This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
File: PByHc0fugnKWNq8POjddORCQ-SE.mft (raw, json)
Hash identifier: QztmQlLXmsV5bupPkd3KXhhrKl/9Av3gLd+RmTR46LI=
Subject key identifier: B8:84:01:48:29:DC:BA:05:A6:DA:90:0B:0A:7C:6F:BA:6E:1B:D4:44
Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
Certificate issuer: /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Certificate serial: 2D4D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
Manifest number: 2D16
Signing time: Sat 06 Dec 2025 15:19:13 +0000
Manifest this update: Sat 06 Dec 2025 15:19:12 +0000
Manifest next update: Sat 13 Dec 2025 15:19:12 +0000
Files and hashes: 1: PByHc0fugnKWNq8POjddORCQ-SE.crl (hash: E05ALEF8nF8Sml7uBhBydiHgbgDonoL+3Xttj0GT4L4=)
2: 5728551C6E9611EF8FEC9C1BC4F9AE02.roa (hash: utIpka2m9g7rscMzHbDTXQACJUoOh2JMTGT7Uylt93Q=)
3: 14820EDE248611EEB600357DC4F9AE02.roa (hash: uoxhoDVDIdZeIGpmPVYh0+yT+vTsXXRnS1XpZHEpwfY=)
4: DE61D0DC2A7311F08DDC6D17C4F9AE02.roa (hash: wnP6JYClG7n+PNc2XDZbazMvuyyzMgyJZ4q4a/lxzfM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11597 (0x2d4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921
Validity
Not Before: Dec 6 15:19:12 2025 GMT
Not After : Dec 13 15:19:12 2025 GMT
Subject: CN=69344970-f040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:aa:14:75:4e:0d:3c:49:00:56:73:4f:ca:
46:4d:3f:24:56:67:65:34:9b:c7:e2:de:4c:97:d7:
bd:84:90:58:64:5b:c0:88:a9:a1:eb:0f:79:ec:f8:
13:dc:61:3d:69:13:22:dc:2b:1c:1e:c0:d2:a9:75:
d4:3a:2a:28:60:f1:0d:2c:05:44:6b:85:3a:53:0b:
8b:16:e2:b5:b8:6a:6d:2c:ae:85:e0:68:9c:d4:b8:
89:de:19:a3:f1:e8:50:09:16:92:b8:d4:76:f9:07:
6c:23:40:76:3a:63:a2:bd:9c:5f:30:4e:0e:26:3d:
36:f3:fd:4f:74:8e:fd:84:5b:30:0d:5e:38:16:c4:
b4:1b:7b:de:82:80:b4:5b:e2:3f:76:0b:8a:0f:69:
2c:53:77:64:31:bb:ed:9e:8f:71:46:28:31:c1:b2:
27:19:fc:bc:34:1d:6d:1c:e8:9a:99:d3:a7:fb:99:
8c:44:5d:6d:df:c0:c7:5a:24:5d:1f:cd:a4:a3:20:
fe:a2:e4:b7:bf:1c:d2:8f:25:14:18:c6:a4:a2:7d:
f9:fb:2d:c6:bb:5e:f4:d0:74:e7:cc:a1:df:03:a7:
5f:f8:4f:09:68:c2:8f:95:5e:1e:b7:86:52:5d:84:
98:ce:b2:94:34:e8:8c:4d:dd:ee:66:44:67:a9:31:
eb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:84:01:48:29:DC:BA:05:A6:DA:90:0B:0A:7C:6F:BA:6E:1B:D4:44
X509v3 Authority Key Identifier:
keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:6b:74:cc:86:70:9b:93:cf:b0:2d:c8:03:95:f3:28:e3:8b:
b8:89:4e:f6:07:ea:0d:a9:0a:b5:ac:82:74:18:a5:24:7f:97:
9f:c1:45:b5:21:4d:c8:14:35:5a:b8:9a:25:42:12:ba:eb:e1:
8f:16:54:e0:1c:d7:82:3d:f3:41:b2:54:62:b0:b3:27:49:c8:
cc:42:36:09:16:b8:79:bd:9b:53:a5:c2:b4:8c:d9:7e:f3:29:
1b:bf:51:26:4a:be:ef:60:4f:49:42:1c:63:5c:89:3f:39:61:
6b:f9:95:24:8d:24:8f:5b:9f:90:4f:cd:b2:ff:14:87:14:70:
39:ce:93:fd:ee:08:9f:21:a6:e1:47:fa:4e:7c:7f:61:b6:a6:
a2:25:f6:3a:05:8f:01:f9:95:e6:37:4a:77:90:22:01:36:c7:
e2:0c:a5:79:6b:12:e4:2b:a4:5a:90:fe:14:3e:c5:c0:97:af:
49:1f:82:84:91:39:db:ea:e3:73:7c:a2:da:4e:c8:68:17:6d:
bf:23:68:cd:98:2d:46:a4:1c:df:09:6c:52:c8:b9:7e:67:22:
61:f8:9f:39:9e:32:0c:34:15:17:2d:f2:71:ce:9b:55:cd:13:
a8:02:30:bf:d2:01:2c:d5:1b:4f:4c:47:9e:c3:35:ba:3e:6e:
df:94:10:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:15:46 2025 by rpki-client