This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
File: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json)
Hash identifier: kObICifZRbSXtWAftqrnaHkAqs1iXUNjehmPIaDVSew=
Subject key identifier: 17:BE:E7:EF:DC:07:1C:44:59:3B:DF:22:B6:52:9B:21:66:02:13:C3
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 3A7AFC331AC728CA852AC290B6B2EC822CF12A8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
Manifest number: 03D5
Signing time: Sun 07 Dec 2025 00:50:19 +0000
Manifest this update: Sun 07 Dec 2025 00:45:19 +0000
Manifest next update: Mon 08 Dec 2025 04:08:19 +0000
Files and hashes: 1: 3130332e3233382e3132382e302f32342d3234203d3e20323133373131.roa (hash: G2Zoq8FyHmareWmxTdUUlZYsXury5Z4QqjB48I3Qp9c=)
2: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: XW5ROJXsHtfkngdlXEUs0YnhnPoR10fb35FCOeUkreg=)
3: 3130332e3233382e3133302e302f32342d3234203d3e2039333034.roa (hash: VxvWKIapnz/NHAaRWVjdN31at45PwCfti5amyZ3Xs/Y=)
4: 34332e3235352e38312e302f32342d3234203d3e20313531393634.roa (hash: 4e0hnp+mBksFQSBkEEMhLS8Zc6XMB5AlAB7ew9DvGO8=)
5: 3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa (hash: 3XBxA+HuJWdSueJFSLvSDWfHwlrm0e9fb9EGVWHwsCU=)
6: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: WENDa7dweWvncAGnN6aqhKdlE2c/ZC6YwUQIQr0XVxA=)
7: 34332e3235352e38322e302f32342d3234203d3e20393834.roa (hash: iePGe9T2LA42zdlsMC0OBhMqCfwBJ5LDY/yEOVKS4Ac=)
8: 34332e3235352e38302e302f32342d3234203d3e20323134373636.roa (hash: R06pByin/m/phSrNQN6fLr1e43axG1JDp2GOwtmPcDQ=)
9: 3130332e3233382e3133312e302f32342d3234203d3e2039333034.roa (hash: xJHD6oJOmKsdm6y2bTs9H7Pd88grt6jIjKGTOKL3muY=)
10: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: bxrme3yCQy0K1fVaXgEiZ2u7es4gexTuZheK4q43s/0=)
11: 3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (hash: rpJIqb75YDR5gHdSyUBQhuto0oiBHBiqa+gpsVl1Cpo=)
12: 34332e3235352e38312e302f32342d3234203d3e203436353539.roa (hash: //UuXn9WtkO4gR2SmefousyCafMw89f9w0hXvN+V6kA=)
13: 3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa (hash: 6TVtRjMo6NdmFhAHDl8M0r+4lRhfrCtY1qBQoykIxG0=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 04:08:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:7a:fc:33:1a:c7:28:ca:85:2a:c2:90:b6:b2:ec:82:2c:f1:2a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Validity
Not Before: Dec 7 00:45:19 2025 GMT
Not After : Dec 8 04:08:19 2025 GMT
Subject: CN=17BEE7EFDC071C44593BDF22B6529B21660213C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:ae:5d:ae:13:21:d7:a4:3c:ff:5b:b0:5c:
b5:7f:3b:de:0e:9c:15:f3:e2:ab:72:c6:f2:12:73:
97:03:17:6d:d1:0f:29:b8:7d:91:68:ee:a1:6a:23:
4c:2f:30:00:61:5b:7b:34:a2:10:42:90:4c:e0:bc:
29:b7:7a:45:12:a3:97:37:43:67:28:59:7b:20:46:
23:d3:96:f7:e6:5b:08:f3:e8:ac:52:5d:f7:30:01:
b5:1a:63:22:ae:3a:8b:bd:b5:67:55:88:d5:98:87:
b9:73:39:aa:b9:cb:99:55:f6:4e:a5:1e:da:fc:fc:
4c:40:1f:bb:f0:80:43:44:f4:e1:62:01:fe:af:e5:
25:81:ff:60:8e:a3:f5:cd:14:27:fa:29:cf:ab:b7:
10:37:1a:a0:73:b5:30:d2:6a:bc:bb:ed:47:0e:4e:
b6:1a:5d:4a:eb:2f:b5:c0:54:99:28:f5:16:f6:4b:
de:11:2a:33:cd:1b:7a:7c:2a:e5:d3:6c:9a:72:f2:
f9:c8:c9:86:59:0a:5c:85:0e:fa:26:cd:07:5c:70:
83:f8:af:56:12:41:2a:2a:6b:7a:f8:14:e9:40:e9:
95:fa:bc:b2:39:be:11:a8:07:fd:35:eb:d4:59:00:
88:27:33:36:be:50:e0:a1:59:fc:b7:50:3c:4c:78:
30:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BE:E7:EF:DC:07:1C:44:59:3B:DF:22:B6:52:9B:21:66:02:13:C3
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:36:99:81:90:d6:28:1b:b0:19:3a:82:35:42:32:05:a7:a8:
87:f5:e2:3e:72:11:22:ae:4f:82:4a:3a:a8:6d:52:cd:16:01:
4c:d6:15:c2:af:fb:01:09:e0:7d:1d:d3:44:28:86:ff:e4:1b:
07:bb:d8:f0:3d:1a:24:1c:61:c6:f8:83:32:61:13:31:7e:98:
4e:60:81:b5:1a:f7:e6:f4:b5:54:c6:74:38:6d:47:0a:55:f0:
dc:c2:20:53:b8:79:77:89:ed:9b:63:3d:d6:07:7f:06:ae:3e:
d6:c9:45:6c:93:8c:50:3c:90:08:bc:76:18:80:65:43:ab:6a:
42:7b:06:de:cf:7f:c7:32:a2:e1:c0:49:a7:ea:8e:8f:db:e8:
ca:cc:40:ce:3a:ed:e5:b5:91:69:3d:41:a1:1d:71:8b:0b:0b:
8b:5e:ff:d6:58:cd:94:41:d0:14:21:05:24:c8:d7:b3:9f:cd:
2b:4e:28:38:50:5e:f7:fb:93:ba:0c:7b:a5:dd:1b:31:2a:47:
36:34:f1:b7:98:c0:65:75:9d:0d:1b:f9:fa:b9:0d:7c:b2:f0:
7a:a0:9e:92:01:2a:39:67:d8:ce:b5:92:5a:fd:f3:2b:2c:3e:
21:6a:30:bd:41:60:4d:ac:3b:62:a7:6a:29:35:a7:bf:6c:44:
83:55:b7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:07:35 2025 by rpki-client