This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
File: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft (raw, json)
Hash identifier: JMOUBHCGz3GGkyhTIOgOSICgvJx5kjLZ57INqT/l764=
Subject key identifier: 56:2F:27:84:73:85:D9:85:34:93:55:72:A7:E4:7C:70:07:40:8D:C2
Authority key identifier: DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6
Certificate issuer: /CN=A91F716F/serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6
Certificate serial: 01D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
Manifest number: 01CB
Signing time: Sun 07 Dec 2025 01:26:08 +0000
Manifest this update: Sun 07 Dec 2025 01:26:08 +0000
Manifest next update: Sun 14 Dec 2025 01:26:08 +0000
Files and hashes: 1: 3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl (hash: IFitC7+8ITaQNneVaG9EpMW4VhfmHf5Bn79eSqwtFFw=)
2: 6F882FB01D5211EE94C36C2FC4F9AE02.roa (hash: HYndX1hAZ5qMkJtz/BumiLhkqJaaPEm/ej37V7+JGfk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl
rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 01:26:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F716F, serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6
Validity
Not Before: Dec 7 01:26:08 2025 GMT
Not After : Dec 14 01:26:08 2025 GMT
Subject: CN=6934d7b0-e44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:14:51:e6:fe:d0:36:b2:18:2b:08:1c:2c:4e:
26:89:f2:d4:c5:11:a6:73:a2:48:dd:cc:70:ee:5e:
86:d5:87:b3:25:14:14:04:61:86:b0:5e:37:b4:c9:
a1:0e:4e:c8:ee:51:e4:85:b5:3b:a0:87:07:77:ca:
63:ba:f0:47:b7:66:42:35:c6:f0:60:1e:28:8c:a1:
b4:7e:8d:e1:c7:c5:86:58:a4:29:d7:20:f1:84:87:
cf:a5:ff:ee:33:de:fe:fa:3a:06:c6:be:de:8e:8e:
0b:a2:29:99:bb:2c:11:69:00:f4:23:2c:0e:2b:2c:
66:5e:a4:24:e0:c8:59:c9:36:8d:43:a9:e5:45:52:
4e:34:30:1c:31:39:76:32:ee:97:2d:55:73:77:57:
2b:f3:9f:25:53:ab:32:39:53:d0:a4:94:5c:c5:71:
ae:a3:fe:ce:6a:7d:03:89:50:10:8e:36:22:e1:76:
68:e8:43:e6:58:2c:05:f3:d3:80:5f:dd:6a:1d:7a:
81:97:be:e1:68:4e:ad:13:1d:3f:58:23:ad:98:cb:
1c:a7:9d:f1:14:c5:40:dc:2c:a5:9a:2f:31:75:8c:
fb:9b:68:35:37:06:a5:db:0b:0f:e8:bb:ab:d1:b6:
66:1f:63:ee:cb:af:34:d8:85:2f:22:c8:09:6f:33:
cc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2F:27:84:73:85:D9:85:34:93:55:72:A7:E4:7C:70:07:40:8D:C2
X509v3 Authority Key Identifier:
keyid:DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:ac:8d:7b:1b:10:86:2d:1a:0f:9d:b2:55:80:46:1b:77:10:
a4:c5:1f:27:fd:bf:5e:34:4f:88:e4:05:f2:c3:cb:17:76:09:
fd:62:c1:7e:d2:2c:73:b5:51:5b:52:c0:60:ec:f0:b5:cc:d2:
d1:34:9f:d2:ea:2e:e1:fc:f6:6e:18:5b:a4:52:2a:fe:29:b8:
dd:e6:69:f9:51:5e:08:45:55:10:a1:a5:cb:14:94:35:b9:62:
1d:9e:eb:f1:df:1b:3d:08:d4:b4:a2:ef:49:a1:79:c0:9c:30:
d9:fe:48:74:54:1c:39:84:b0:30:87:76:74:bc:c8:ad:e2:7a:
0f:a4:36:a1:48:9b:24:ca:09:32:b4:2d:26:fc:9b:cb:08:b3:
f5:1a:74:7c:c5:62:a3:a2:24:be:0c:38:f4:ed:25:77:ab:51:
15:22:33:98:5e:98:e2:9e:9b:74:5b:a0:08:43:01:3c:6b:c4:
0d:78:bb:85:70:ad:20:ca:aa:1f:7b:a2:36:bb:6d:0b:56:a0:
de:71:10:4a:6f:e2:0b:62:f3:ff:da:18:24:7f:e9:8c:84:a6:
ba:48:5c:be:85:33:d8:12:5f:9b:7f:3b:98:58:9e:3b:87:73:
77:8b:81:8d:ab:1b:b0:51:3c:a7:1e:e5:46:b0:dd:49:c1:09:
4a:c8:cb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:52:06 2025 by rpki-client