This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft
File: 3fikyb7AEE4WzOMhqWWpLGYURTA.mft (raw, json)
Hash identifier: ekDrEmlvqvegSPjkwBVH1GJm60CbUvCQCul5QVkOm3M=
Subject key identifier: 85:09:44:BC:F0:97:4A:9D:68:87:8B:C4:44:02:FA:FF:97:73:EE:DC
Authority key identifier: DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30
Certificate issuer: /CN=A915518E/serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530
Certificate serial: 0E72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft
Manifest number: 0E67
Signing time: Sat 20 Dec 2025 17:27:04 +0000
Manifest this update: Sat 20 Dec 2025 17:27:03 +0000
Manifest next update: Sat 27 Dec 2025 17:27:03 +0000
Files and hashes: 1: 3fikyb7AEE4WzOMhqWWpLGYURTA.crl (hash: TEOKEL4tM+yYazpu2nZp5eUYw0volOeLzPwXG0RFin0=)
2: 215FAD42B98611E9A053044FC4F9AE02.roa (hash: IvtzH6gyubUymkg5oBnMrp7NOgM18ej68eMn0LMb6vE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl
rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 17:27:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3698 (0xe72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915518E, serialNumber=DDF8A4C9BEC0104E16CCE321A965A92C66144530
Validity
Not Before: Dec 20 17:27:03 2025 GMT
Not After : Dec 27 17:27:03 2025 GMT
Subject: CN=6946dc67-83b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a8:90:57:83:74:27:3e:f4:a6:ac:6f:ca:76:
fd:25:df:34:31:d6:a8:aa:d4:1f:8f:00:a8:52:86:
fa:38:d2:bf:b0:47:94:21:c2:65:2e:33:f0:58:14:
88:c7:95:d8:8f:33:ae:c1:d7:4c:78:42:77:fd:47:
40:2f:4d:60:bb:43:69:0e:78:dd:d0:d6:0e:9c:64:
25:f6:ef:0b:66:c8:c9:5c:9e:13:7f:24:fe:77:b6:
6e:82:98:09:af:42:87:8c:59:d4:85:90:ef:52:02:
40:f7:ba:46:2a:a1:4d:90:47:36:5f:51:bd:5e:5c:
28:05:7d:bb:41:33:2f:25:65:f5:3b:a8:1e:f8:9b:
05:83:b0:e8:b7:2f:84:1d:17:e1:31:ee:a1:e2:7f:
b8:91:a8:90:2d:aa:e2:01:e7:1a:25:26:84:ff:9b:
53:08:ea:cf:41:e8:80:ad:9a:ad:dd:63:d0:8d:09:
d3:04:7f:a6:42:f9:2d:46:d4:c2:7c:2f:29:a9:4f:
37:80:ed:d5:aa:95:12:b1:95:65:f1:b2:41:85:f0:
31:57:0e:37:f7:17:d4:3f:6b:a7:1f:61:c1:53:02:
a8:75:fb:86:9e:ac:99:3e:01:eb:64:9e:bc:d8:44:
af:e5:64:b8:45:cd:30:07:3b:64:80:06:ef:3a:96:
ff:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:09:44:BC:F0:97:4A:9D:68:87:8B:C4:44:02:FA:FF:97:73:EE:DC
X509v3 Authority Key Identifier:
keyid:DD:F8:A4:C9:BE:C0:10:4E:16:CC:E3:21:A9:65:A9:2C:66:14:45:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3fikyb7AEE4WzOMhqWWpLGYURTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915518E/A796E90AAE0211E9B37D8967C4F9AE02/3fikyb7AEE4WzOMhqWWpLGYURTA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:6d:87:0a:34:0d:66:7b:71:79:38:23:8a:47:13:30:65:1a:
46:c3:ef:09:10:20:d2:d0:23:77:01:e8:8a:e4:c1:12:49:5d:
7a:dc:a2:16:85:71:e3:83:fd:48:9d:eb:a4:28:1e:31:e1:2f:
80:60:4e:b9:4c:7e:92:0b:2d:72:5e:e4:1c:ce:74:65:e4:32:
03:57:a6:5d:87:2f:05:2a:49:85:d5:a1:f1:f1:e9:9a:57:57:
b3:b3:ba:6f:d8:f2:e9:26:8f:c7:d2:04:9f:ab:1e:a5:e0:e3:
fa:ac:73:3a:52:86:a8:f6:90:87:e2:52:91:8e:e6:f2:f3:b0:
50:19:e8:c8:00:61:d0:d9:0f:c1:17:30:80:97:d5:75:f1:4d:
2c:70:eb:07:b8:4c:f9:49:8c:b8:2f:e1:a1:49:14:fe:53:c7:
24:3e:8f:13:01:21:cf:57:73:f5:62:a9:97:f6:55:36:6f:5b:
71:0f:80:40:24:e9:09:dc:13:54:fc:49:56:d3:0b:c6:b7:8b:
c6:ed:f4:28:69:40:9c:8e:6b:8e:93:21:fb:38:82:58:40:ea:
0a:24:3d:a7:75:0d:13:65:d2:cd:7a:38:0b:70:54:87:2c:57:
1b:24:db:b4:48:89:1f:90:a5:c3:86:e0:0b:cb:9d:60:e0:b3:
79:80:a2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 03:51:17 2025 by rpki-client