This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft
File: 3oFz59KP6tHsOpLJdljacyhQk-U.mft (raw, json)
Hash identifier: pXuMaDIjKYjdq2Aj33ucWDXHqA0huyMTIi6f8i/SWkE=
Subject key identifier: B6:0B:E5:CC:9C:03:EA:63:9F:1A:2B:46:4A:B9:55:34:2F:08:50:A9
Authority key identifier: DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5
Certificate issuer: /CN=A917C11A/serialNumber=DE8173E7D28FEAD1EC3A92C97658DA73285093E5
Certificate serial: 0733
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft
Manifest number: 072D
Signing time: Mon 22 Dec 2025 21:03:18 +0000
Manifest this update: Mon 22 Dec 2025 21:03:17 +0000
Manifest next update: Mon 29 Dec 2025 21:03:17 +0000
Files and hashes: 1: 3oFz59KP6tHsOpLJdljacyhQk-U.crl (hash: RyWoRJHsFrnIQv4PHVPkiLCSuvkgegUfNR1ejRwPd7c=)
2: 4002E4BA5A3B11EBA4020D68C4F9AE02.roa (hash: owZNdsc75aBAEeMxk8dZOIuYb/+Ukc36obf7oLhTJGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.crl
rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1843 (0x733)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C11A, serialNumber=DE8173E7D28FEAD1EC3A92C97658DA73285093E5
Validity
Not Before: Dec 22 21:03:17 2025 GMT
Not After : Dec 29 21:03:17 2025 GMT
Subject: CN=6949b216-a08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:22:c5:d7:01:15:25:c3:f6:8c:f4:50:d3:05:
d2:87:1f:9a:a0:2d:06:23:8e:56:5b:26:29:90:68:
94:85:5b:6b:88:cd:ab:c7:e9:f4:9d:88:b9:a3:57:
54:87:d1:02:c6:3c:fc:d8:36:d4:61:1f:90:cd:12:
40:e6:61:70:d6:86:63:e4:fc:10:57:51:95:bc:19:
19:fe:f2:d9:f4:ce:54:ca:69:38:f1:ee:11:bc:2f:
3f:65:eb:ae:79:c2:bf:3a:e9:0a:ab:a8:24:27:57:
fd:10:59:0d:bb:c2:3c:e1:ce:67:49:37:68:1e:82:
d0:55:89:b7:aa:ab:84:f1:1f:ba:eb:6c:1b:32:b5:
e7:e6:19:fa:bc:89:9e:b0:13:5d:01:61:1c:7b:0b:
86:86:00:f3:ee:fd:b0:0b:0c:7f:1b:d8:29:ce:f1:
75:c6:ee:79:47:e9:e3:17:cc:f7:a7:8e:97:b2:7a:
42:fa:06:9b:62:86:9e:d0:f5:f8:4d:67:69:e8:18:
8d:c7:71:c0:3e:69:94:a0:84:2e:bf:c1:0c:dd:29:
04:4b:a4:04:ed:40:02:de:df:a5:71:45:39:41:a7:
d3:9c:c9:8d:43:4a:0b:68:85:b8:cb:0e:74:4d:69:
00:1a:f7:d7:c1:ac:20:c1:7c:95:4d:bc:ff:2a:50:
ea:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0B:E5:CC:9C:03:EA:63:9F:1A:2B:46:4A:B9:55:34:2F:08:50:A9
X509v3 Authority Key Identifier:
keyid:DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:ba:b0:df:ee:65:bb:c9:6f:88:e2:dd:c9:eb:fc:de:1d:e2:
78:94:b0:c3:14:f3:78:96:81:a6:59:03:db:cb:4b:a7:90:cf:
c8:56:da:61:fb:f7:1f:a5:ff:83:35:7b:b9:c7:16:2f:b7:01:
24:1d:25:66:32:e1:54:f4:2f:93:7a:86:23:cd:f8:74:ee:33:
be:d2:d3:c9:fd:e3:10:4e:f3:5f:04:47:59:7b:40:c8:a3:23:
82:c3:fc:9e:ba:c5:c0:54:10:54:f6:f7:5b:dd:9f:a7:e7:ac:
68:a5:66:fe:60:e8:a5:0c:ec:de:e3:f4:31:ff:f0:69:a7:54:
e5:86:73:aa:b2:32:5f:6d:40:b3:65:a5:0a:27:00:da:03:8b:
13:85:4e:de:ff:f3:bf:37:f3:a4:25:6e:02:94:16:8e:fc:63:
c1:26:75:1a:fa:d8:e1:92:64:ff:ab:a8:a2:8b:b9:a6:99:48:
e1:ba:4c:e8:74:0e:98:36:2c:ff:47:e5:4c:3a:0a:6e:de:ec:
73:83:3f:bb:0f:a8:6c:fc:9c:88:43:bf:58:47:0a:d9:d2:2c:
ee:3d:7b:34:eb:6d:e6:85:6e:2e:12:9c:cb:ac:e1:f4:3a:44:
14:04:9b:3e:02:62:5e:8a:e4:a3:b0:84:62:c0:cc:6c:17:eb:
eb:c5:22:c3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MxMUExMTAvBgNVBAUTKERFODE3M0U3RDI4RkVBRDFFQzNBOTJDOTc2NThEQTcz
Mjg1MDkzRTUwHhcNMjUxMjIyMjEwMzE3WhcNMjUxMjI5MjEwMzE3WjAYMRYwFAYD
VQQDDA02OTQ5YjIxNi1hMDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1iLF1wEVJcP2jPRQ0wXShx+aoC0GI45WWyYpkGiUhVtriM2rx+n0nYi5o1dU
h9ECxjz82DbUYR+QzRJA5mFw1oZj5PwQV1GVvBkZ/vLZ9M5Uymk48e4RvC8/Zeuu
ecK/OukKq6gkJ1f9EFkNu8I84c5nSTdoHoLQVYm3qquE8R+662wbMrXn5hn6vIme
sBNdAWEcewuGhgDz7v2wCwx/G9gpzvF1xu55R+njF8z3p46XsnpC+gabYoae0PX4
TWdp6BiNx3HAPmmUoIQuv8EM3SkES6QE7UAC3t+lcUU5QafTnMmNQ0oLaIW4yw50
TWkAGvfXwawgwXyVTbz/KlDqCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYL5cyc
A+pjnxorRkq5VTQvCFCpMB8GA1UdIwQYMBaAFN6Bc+fSj+rR7DqSyXZY2nMoUJPl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzExQS9DMDg2RUE5ODVB
MzkxMUVCOEU1OUMyNjZDNEY5QUUwMi8zb0Z6NTlLUDZ0SHNPcExKZGxqYWN5aFFr
LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNvRno1OUtQNnRIc09wTEpkbGphY3loUWstVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzExQS9DMDg2RUE5ODVBMzkxMUVCOEU1OUMyNjZDNEY5QUUwMi8zb0Z6NTlLUDZ0
SHNPcExKZGxqYWN5aFFrLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCVurDf7mW7yW+I4t3J6/zeHeJ4lLDDFPN4loGmWQPby0unkM/IVtph
+/cfpf+DNXu5xxYvtwEkHSVmMuFU9C+TeoYjzfh07jO+0tPJ/eMQTvNfBEdZe0DI
oyOCw/yeusXAVBBU9vdb3Z+n56xopWb+YOilDOze4/Qx//Bpp1TlhnOqsjJfbUCz
ZaUKJwDaA4sThU7e//O/N/OkJW4ClBaO/GPBJnUa+tjhkmT/q6iii7mmmUjhukzo
dA6YNiz/R+VMOgpu3uxzgz+7D6hs/JyIQ79YRwrZ0izuPXs0623mhW4uEpzLrOH0
OkQUBJs+AmJeiuSjsIRiwMxsF+vrxSLD
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:32 2025 by rpki-client