This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
File: e3T7MiZmknZU8foeyLcJwwU1UOM.mft (raw, json)
Hash identifier: zY2lNTXsqS77kO473mzywjEU8+ljWQYmTeNBrrrcMlw=
Subject key identifier: 8F:AA:3E:65:F5:FD:F6:4F:59:7C:59:B1:35:D1:B7:03:24:B0:C9:D3
Authority key identifier: 7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3
Certificate issuer: /CN=A91F1451/serialNumber=7B74FB322666927654F1FA1EC8B709C3053550E3
Certificate serial: 08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
Manifest number: 07
Signing time: Fri 05 Dec 2025 05:57:18 +0000
Manifest this update: Fri 05 Dec 2025 05:57:18 +0000
Manifest next update: Fri 12 Dec 2025 05:57:18 +0000
Files and hashes: 1: e3T7MiZmknZU8foeyLcJwwU1UOM.crl (hash: HDK7XjdTe/lh2nhIPqDw9/gypGbzdlPElXyJ+MIgvzc=)
2: AC465D48D02211F0A5535D5AC4F9AE02.roa (hash: 0Su3Xy3ETeqv2p9otS7nhMUjS14WdCWUwds8sCIua50=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.crl
rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1451, serialNumber=7B74FB322666927654F1FA1EC8B709C3053550E3
Validity
Not Before: Dec 5 05:57:18 2025 GMT
Not After : Dec 12 05:57:18 2025 GMT
Subject: CN=6932743e-60b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:57:fd:bc:0b:5b:78:e5:3d:0c:63:88:ce:e9:
30:9f:d4:ec:48:cd:71:cf:04:09:28:e3:d0:ed:72:
cb:c4:fd:0f:d5:eb:50:82:51:8a:85:5f:3c:3f:91:
72:76:01:fb:ff:d0:43:43:82:c5:b5:e7:19:39:33:
fc:89:10:4c:b6:81:eb:a1:b1:cd:7a:fb:6f:95:65:
07:f9:bf:62:92:c4:eb:17:dc:2b:f4:24:52:48:23:
a0:30:27:c8:cc:a3:2e:04:33:a9:3c:d4:fd:b1:7e:
16:d2:96:81:dc:23:7d:e1:39:61:68:fc:05:a5:ef:
6d:0e:af:f0:47:4a:27:f4:20:4e:51:cf:05:50:19:
65:24:e1:07:c1:9d:44:c8:dc:c3:35:f8:74:4e:de:
01:9b:9a:d8:f8:7d:eb:e0:1c:c5:3c:60:f6:ff:b5:
86:2b:98:11:53:f3:5a:a9:3a:05:89:96:63:29:db:
45:52:57:b7:dc:9f:1b:62:64:b5:0f:d6:37:66:74:
c7:f3:53:2a:78:b7:50:9e:4d:35:dd:35:ac:a7:03:
74:fb:98:a0:e8:d9:99:d4:cb:f3:ae:8f:e7:85:53:
71:c5:3e:e5:41:b0:b3:9e:9c:a5:0a:ce:d0:db:92:
ec:ca:cf:cd:cb:a8:d4:47:e5:bc:92:39:33:7d:09:
86:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AA:3E:65:F5:FD:F6:4F:59:7C:59:B1:35:D1:B7:03:24:B0:C9:D3
X509v3 Authority Key Identifier:
keyid:7B:74:FB:32:26:66:92:76:54:F1:FA:1E:C8:B7:09:C3:05:35:50:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3T7MiZmknZU8foeyLcJwwU1UOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1451/2E7A1DBACF9F11F088035A0BC4F9AE02/e3T7MiZmknZU8foeyLcJwwU1UOM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:34:bf:d1:a5:71:4f:3e:76:46:5f:97:48:ec:66:5f:04:f3:
9f:4d:cc:cd:1a:45:22:85:ee:ae:68:06:de:2b:0c:ab:4f:6d:
46:6b:3c:ea:e9:3c:20:ec:0e:30:26:da:b0:80:90:5b:6c:df:
7c:3a:23:e3:a3:87:87:61:0a:eb:79:fb:61:dd:db:0b:74:13:
cf:47:94:5c:a5:b5:ae:4c:65:46:6e:13:5c:86:63:ce:52:df:
b8:dc:a2:3f:98:6f:69:03:03:db:62:5d:dd:3f:2c:00:72:d0:
b4:13:5e:61:94:1c:d7:b4:b6:ff:f0:8d:cd:e0:da:f5:1e:2b:
b7:49:a5:41:29:58:c8:c5:65:5c:82:6a:82:bf:47:51:f7:70:
66:e9:4b:00:b3:56:61:10:36:88:86:33:8c:e7:5b:86:ca:69:
a7:67:91:ee:7d:13:0c:ee:b7:14:df:8c:17:93:25:b4:9e:35:
e4:da:a7:e9:85:14:c8:7c:ec:38:3b:6b:df:8d:2a:97:51:ea:
96:7a:8d:b3:d4:1b:28:22:23:48:86:42:7f:1b:a6:3a:69:ce:
a4:81:94:d8:e6:40:3b:50:1e:e6:9d:e4:53:66:c4:49:89:4c:
22:01:4d:fa:d9:7b:eb:a2:10:35:75:84:12:92:51:ff:fe:75:
aa:6f:3f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:05:47 2025 by rpki-client