: iFM56WrKeXwdoA2Uh6qPu0ZtIRkJDq6/ES1KC7jnXoA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl
rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6390 (0x18f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1691, serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51
Validity
Not Before: Dec 6 15:32:57 2025 GMT
Not After : Dec 13 15:32:57 2025 GMT
Subject: CN=69344ca9-74d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:da:42:c3:9c:82:ee:94:5e:a3:73:58:20:03:
2c:96:f7:e0:5f:21:fa:9f:3b:d4:d0:48:cb:28:a0:
aa:13:0d:2e:ea:6f:53:49:27:40:48:b1:33:fe:12:
43:0f:40:bc:62:ee:03:5b:3c:ae:9f:34:46:0e:49:
c8:99:9b:8a:b2:00:eb:69:db:ff:7f:f2:2f:d3:8f:
89:6d:4f:fb:21:cd:9c:56:09:9f:98:dc:c7:2f:7a:
6e:99:af:df:b1:ca:32:98:d5:5e:21:02:ec:d6:ba:
dd:f2:6c:83:34:04:c4:85:07:71:aa:d5:ed:0a:06:
dc:11:98:e0:84:b3:c0:84:3f:93:fa:f2:bd:89:7f:
cd:bc:f8:70:43:fc:c6:c0:80:cb:0e:91:27:df:86:
59:f1:1d:14:f6:0e:36:1d:38:cb:47:62:c5:fd:a8:
cd:ad:6d:ea:8f:17:82:15:a3:ff:24:ae:26:70:1e:
43:35:81:36:7b:37:78:bb:c0:2b:22:55:4f:e1:d2:
91:cc:a0:f2:f6:4e:72:50:6b:90:6b:7b:eb:00:b5:
32:ac:c2:11:b1:17:f6:4d:34:d2:30:f0:16:ff:be:
86:62:1d:cb:25:da:46:76:65:26:3a:aa:13:43:d6:
98:4e:73:30:3e:97:82:5b:fa:be:b0:f4:52:2b:1a:
c7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1C:12:42:4E:B8:35:43:AE:7F:E2:92:A8:8B:59:53:5F:D1:74:0C
X509v3 Authority Key Identifier:
keyid:DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7a:02:c2:89:07:b5:4e:37:f8:7a:c8:ce:44:b3:30:2d:63:
36:53:53:7d:c5:2b:cb:bc:44:7e:61:67:c3:69:23:26:11:0a:
e1:74:38:23:b3:2c:a3:be:17:41:91:a0:27:29:0b:f7:d5:6b:
8b:ca:57:eb:73:d0:06:ee:84:69:a0:16:b3:a2:e5:94:84:d7:
4f:17:e1:9c:bf:2b:00:41:4f:29:58:b3:5d:65:75:36:1a:52:
54:5a:56:92:07:1f:35:a6:b6:9a:b6:3e:98:06:f9:61:1b:3b:
6f:cd:4b:74:1f:0f:5c:73:be:c4:8c:82:52:90:dd:74:55:01:
74:1f:13:b2:13:c0:0d:1e:e3:35:05:4f:7b:72:e3:93:cb:a0:
b6:07:86:43:b5:ee:30:a0:fa:8c:77:c9:79:a0:f1:ba:05:04:
fa:2d:31:ce:78:82:e6:9b:b6:6f:a5:79:64:05:4c:a3:9e:25:
99:50:c5:60:03:e5:f6:25:b7:e6:35:bc:a3:7d:d3:b1:6f:53:
57:c4:b7:87:3b:d0:09:91:ac:38:0d:3b:6f:b8:ed:6c:dc:6a:
52:4c:59:85:d2:06:b9:53:80:2a:91:5f:c7:64:eb:b6:44:64:
39:6f:db:b9:5a:b6:12:cc:85:59:aa:34:95:14:de:47:8c:49:
24:c8:47:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:03:50 2025 by rpki-client