This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
File: PqQ0fS2f1utqAbROVXH4iwiswls.mft (raw, json)
Hash identifier: 14r5KAqSbiyvBDY4aoNIFzcUEEOHih600QaXvtlQwSM=
Subject key identifier: 3F:00:F7:B6:73:48:2C:27:3B:62:82:74:A3:EC:12:5B:E6:3F:51:81
Authority key identifier: 3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B
Certificate issuer: /CN=A917BB51/serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
Certificate serial: 0168
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
Manifest number: 015F
Signing time: Sun 07 Dec 2025 02:30:51 +0000
Manifest this update: Sun 07 Dec 2025 02:30:50 +0000
Manifest next update: Sun 14 Dec 2025 02:30:50 +0000
Files and hashes: 1: PqQ0fS2f1utqAbROVXH4iwiswls.crl (hash: CWfsqHoYhJqKyUsFHo/0FXySDuqi72w6cxKg0OyBuz4=)
2: A9C5C1CAC4B811EE8A03D547C4F9AE02.roa (hash: idAFhUmAkJaKGqP8j1ITDESnMkqFyJap6af21HGHAgQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl
rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB51, serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
Validity
Not Before: Dec 7 02:30:50 2025 GMT
Not After : Dec 14 02:30:50 2025 GMT
Subject: CN=6934e6db-0453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:02:8b:14:41:ce:63:ae:0a:36:cb:42:23:
75:b2:97:93:bd:04:c7:78:5e:8c:3d:b3:39:19:7e:
f0:d1:c0:d9:84:e4:8f:20:ce:fd:19:ec:49:6a:88:
b8:8d:07:18:df:da:dd:cb:4e:37:df:62:1e:9f:42:
40:6f:dc:59:f3:d9:3f:23:f0:28:cc:46:23:d5:9f:
8d:2d:78:9f:5f:84:bb:c5:fa:33:b8:27:41:d5:30:
d1:f2:4f:52:6f:0a:5a:0c:b9:2f:ee:59:23:cb:7f:
a4:a1:7d:66:d2:a3:9e:fa:73:44:72:be:49:15:03:
21:05:3d:43:51:46:9d:46:3c:a2:db:62:ec:02:b2:
3c:c0:92:72:31:3a:7c:65:76:97:1b:47:78:82:59:
2d:3a:cf:83:83:3c:3c:73:06:53:3c:06:88:aa:c2:
70:44:43:90:4a:14:5a:dd:e6:30:e3:27:c4:1b:1a:
fa:75:6e:1e:bb:79:96:0b:cd:c1:47:6a:a3:2a:3c:
4a:cd:f7:d2:05:06:44:6e:1d:d5:74:a0:a2:fd:93:
b5:f2:86:a4:db:92:0b:e3:5f:42:22:37:17:fd:8e:
04:52:97:19:65:a8:d0:c8:ef:85:07:f4:c9:75:a5:
94:9e:5e:d3:4e:be:c4:12:2a:85:59:e9:88:80:d5:
ea:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:00:F7:B6:73:48:2C:27:3B:62:82:74:A3:EC:12:5B:E6:3F:51:81
X509v3 Authority Key Identifier:
keyid:3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
f5:75:94:a7:1b:5f:e2:09:e8:a3:2f:2f:7d:18:86:54:77:53:
ef:9a:47:3c:79:ef:00:c2:44:cb:6f:a8:d7:f6:04:3f:22:1b:
44:0f:34:e6:97:a0:8b:4b:08:73:b5:2b:2c:ee:11:34:4f:77:
c2:c6:f5:35:c4:88:a2:68:01:2d:70:a3:63:39:1f:f1:ed:e0:
0f:5b:4b:d6:37:02:52:23:50:3a:70:08:86:37:91:89:d1:eb:
b2:43:8f:4b:5d:d0:be:50:d0:f0:4e:c6:4b:41:56:c7:1c:9b:
07:d1:7b:eb:52:da:48:39:b7:ba:15:a4:29:86:a5:5e:11:4a:
39:a9:fe:68:35:93:6c:13:75:f6:a6:51:db:52:cf:aa:34:e2:
01:79:2b:de:c2:31:5a:bb:69:b3:34:e6:b5:2d:4c:1a:bc:04:
40:b2:16:7d:fe:60:95:70:ce:f7:15:4b:d5:4d:06:90:ce:45:
2a:33:2b:74:19:79:9c:ae:91:e3:0a:fb:46:a5:3f:bc:65:93:
87:0a:97:c5:80:47:5c:eb:95:78:1b:16:24:b8:7a:d4:31:06:
ab:01:4e:1c:7a:ad:fc:7c:f7:b3:6a:3c:56:43:5f:c4:0a:f3:
e7:9d:30:cd:ee:26:17:a4:0e:60:65:09:a1:0a:b6:5b:ec:f3:
fa:07:83:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:02:19 2025 by rpki-client