This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
File: 3yS01RxnhB3WAN0qYXhrzpiHhmc.mft (raw, json)
Hash identifier: FfE2VY14l4m5rs5AfaouPcQBt2CKNOjbCZx1y7MIPDU=
Subject key identifier: F9:52:61:70:BF:AF:3C:79:B7:17:06:3E:2A:D5:9A:ED:26:9E:2F:4C
Authority key identifier: DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67
Certificate issuer: /CN=A91813ED/serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
Manifest number: F1
Signing time: Wed 03 Dec 2025 03:41:31 +0000
Manifest this update: Wed 03 Dec 2025 03:41:31 +0000
Manifest next update: Wed 10 Dec 2025 03:41:31 +0000
Files and hashes: 1: 3yS01RxnhB3WAN0qYXhrzpiHhmc.crl (hash: /6OXQVU/CeM/E/xHATtYPdQLh7KB7OSEVBNv28xrmNQ=)
2: B21985725F3711EFA108CA0CC4F9AE02.roa (hash: hjZJ+P+DDZEo0McDoaqGVpFBbzW2XOruqYUk9+Z9bak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl
rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 03:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91813ED, serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667
Validity
Not Before: Dec 3 03:41:31 2025 GMT
Not After : Dec 10 03:41:31 2025 GMT
Subject: CN=692fb16b-3a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b8:8a:3b:14:0a:d9:6d:2c:27:4e:d2:26:84:
00:a7:74:05:c7:1e:8e:b7:76:0f:52:5a:3e:e6:b4:
01:e5:08:e1:b4:64:6b:42:be:6a:a5:0a:0b:fd:27:
12:97:c9:8f:25:69:16:5c:a3:97:d4:c2:57:43:89:
e3:3c:c4:b3:dd:fd:37:a8:b9:b3:ed:3d:92:e3:8d:
e3:e7:be:80:bb:f3:e0:10:a0:fb:ca:39:1f:d9:59:
f4:24:09:76:aa:17:b7:29:5c:af:2d:df:54:fa:03:
83:e2:48:5d:ad:3e:cf:ce:41:3c:a3:30:b2:02:67:
f2:e7:4b:9a:cf:94:60:c1:d6:e6:13:ca:e9:31:0d:
49:92:d1:df:cc:3b:3e:49:54:bf:e1:37:ad:2a:d6:
6e:80:b7:ef:5d:41:5a:50:45:5c:90:08:84:30:fc:
1f:80:1f:2d:d0:23:d2:e0:61:e3:1c:07:8a:6d:89:
62:3c:08:ec:8d:77:86:51:df:2f:4b:27:a0:00:83:
cc:17:36:54:d7:d0:c7:a5:93:58:7f:69:0d:55:61:
7c:aa:86:70:fe:4b:38:10:1e:02:e0:e3:7c:5e:33:
0c:d6:58:83:ed:40:58:de:f9:9c:d4:56:e5:5e:7d:
de:56:b3:85:38:17:43:3c:ec:1e:9b:bc:79:ee:ed:
3d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:52:61:70:BF:AF:3C:79:B7:17:06:3E:2A:D5:9A:ED:26:9E:2F:4C
X509v3 Authority Key Identifier:
keyid:DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:05:18:91:d7:07:2b:88:08:10:4d:96:d0:76:0e:21:f5:29:
6b:c0:39:6b:d5:a6:24:0f:e4:c5:9d:ba:21:d7:5c:90:62:70:
ac:dc:cf:7e:a9:60:78:eb:5f:23:32:b6:2a:81:ef:09:ef:8a:
0e:fc:22:f4:20:2e:7e:6e:f0:e8:09:b1:7b:ce:a8:62:02:c6:
ae:e4:eb:7a:bd:b1:0a:ee:43:fb:c8:f7:e3:93:d7:5a:74:88:
d0:36:f0:82:f8:7a:03:77:61:fb:57:5c:34:59:6c:20:6f:87:
e3:d6:e5:c8:81:b3:84:91:94:e3:87:20:1c:6c:32:65:1b:0a:
a2:5c:92:21:92:92:eb:b0:af:b0:86:7d:02:55:be:6b:f5:0b:
8b:7d:0a:ba:60:f0:82:b1:c6:89:e6:b9:f9:64:c8:d1:91:a6:
c1:d4:b3:9d:ee:b2:d3:79:47:f1:d6:31:da:d6:95:f0:40:77:
22:ab:52:e9:79:46:b4:7f:a5:be:b6:de:7a:5a:e8:8e:dc:36:
f0:b4:5e:ac:1a:92:54:11:0b:18:10:f5:3f:41:2a:0a:f5:d7:
0a:a0:fd:71:d0:76:98:93:f3:77:1a:f8:3a:c1:c7:45:41:db:
01:f3:d3:3e:89:a7:e5:41:d8:05:5c:fd:61:12:db:98:38:e8:
73:d6:b4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:46:57 2025 by rpki-client