This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
File: 3MtG6q3c1z9ar64LPwAu2SDA6H4.mft (raw, json)
Hash identifier: d4sfF8VgaAGgefS0f9dc8SJdj1d9X4mhrWh0AgcjVxo=
Subject key identifier: 34:D7:02:E0:76:F2:CA:10:9A:5C:3F:CF:B5:98:36:B5:3D:AD:91:A0
Authority key identifier: DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E
Certificate issuer: /CN=A91F182D/serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E
Certificate serial: 6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
Manifest number: 6A
Signing time: Fri 05 Dec 2025 04:55:52 +0000
Manifest this update: Fri 05 Dec 2025 04:55:51 +0000
Manifest next update: Fri 12 Dec 2025 04:55:51 +0000
Files and hashes: 1: 3MtG6q3c1z9ar64LPwAu2SDA6H4.crl (hash: BK3ru/u98JUjqLeT7QdyvkFnasph5QOX5qB/NwC7GDQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl
rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:55:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F182D, serialNumber=DCCB46EAADDCD73F5AAFAE0B3F002ED920C0E87E
Validity
Not Before: Dec 5 04:55:51 2025 GMT
Not After : Dec 12 04:55:51 2025 GMT
Subject: CN=693265d7-078e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b6:81:da:e4:c1:29:62:36:b6:0b:16:26:4b:
61:78:72:89:fb:fc:1f:2e:5b:67:b7:ed:c1:50:95:
db:43:b8:d4:e4:1e:a4:ac:98:50:02:72:14:36:72:
fa:c6:78:86:2f:18:de:e1:22:c3:fd:f9:47:7a:f3:
90:3a:2c:20:83:d6:4c:b0:41:a2:34:ef:f7:a1:90:
e0:c1:c2:85:2e:ac:18:f2:6d:fe:1c:02:d0:88:87:
4a:10:74:19:aa:3e:14:d6:ae:c5:71:87:04:03:d5:
e2:bd:7f:43:29:2b:72:b7:0d:ac:32:cb:f7:66:60:
9d:f1:1d:17:76:0d:a5:2b:ed:61:af:af:78:80:cc:
e3:4d:1e:b0:33:5a:64:33:3c:9a:03:e0:e5:07:d6:
0f:1c:6a:34:7c:29:ff:db:ca:b3:a0:74:a1:cc:f1:
9f:de:cb:f3:e5:da:64:f4:6a:09:a0:5a:57:84:5f:
d6:70:44:11:cf:40:18:16:6b:fb:ba:57:5f:c7:38:
ec:4f:07:eb:1f:ad:b2:ba:5d:25:0e:d4:10:c2:fb:
7a:37:33:47:2b:3b:c0:df:ff:68:5f:95:29:41:89:
72:0a:ee:52:7c:4f:69:64:32:61:af:2f:df:ba:cc:
e2:8a:12:b6:35:6d:a4:a0:03:0e:8a:1d:ad:22:69:
93:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D7:02:E0:76:F2:CA:10:9A:5C:3F:CF:B5:98:36:B5:3D:AD:91:A0
X509v3 Authority Key Identifier:
keyid:DC:CB:46:EA:AD:DC:D7:3F:5A:AF:AE:0B:3F:00:2E:D9:20:C0:E8:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MtG6q3c1z9ar64LPwAu2SDA6H4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F182D/407448BA3B8411F090C39565C4F9AE02/3MtG6q3c1z9ar64LPwAu2SDA6H4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:99:6b:88:31:ad:db:46:5b:9a:0e:fd:6c:5d:af:96:f9:00:
76:9f:44:6c:82:e5:35:a7:ba:99:54:71:ca:36:e1:ce:c9:0d:
0b:12:3e:ea:93:d5:50:0e:d7:83:80:79:aa:c2:a2:28:a4:f7:
d0:94:ab:28:fa:f2:d5:79:59:59:d1:d0:8a:ef:f1:5b:df:db:
4e:c9:e0:e3:98:65:31:a0:6e:31:a5:2c:75:fd:3a:b1:08:62:
0a:50:80:46:9f:7f:2d:7c:da:ce:a7:a2:8a:db:75:7a:6e:9d:
2b:81:0e:d1:4a:ec:13:6f:36:bc:37:25:ac:b0:c8:45:80:d4:
6e:8f:7b:79:b9:84:53:c1:76:47:18:38:fc:02:d5:bd:ab:d0:
b8:ee:cb:f3:79:6f:2f:4d:d2:dc:7a:21:c5:66:52:57:58:34:
67:73:25:02:02:a4:ea:d7:f1:bd:32:6a:91:bf:81:18:ad:92:
bb:09:4a:e7:c0:9b:e0:57:9a:95:fc:83:16:d3:2d:29:2b:ae:
32:12:d2:be:2e:30:d3:44:b3:e9:d5:e2:f6:59:0a:a7:0c:78:
0b:3c:6c:86:7e:f0:dc:4c:0e:4c:4c:bd:7e:89:b2:c4:e9:ed:
40:cd:80:42:9b:d7:c6:10:e7:59:bd:9f:b4:a5:d0:c6:e8:5f:
83:bb:79:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:29:51 2025 by rpki-client