This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
File: 3HxGdMlvt2fql8B49oDvV07eu78.mft (raw, json)
Hash identifier: 4jWoTjrwcZIx5ccDgP4K2emZ80C1N1iyGB27HThQJOU=
Subject key identifier: DB:BD:53:32:00:B2:69:72:A3:E8:3B:1B:93:D9:80:BB:E2:E8:96:07
Authority key identifier: DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF
Certificate issuer: /CN=A917CD31/serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF
Certificate serial: 06D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
Manifest number: 06CD
Signing time: Mon 22 Dec 2025 21:23:18 +0000
Manifest this update: Mon 22 Dec 2025 21:23:17 +0000
Manifest next update: Mon 29 Dec 2025 21:23:17 +0000
Files and hashes: 1: 3HxGdMlvt2fql8B49oDvV07eu78.crl (hash: l29zCm40mJu75385muuWNcYlUCyo2BRF1NaUAx+oIpA=)
2: A88A17FA823C11EBB35EF50FC4F9AE02.roa (hash: w4Og6ZXZfhcGLwCGrYKzyuX9/ySsrXuevHVn0ggUgdE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl
rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1749 (0x6d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CD31, serialNumber=DC7C4674C96FB767EA97C078F680EF574EDEBBBF
Validity
Not Before: Dec 22 21:23:17 2025 GMT
Not After : Dec 29 21:23:17 2025 GMT
Subject: CN=6949b6c6-52a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:3b:fa:9a:f7:ac:ec:91:b2:9f:f5:69:aa:
02:d7:63:5d:1f:c9:82:aa:ee:bb:b6:1f:ad:c6:02:
48:e4:86:db:da:75:d3:96:b5:20:78:5b:1c:14:17:
9d:1d:3c:b1:18:02:f8:e3:5e:10:7b:e1:eb:d3:32:
b8:0a:b7:7f:cd:73:ec:87:88:b9:cd:6f:d4:5e:1f:
d6:af:5b:c4:09:a7:f2:3b:ed:ae:0b:86:4d:5f:0d:
0b:1c:6f:f9:81:98:54:8f:c0:f3:9c:15:ae:b8:71:
ba:06:26:8d:cb:dd:32:6d:0f:86:21:d6:d2:db:34:
42:86:fb:f1:1b:83:c0:34:30:05:c3:ad:e2:f5:b9:
70:17:49:e6:e0:4c:af:55:43:ff:28:9f:70:69:c0:
bf:04:71:38:5b:d4:05:07:f2:85:82:74:8a:a4:e5:
83:77:fe:70:14:77:ae:a2:a0:04:55:c4:d7:a3:dc:
ed:24:60:09:e8:3d:31:e5:bf:8a:42:21:0c:bf:e3:
0a:a2:d1:30:c2:3b:8c:60:c1:b2:00:d0:b5:a2:0a:
2d:2e:6e:59:0e:8f:26:ed:b8:18:0f:a1:b8:06:87:
22:64:1c:19:22:9e:91:5a:ae:a9:2b:15:4f:79:88:
45:e2:a9:ed:22:3b:a3:ab:28:27:84:b3:97:36:09:
d5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BD:53:32:00:B2:69:72:A3:E8:3B:1B:93:D9:80:BB:E2:E8:96:07
X509v3 Authority Key Identifier:
keyid:DC:7C:46:74:C9:6F:B7:67:EA:97:C0:78:F6:80:EF:57:4E:DE:BB:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HxGdMlvt2fql8B49oDvV07eu78.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CD31/75F57B10823A11EB8AE2360AC4F9AE02/3HxGdMlvt2fql8B49oDvV07eu78.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:31:ef:ef:52:f8:b2:f1:fe:1a:59:ba:e3:9d:ac:f6:87:cc:
17:e1:9f:db:eb:81:65:3b:4b:ee:eb:56:5a:f7:fe:97:32:07:
9d:93:ae:6f:a3:1b:52:c0:12:ba:ee:7e:01:a0:d2:6b:1e:c7:
e2:8e:19:0f:5f:38:f5:2e:93:87:af:c8:1d:25:1f:91:b8:e6:
40:01:fa:3e:14:5d:49:be:ff:21:ed:a0:6e:d3:c8:e1:42:eb:
44:29:5e:f1:ed:74:19:16:59:dd:7c:5a:4b:f3:6c:28:48:c1:
e4:86:ea:b5:a7:e6:3e:ce:7f:f8:5f:4c:f8:2d:39:d3:a1:09:
f1:a6:8e:fc:c0:cf:bf:9c:92:6b:95:e7:09:8b:8d:e6:10:50:
c8:a9:a7:10:90:32:29:05:6d:62:a4:fb:5e:c4:bc:61:01:2b:
e4:af:5d:33:ba:60:39:71:9a:30:11:ef:30:cb:11:4f:03:e3:
04:49:a6:64:d0:6e:3c:66:69:bf:c9:11:88:38:8e:8d:11:7a:
d0:26:3f:8c:6b:24:0d:10:8f:67:77:6d:c5:a3:95:a1:9b:56:
b2:46:bf:6d:f6:f9:ed:c0:5a:82:df:2c:99:24:17:ab:a3:a3:
6a:eb:dc:3d:ce:a6:7b:59:bb:40:69:3b:a7:75:89:92:eb:38:
9c:cb:ab:41
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0NEMzExMTAvBgNVBAUTKERDN0M0Njc0Qzk2RkI3NjdFQTk3QzA3OEY2ODBFRjU3
NEVERUJCQkYwHhcNMjUxMjIyMjEyMzE3WhcNMjUxMjI5MjEyMzE3WjAYMRYwFAYD
VQQDDA02OTQ5YjZjNi01MmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsDI7+pr3rOyRsp/1aaoC12NdH8mCqu67th+txgJI5Ibb2nXTlrUgeFscFBed
HTyxGAL4414Qe+Hr0zK4Crd/zXPsh4i5zW/UXh/Wr1vECafyO+2uC4ZNXw0LHG/5
gZhUj8DznBWuuHG6BiaNy90ybQ+GIdbS2zRChvvxG4PANDAFw63i9blwF0nm4Eyv
VUP/KJ9wacC/BHE4W9QFB/KFgnSKpOWDd/5wFHeuoqAEVcTXo9ztJGAJ6D0x5b+K
QiEMv+MKotEwwjuMYMGyANC1ogotLm5ZDo8m7bgYD6G4BociZBwZIp6RWq6pKxVP
eYhF4qntIjujqygnhLOXNgnVDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNu9UzIA
smlyo+g7G5PZgLvi6JYHMB8GA1UdIwQYMBaAFNx8RnTJb7dn6pfAePaA71dO3ru/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0QzMS83NUY1N0IxMDgy
M0ExMUVCOEFFMjM2MEFDNEY5QUUwMi8zSHhHZE1sdnQyZnFsOEI0OW9EdlYwN2V1
NzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNIeEdkTWx2dDJmcWw4QjQ5b0R2VjA3ZXU3OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Q0QzMS83NUY1N0IxMDgyM0ExMUVCOEFFMjM2MEFDNEY5QUUwMi8zSHhHZE1sdnQy
ZnFsOEI0OW9EdlYwN2V1NzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBbMe/vUviy8f4aWbrjnaz2h8wX4Z/b64FlO0vu61Za9/6XMgedk65v
oxtSwBK67n4BoNJrHsfijhkPXzj1LpOHr8gdJR+RuOZAAfo+FF1Jvv8h7aBu08jh
QutEKV7x7XQZFlndfFpL82woSMHkhuq1p+Y+zn/4X0z4LTnToQnxpo78wM+/nJJr
lecJi43mEFDIqacQkDIpBW1ipPtexLxhASvkr10zumA5cZowEe8wyxFPA+MESaZk
0G48Zmm/yRGIOI6NEXrQJj+MayQNEI9nd23Fo5Whm1ayRr9t9vntwFqC3yyZJBer
o6Nq69w9zqZ7WbtAaTundYmS6zicy6tB
-----END CERTIFICATE-----
Generated at Tue Dec 23 14:35:04 2025 by rpki-client