This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
File: n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft (raw, json)
Hash identifier: 3qaDpuAKQtQBfxIbfjJhNoIahhIE9ei3OwpWtGPyMLY=
Subject key identifier: 45:F3:47:2D:76:86:90:92:41:0A:C5:5D:1F:92:AA:4A:9E:A6:E6:85
Authority key identifier: 9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7
Certificate issuer: /CN=A91F8282/serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7
Certificate serial: 90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
Manifest number: 8E
Signing time: Fri 05 Dec 2025 04:31:24 +0000
Manifest this update: Fri 05 Dec 2025 04:31:24 +0000
Manifest next update: Fri 12 Dec 2025 04:31:24 +0000
Files and hashes: 1: n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl (hash: tMYzdqByvrUhLXpbDbWj8GC6/2xoYBkM9Ev0V1QZEhA=)
2: 05EBB6CEFEF811EFB0C52572C4F9AE02.roa (hash: VbFrpRfV71p262oGg48B23Is9OV+1OR5UpiiECaYQ/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl
rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8282, serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7
Validity
Not Before: Dec 5 04:31:24 2025 GMT
Not After : Dec 12 04:31:24 2025 GMT
Subject: CN=6932601c-89f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:26:b9:cd:19:df:89:af:ac:48:43:c7:31:
f4:ef:11:f4:7a:88:48:c3:c0:7f:a1:9c:63:bc:3e:
1e:f2:54:83:5b:9e:cd:62:a8:84:49:a0:01:1b:43:
15:06:c4:5c:8a:24:f2:a6:a3:91:c0:0c:7b:0f:7d:
ee:43:34:3c:ba:ea:1a:42:3c:db:0f:31:75:e3:5a:
0b:bb:2f:f5:a9:51:bb:db:9a:40:04:7b:2c:e0:aa:
ce:b9:1d:02:62:8e:6d:ec:c1:32:c2:dd:ac:90:e4:
b2:b1:0a:4f:6a:16:8c:ec:ec:bd:0e:f4:70:80:24:
cb:94:3a:a8:b3:e0:8e:99:f8:d1:56:37:76:dd:3c:
f8:3b:9a:b8:68:bc:dd:dd:87:ea:76:15:8d:52:08:
71:a8:c6:5f:29:a6:47:31:78:67:63:c5:8c:28:30:
5f:cd:58:e0:2d:77:c9:a2:3e:98:a5:f4:41:ca:c2:
0d:0f:ce:ae:1f:8c:36:58:e1:a0:75:c1:f4:9c:80:
14:71:a1:4f:dd:5c:7e:24:ec:8f:1c:fe:0e:4c:0f:
49:0c:3d:43:e7:40:c9:a1:11:f7:c4:6a:bf:4c:08:
5c:2c:2d:2b:b6:a0:67:99:0b:01:2e:a2:7f:21:9b:
2f:76:db:00:87:54:f2:2c:f4:31:c1:4e:f2:71:4b:
64:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F3:47:2D:76:86:90:92:41:0A:C5:5D:1F:92:AA:4A:9E:A6:E6:85
X509v3 Authority Key Identifier:
keyid:9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:13:64:a6:2b:86:5c:74:ee:ac:43:84:34:0d:73:64:c8:2a:
43:1b:d7:89:c2:8e:d1:76:ee:45:c2:e7:c6:90:8f:d3:2f:6e:
83:88:4c:00:cf:ff:4a:c3:74:bb:4d:4e:1d:91:f7:c9:0a:74:
14:5d:6d:f7:8a:b9:e2:f3:28:eb:f3:86:41:ae:11:9f:65:69:
44:4e:d2:54:ac:e9:b3:d6:02:14:27:a6:9a:f3:69:62:87:8e:
fe:df:a8:9a:80:ff:a6:e8:e4:2e:ea:04:72:a1:5e:43:e7:fa:
9d:43:0a:83:9a:75:6a:5e:f6:a1:49:f2:8d:69:c3:0a:64:d2:
c1:d9:46:e0:0b:5c:37:83:1c:92:e5:84:b4:f1:17:59:63:39:
a7:59:5a:e9:c8:74:bd:64:26:66:e3:b6:4f:54:e2:06:a3:ed:
ed:00:53:48:f5:be:76:d2:ae:81:ae:64:a4:8b:25:a7:6f:cf:
95:5b:5d:5e:2d:4c:00:02:3f:0e:ff:5c:ad:49:e9:34:c4:c7:
61:81:90:1f:24:bc:d1:01:51:bc:5e:62:2c:24:79:59:fe:5b:
e2:6a:c9:0a:d0:66:83:c6:ab:0c:53:9a:7c:bb:17:91:f9:52:
b6:43:bb:c7:07:d7:45:01:a3:5e:6e:02:77:71:6c:c7:9c:5a:
53:11:e3:7d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgyODIxMTAvBgNVBAUTKDlGN0I0MkVGMThEMzQyRkRENTZBOUZEQzVGM0Q4MDFF
MkQyQzFBQjcwHhcNMjUxMjA1MDQzMTI0WhcNMjUxMjEyMDQzMTI0WjAYMRYwFAYD
VQQDEw02OTMyNjAxYy04OWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvFQmuc0Z34mvrEhDxzH07xH0eohIw8B/oZxjvD4e8lSDW57NYqiESaABG0MV
BsRciiTypqORwAx7D33uQzQ8uuoaQjzbDzF141oLuy/1qVG725pABHss4KrOuR0C
Yo5t7MEywt2skOSysQpPahaM7Oy9DvRwgCTLlDqos+COmfjRVjd23Tz4O5q4aLzd
3YfqdhWNUghxqMZfKaZHMXhnY8WMKDBfzVjgLXfJoj6YpfRBysIND86uH4w2WOGg
dcH0nIAUcaFP3Vx+JOyPHP4OTA9JDD1D50DJoRH3xGq/TAhcLC0rtqBnmQsBLqJ/
IZsvdtsAh1TyLPQxwU7ycUtkrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXzRy12
hpCSQQrFXR+SqkqepuaFMB8GA1UdIwQYMBaAFJ97Qu8Y00L91Wqf3F89gB4tLBq3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODI4Mi8wNjFBQUI1MkZC
RkUxMUVGQjU1MjBBMTJDNEY5QUUwMi9uM3RDN3hqVFF2M1ZhcF9jWHoyQUhpMHNH
cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL24zdEM3eGpUUXYzVmFwX2NYejJBSGkwc0dyYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODI4Mi8wNjFBQUI1MkZCRkUxMUVGQjU1MjBBMTJDNEY5QUUwMi9uM3RDN3hqVFF2
M1ZhcF9jWHoyQUhpMHNHcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBuE2SmK4ZcdO6sQ4Q0DXNkyCpDG9eJwo7Rdu5FwufGkI/TL26DiEwA
z/9Kw3S7TU4dkffJCnQUXW33irni8yjr84ZBrhGfZWlETtJUrOmz1gIUJ6aa82li
h47+36iagP+m6OQu6gRyoV5D5/qdQwqDmnVqXvahSfKNacMKZNLB2UbgC1w3gxyS
5YS08RdZYzmnWVrpyHS9ZCZm47ZPVOIGo+3tAFNI9b520q6BrmSkiyWnb8+VW11e
LUwAAj8O/1ytSek0xMdhgZAfJLzRAVG8XmIsJHlZ/lviaskK0GaDxqsMU5p8uxeR
+VK2Q7vHB9dFAaNebgJ3cWzHnFpTEeN9
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:28:26 2025 by rpki-client