This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
File: M3je4rOhqNPtGvTkXiJdAJnPcBE.mft (raw, json)
Hash identifier: lrWZXkY2mFwpHKejbbu3+3EKb70tpLOJc10D5EDFztE=
Subject key identifier: FB:82:06:BE:10:A7:BE:6F:B0:04:65:5E:6A:15:B3:2D:1D:84:D2:5E
Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Certificate serial: 047C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
Manifest number: 0464
Signing time: Mon 22 Dec 2025 23:15:08 +0000
Manifest this update: Mon 22 Dec 2025 23:15:08 +0000
Manifest next update: Mon 29 Dec 2025 23:15:08 +0000
Files and hashes: 1: M3je4rOhqNPtGvTkXiJdAJnPcBE.crl (hash: QU9R0LLyZ8pSXzj7KDxu28UJpVsweHPe8ubuiKBdOTM=)
2: 2A3B0AAED84211EDBD609A4DC4F9AE02.roa (hash: YqwmzbTbjnpJlQJ9+wOnubrOXT3PgUZiurP57f5+HVQ=)
3: BBA03BF86DD311F09E550D38C4F9AE02.roa (hash: zLlFP29fbev002DflF+TA3Qjdh6cZ72DZUDF3K/hrT8=)
4: BC58A5C66DD311F09E550D38C4F9AE02.roa (hash: M67wvRNu5yJc0PmvdrXe9QBiktT/1OOEAW8u7AyC62Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl
rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:15:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1148 (0x47c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B556, serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Validity
Not Before: Dec 22 23:15:08 2025 GMT
Not After : Dec 29 23:15:08 2025 GMT
Subject: CN=6949d0fc-3f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:45:f0:1a:20:ea:4a:ba:62:25:e9:1b:24:67:
3a:b9:8b:cf:d9:43:df:e7:25:b7:56:27:bb:5b:6c:
99:da:9f:83:af:0b:55:7f:6a:79:48:1e:2f:73:59:
ce:79:69:37:d5:48:38:23:74:7a:ac:ea:11:61:9e:
b6:9e:79:41:e0:88:f2:e7:85:f5:aa:93:87:fc:35:
d7:0d:9b:47:12:ef:aa:26:31:bc:db:22:05:b2:72:
dd:d4:d1:1e:0c:28:fe:2f:18:a0:78:58:b8:fa:36:
d2:90:29:53:fe:3f:01:85:f8:b7:83:cd:2a:2f:7a:
51:e9:31:bb:c3:dd:dd:39:15:79:7b:b6:0f:3c:4e:
a2:eb:86:c7:83:c4:24:60:e2:f4:4c:30:ef:49:9c:
8d:32:b1:ae:2a:ca:14:0a:59:3f:70:87:f6:b0:84:
a3:ee:b4:27:cb:d8:01:2d:0f:8f:f2:d7:eb:e4:74:
5b:c7:aa:3e:5a:84:67:c3:5f:d1:f4:c0:eb:50:c6:
10:f9:69:0c:b5:e6:03:1f:75:26:3b:e4:9a:40:2d:
b0:3e:09:4c:15:51:31:99:20:bc:01:03:87:44:76:
2b:00:d4:ab:b8:23:64:a6:14:1c:10:dc:0a:6d:36:
2e:45:ec:0d:28:f7:2c:2d:36:ff:cc:bb:9b:cf:5a:
d6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:82:06:BE:10:A7:BE:6F:B0:04:65:5E:6A:15:B3:2D:1D:84:D2:5E
X509v3 Authority Key Identifier:
keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:25:ee:f5:5e:f1:c8:09:f1:af:7f:74:fe:9d:0a:23:fe:c1:
4c:be:ef:b0:40:b8:da:10:30:8c:e2:88:c8:db:59:88:56:c5:
2b:96:32:b4:3f:59:3a:9f:85:71:4e:a4:88:03:b8:2e:ae:1b:
7a:70:56:72:0b:5a:7f:f6:11:5b:3b:ca:64:71:65:9e:e4:b4:
ab:a9:35:34:cd:cd:03:f6:b6:3d:b9:c3:e8:29:c1:35:82:3a:
c1:c3:aa:17:b0:e1:9b:61:cc:97:02:f2:c0:03:d8:86:ca:db:
a2:34:70:25:ae:93:59:fc:dc:f5:60:bc:2e:26:a7:ca:53:55:
e7:9f:c3:93:ef:b5:cc:5c:e9:6f:9f:db:61:fe:bd:29:1e:09:
11:24:75:fe:e0:7e:62:2e:c5:18:fd:f9:4b:6b:03:24:e4:73:
df:06:db:3d:a7:80:94:5a:15:5b:b5:ee:c1:a2:3c:9b:ab:88:
5d:22:bf:17:89:4e:f8:be:67:36:1d:ad:ca:3a:58:b5:f6:40:
65:3e:e7:8c:27:a9:47:d2:28:dc:e5:75:4f:e7:ae:c9:f6:75:
12:a4:bf:f8:2d:8e:77:07:cf:d1:d6:e2:d3:45:8d:cb:e5:74:
87:5a:3c:cd:2f:47:a9:24:a4:46:04:ae:4c:82:f5:4f:12:0c:
d3:ba:4f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 12:59:58 2025 by rpki-client