This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
File: M3ujEf33twUntX7AOA8fu_o1iu8.mft (raw, json)
Hash identifier: C6bI1yWeDLyFndpkkb7A6QJJXEGZicOqnx6m6nUYM6A=
Subject key identifier: 40:A1:78:21:4D:E7:76:B2:DF:14:D9:A8:80:25:4A:1F:6C:C4:4B:67
Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF
Certificate issuer: /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
Certificate serial: 0167
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
Manifest number: 0163
Signing time: Wed 03 Dec 2025 02:32:53 +0000
Manifest this update: Wed 03 Dec 2025 02:32:52 +0000
Manifest next update: Wed 10 Dec 2025 02:32:52 +0000
Files and hashes: 1: M3ujEf33twUntX7AOA8fu_o1iu8.crl (hash: gA7QiTuqGC22+4wo8fjT2DW+nRbPaLhVlNWNR/S94yI=)
2: F0674762B6B611EE8EF4443AC4F9AE02.roa (hash: RKmiX9A97aGjOe2r+cPSYkbzXepCAIIElRc8YFdkQnY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl
rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 02:32:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359 (0x167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918497E, serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
Validity
Not Before: Dec 3 02:32:52 2025 GMT
Not After : Dec 10 02:32:52 2025 GMT
Subject: CN=692fa154-a07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:78:8e:bb:0b:e8:f3:c6:77:06:01:81:f5:f7:
67:45:87:3e:50:70:99:46:68:06:d6:07:77:c7:3b:
9e:79:7b:74:91:8d:34:68:42:13:c1:83:e0:96:6c:
3e:26:e5:f0:46:c1:e5:aa:d4:e0:db:75:08:c3:6e:
a2:0f:b1:13:05:af:70:81:97:5f:2d:fb:21:23:65:
6a:f8:1f:16:aa:49:47:45:29:80:bd:e7:a8:79:f6:
54:1d:97:39:86:1c:b2:8a:5a:1d:dc:b0:b5:47:fc:
24:31:7f:78:ff:46:82:8b:5c:6e:4e:8a:93:bd:bc:
2b:5c:bb:f9:66:25:93:68:71:61:c7:45:96:eb:70:
d4:f1:c8:e2:37:b5:15:99:54:91:bd:d6:c2:88:aa:
ba:88:b0:95:74:f9:54:39:4c:d9:7b:d8:72:66:8a:
17:6a:03:d5:3f:58:d8:e4:8f:91:59:7b:f9:02:d4:
9c:a1:ff:2c:31:ba:4c:ff:85:d4:68:0e:0d:18:ae:
db:0e:ee:f2:2f:e3:9b:b5:b2:3e:66:90:57:a8:6a:
4c:71:55:74:ae:ca:90:70:07:ac:b9:e1:6e:f9:66:
e0:ea:47:1d:8e:ab:47:96:5d:96:a3:22:9a:28:e6:
94:de:bb:9a:c3:37:88:70:fc:35:ae:72:42:c0:3a:
2e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A1:78:21:4D:E7:76:B2:DF:14:D9:A8:80:25:4A:1F:6C:C4:4B:67
X509v3 Authority Key Identifier:
keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:a9:c6:9b:ae:0b:3f:f4:5f:f1:9a:87:77:59:b6:0b:6f:78:
65:68:92:f7:a7:84:a2:ba:ad:63:0d:5a:51:40:95:f1:fe:69:
4c:6b:3e:82:c2:bc:1e:ce:6c:15:1e:ee:25:7f:c8:c4:d7:18:
f8:b6:e4:cc:e2:40:a2:f8:c0:e1:7d:ea:bf:0f:5b:23:43:c8:
7a:8f:a1:b0:03:04:7b:fc:9d:1d:0b:79:94:b0:c5:33:7d:c0:
f8:ac:90:c4:e6:59:f8:ff:4a:88:b1:87:7c:a8:ac:52:5c:f4:
10:a6:ff:ab:4a:ee:bc:94:56:6e:57:e2:0a:91:3e:26:c3:95:
af:b9:71:1b:d6:8e:86:e8:11:25:be:e4:70:2f:23:7b:74:02:
e4:77:88:d4:2a:15:5e:04:3f:08:3d:86:c6:e9:1c:0a:71:94:
d7:b6:de:d7:7b:f0:48:02:ec:82:54:e8:62:c3:54:73:f7:b5:
e6:10:e1:95:71:53:56:da:76:3b:9a:de:44:38:51:31:91:5e:
0c:70:19:1d:3f:60:1f:eb:70:cf:40:23:22:0a:14:2b:2a:a0:
49:72:e3:61:b0:eb:90:24:59:82:ad:89:21:75:da:e4:cf:57:
9d:2b:65:b7:a7:41:9a:9a:33:4d:ab:c7:1e:3c:a8:23:3b:74:
30:b2:dd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:57:27 2025 by rpki-client