This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
File: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft (raw, json)
Hash identifier: CAyWMnUb4tuhuYcuU7ecZHc1nBCBvIIykWNiuriBtMU=
Subject key identifier: A8:C5:F8:0B:B2:E8:64:40:BB:CE:00:C3:0D:8A:90:B4:BE:CC:8A:A7
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Certificate issuer: /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial: 1736892A410A3731FC9ED68DFB9CE87C3A9549C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
Manifest number: 03D4
Signing time: Sat 06 Dec 2025 07:35:19 +0000
Manifest this update: Sat 06 Dec 2025 07:30:19 +0000
Manifest next update: Sun 07 Dec 2025 08:47:19 +0000
Files and hashes: 1: 34332e3235352e38312e302f32342d3234203d3e203436353539.roa (hash: //UuXn9WtkO4gR2SmefousyCafMw89f9w0hXvN+V6kA=)
2: 72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl (hash: z4cgiTLBFCzuAxlYJ8b4cZYk4csVyCgChVk+HRe6nkc=)
3: 3130332e3233382e3132382e302f32342d3234203d3e20323133373131.roa (hash: G2Zoq8FyHmareWmxTdUUlZYsXury5Z4QqjB48I3Qp9c=)
4: 34332e3235352e38322e302f32342d3234203d3e20393834.roa (hash: iePGe9T2LA42zdlsMC0OBhMqCfwBJ5LDY/yEOVKS4Ac=)
5: 3130332e3233382e3133302e302f32342d3234203d3e2039333034.roa (hash: VxvWKIapnz/NHAaRWVjdN31at45PwCfti5amyZ3Xs/Y=)
6: 34332e3235352e38302e302f32342d3234203d3e20333935373933.roa (hash: XW5ROJXsHtfkngdlXEUs0YnhnPoR10fb35FCOeUkreg=)
7: 34332e3235352e38312e302f32342d3234203d3e20313531393634.roa (hash: 4e0hnp+mBksFQSBkEEMhLS8Zc6XMB5AlAB7ew9DvGO8=)
8: 34332e3235352e38302e302f32342d3234203d3e20323134373636.roa (hash: R06pByin/m/phSrNQN6fLr1e43axG1JDp2GOwtmPcDQ=)
9: 3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa (hash: 6TVtRjMo6NdmFhAHDl8M0r+4lRhfrCtY1qBQoykIxG0=)
10: 3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (hash: rpJIqb75YDR5gHdSyUBQhuto0oiBHBiqa+gpsVl1Cpo=)
11: 3130332e3233382e3133312e302f32342d3234203d3e2039333034.roa (hash: xJHD6oJOmKsdm6y2bTs9H7Pd88grt6jIjKGTOKL3muY=)
12: 34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (hash: bxrme3yCQy0K1fVaXgEiZ2u7es4gexTuZheK4q43s/0=)
13: 3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa (hash: 3XBxA+HuJWdSueJFSLvSDWfHwlrm0e9fb9EGVWHwsCU=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 08:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:36:89:2a:41:0a:37:31:fc:9e:d6:8d:fb:9c:e8:7c:3a:95:49:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Validity
Not Before: Dec 6 07:30:19 2025 GMT
Not After : Dec 7 08:47:19 2025 GMT
Subject: CN=A8C5F80BB2E86440BBCE00C30D8A90B4BECC8AA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:af:5c:71:cc:aa:41:70:d5:3d:b5:41:32:aa:
4f:f4:ae:6a:62:72:ce:6e:a0:00:1d:03:8b:8b:1c:
97:90:04:af:19:40:ee:95:8f:47:90:36:c7:a3:56:
03:7a:d7:41:ab:c9:62:b2:41:e3:7e:12:da:93:58:
cd:9f:e0:11:f1:71:45:40:5f:43:2b:28:40:8c:8d:
8f:fc:cc:bc:49:24:c0:e4:f6:d9:2a:b4:ba:30:4b:
74:f2:6d:f8:35:8b:ee:28:13:ae:ae:a6:70:9b:36:
00:ff:76:a4:48:9b:8f:41:96:d9:cf:59:92:e6:ea:
22:6b:b9:7f:d3:ea:51:d4:ec:80:32:35:7c:00:6b:
6b:b2:af:f6:3d:99:b9:70:ec:f6:a9:83:82:ee:93:
9a:7e:31:2a:10:8a:50:79:60:56:74:4d:f7:d4:45:
8f:9b:03:f2:ac:b4:b9:4f:70:ca:b3:27:e3:db:68:
1d:2e:cb:b4:0a:e0:53:36:92:c0:b2:c0:5c:6b:dd:
a9:64:47:e2:2c:94:1e:83:37:47:8a:8e:96:94:df:
9d:58:8a:a7:17:55:81:70:9a:11:fc:a0:c3:23:ac:
d6:ca:cc:b9:7a:e1:4a:01:60:8d:0e:ab:a0:1e:25:
ce:cd:b0:24:3c:ca:06:0d:4b:e3:8d:a6:8c:49:2e:
50:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C5:F8:0B:B2:E8:64:40:BB:CE:00:C3:0D:8A:90:B4:BE:CC:8A:A7
X509v3 Authority Key Identifier:
keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:42:d2:18:17:50:37:2b:66:18:a5:b5:43:7b:f7:fa:71:0e:
8a:51:1e:63:5a:90:85:2b:96:a0:40:97:4e:ba:1a:c2:71:5d:
91:b3:7e:be:95:8d:b4:52:3f:83:19:ec:57:7c:e9:d8:a8:2b:
2a:4e:55:c8:6e:5e:be:9b:dd:0a:db:52:21:80:27:2c:de:bf:
38:1e:15:bf:89:af:d5:a0:e8:5e:2a:49:9f:ea:06:a7:b8:07:
23:4a:25:67:b2:8f:77:5e:4b:df:ee:29:ea:7b:d4:d0:89:e8:
6f:36:43:48:3b:72:97:ce:ee:3a:3b:44:0e:ac:61:3b:9e:d8:
d9:f6:25:b9:16:4e:83:cd:82:04:a1:4b:48:36:29:8a:67:61:
b7:45:2d:5b:71:9e:3f:d2:87:3d:ce:66:f1:bb:59:b3:cd:d1:
82:e4:01:a0:6b:42:6c:29:28:2e:dc:d5:7e:8b:8c:6a:31:1d:
3c:02:1a:de:3f:ca:76:f2:bd:a9:32:3b:6f:69:72:5a:08:de:
0f:3c:15:f7:04:2d:67:e9:63:27:95:29:78:ec:1b:55:bd:4c:
3d:f4:d1:d4:63:e1:cd:a7:93:31:92:65:b8:c3:84:d7:23:8e:
7b:84:1d:08:a2:64:24:ee:e7:59:c3:b4:d8:f0:c5:b6:ea:1b:
bc:d6:74:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:02:18 2025 by rpki-client