This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
File: M3tFD93J_HAiHaXKCXhYhbHRt8w.mft (raw, json)
Hash identifier: D3fhARV+ESotCK4e0P7q+ECxGkiSiG8q/2ETlZK704o=
Subject key identifier: 7C:49:53:F5:E9:2E:9A:A2:DB:BD:3E:1D:59:5A:84:2A:63:96:0B:C5
Authority key identifier: 33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
Certificate issuer: /CN=A912981B/serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
Certificate serial: 0166
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
Manifest number: 015A
Signing time: Wed 03 Dec 2025 02:41:56 +0000
Manifest this update: Wed 03 Dec 2025 02:41:55 +0000
Manifest next update: Wed 10 Dec 2025 02:41:55 +0000
Files and hashes: 1: M3tFD93J_HAiHaXKCXhYhbHRt8w.crl (hash: Nr+qLUPBqX6riL2a2Kk70jevgpevQfUTTLUwZ65FQMg=)
2: 9DD56C2A3FD311F08A76B677C4F9AE02.roa (hash: EhoFh5hj1fnJIAYm7dVoqkfeol8zF4Op7mwB2iCWpG0=)
3: 9D107CE43FD311F08A76B677C4F9AE02.roa (hash: M4xxwp5XL8JXkQpTNZQamOx/rEaiqoV0xB/oQh2Nk2Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl
rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 02:41:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912981B, serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
Validity
Not Before: Dec 3 02:41:55 2025 GMT
Not After : Dec 10 02:41:55 2025 GMT
Subject: CN=692fa374-aba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:e1:c8:36:63:44:fd:1b:1f:c4:39:b6:fe:
9f:53:42:fa:cf:8a:d4:0d:7e:95:e4:99:66:8a:5e:
ba:43:02:8c:3a:f2:92:30:9b:c3:64:30:7f:f7:fd:
0c:28:4b:35:c0:b5:17:19:e1:3f:c3:bb:d8:5f:ba:
f1:87:78:6e:f9:c9:7e:cc:73:d6:81:c8:88:1a:92:
40:bf:a6:c2:18:a0:1d:d8:99:3c:39:58:e8:fa:ac:
27:ce:e1:7d:0e:b1:8f:c3:84:61:e4:0d:2d:98:a7:
26:a9:67:df:2d:e4:c6:74:dc:9a:26:f9:30:62:72:
68:77:79:a0:68:6c:12:23:e4:0c:2d:69:9f:18:38:
5d:4b:4d:85:68:4c:bd:ce:41:28:85:08:d1:70:48:
55:d0:fe:b2:af:82:6c:4d:cc:85:44:b6:83:3a:21:
15:a3:03:e3:7f:bc:9a:ab:9f:c5:fe:ec:d3:19:73:
d3:c6:ed:bb:51:d3:89:ec:30:78:25:6e:02:0b:f6:
ce:fa:3a:25:97:80:d2:6e:4a:f6:6b:8a:12:b8:45:
99:a1:4a:ce:d4:7c:8b:fa:48:8d:fd:94:62:b8:52:
97:2f:8d:a6:bd:c0:f6:30:36:88:61:59:55:76:80:
be:53:37:8e:64:b2:4e:6b:ea:83:c1:b5:b2:74:40:
06:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:49:53:F5:E9:2E:9A:A2:DB:BD:3E:1D:59:5A:84:2A:63:96:0B:C5
X509v3 Authority Key Identifier:
keyid:33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:03:fe:ae:87:c1:ca:b7:f7:96:ea:eb:04:39:14:c5:87:04:
ed:13:47:ff:90:94:b0:36:43:37:a0:39:cd:16:9c:eb:78:00:
61:b5:1a:d8:65:1c:b7:13:d2:a1:ed:5d:8f:d6:d0:08:20:19:
89:77:25:72:a9:f3:b2:92:99:3b:6a:eb:16:79:d0:2d:f6:09:
bd:32:07:66:71:64:df:72:98:98:9b:12:77:8f:10:ea:96:3e:
c0:ed:f4:12:4d:3e:78:86:bf:fc:ad:cb:39:3d:c7:7f:c3:30:
b2:f1:77:29:48:34:04:99:c3:0d:60:a8:2f:23:31:a2:fa:fc:
d0:b1:f0:bb:65:59:b2:64:04:60:8a:0f:60:5d:0e:6e:c8:bc:
b3:25:14:14:9a:20:92:90:4d:e9:4c:5f:ba:92:22:9a:fa:13:
8f:9f:dc:44:93:97:32:f0:aa:ef:d1:f4:2d:04:c0:c4:5c:e2:
19:80:8b:22:b2:a8:74:d1:7d:48:14:9c:f5:bf:7b:7d:ad:a0:
17:43:76:32:39:82:4a:03:9b:fe:9b:29:91:25:d1:fe:11:ec:
85:3c:5f:7b:06:74:4e:f6:70:89:cf:1f:e1:e5:6d:4f:95:1e:
b1:ce:9a:df:6e:ad:e6:75:2b:5c:44:b6:f0:35:10:ad:60:58:
f4:f0:e4:06
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk4MUIxMTAvBgNVBAUTKDMzN0I0NTBGRERDOUZDNzAyMjFEQTVDQTA5Nzg1ODg1
QjFEMUI3Q0MwHhcNMjUxMjAzMDI0MTU1WhcNMjUxMjEwMDI0MTU1WjAYMRYwFAYD
VQQDEw02OTJmYTM3NC1hYmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuPLhyDZjRP0bH8Q5tv6fU0L6z4rUDX6V5Jlmil66QwKMOvKSMJvDZDB/9/0M
KEs1wLUXGeE/w7vYX7rxh3hu+cl+zHPWgciIGpJAv6bCGKAd2Jk8OVjo+qwnzuF9
DrGPw4Rh5A0tmKcmqWffLeTGdNyaJvkwYnJod3mgaGwSI+QMLWmfGDhdS02FaEy9
zkEohQjRcEhV0P6yr4JsTcyFRLaDOiEVowPjf7yaq5/F/uzTGXPTxu27UdOJ7DB4
JW4CC/bO+joll4DSbkr2a4oSuEWZoUrO1HyL+kiN/ZRiuFKXL42mvcD2MDaIYVlV
doC+UzeOZLJOa+qDwbWydEAGDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxJU/Xp
Lpqi270+HVlahCpjlgvFMB8GA1UdIwQYMBaAFDN7RQ/dyfxwIh2lygl4WIWx0bfM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTgxQi9CQzVDRUFCNkNB
OEExMUVFQjA1NkU2MUZDNEY5QUUwMi9NM3RGRDkzSl9IQWlIYVhLQ1hoWWhiSFJ0
OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL00zdEZEOTNKX0hBaUhhWEtDWGhZaGJIUnQ4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTgxQi9CQzVDRUFCNkNBOEExMUVFQjA1NkU2MUZDNEY5QUUwMi9NM3RGRDkzSl9I
QWlIYVhLQ1hoWWhiSFJ0OHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAhA/6uh8HKt/eW6usEORTFhwTtE0f/kJSwNkM3oDnNFpzreABhtRrY
ZRy3E9Kh7V2P1tAIIBmJdyVyqfOykpk7ausWedAt9gm9MgdmcWTfcpiYmxJ3jxDq
lj7A7fQSTT54hr/8rcs5Pcd/wzCy8XcpSDQEmcMNYKgvIzGi+vzQsfC7ZVmyZARg
ig9gXQ5uyLyzJRQUmiCSkE3pTF+6kiKa+hOPn9xEk5cy8Krv0fQtBMDEXOIZgIsi
sqh00X1IFJz1v3t9raAXQ3YyOYJKA5v+mymRJdH+EeyFPF97BnRO9nCJzx/h5W1P
lR6xzprfbq3mdStcRLbwNRCtYFj08OQG
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:56:39 2025 by rpki-client