This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
File: punLpSnAWpYkymA1SKPjFJF1jys.mft (raw, json)
Hash identifier: cScB/Y3/IoQGx5NcJs73JomqGxrN679t/vZEQ0lPHqo=
Subject key identifier: BA:C5:CE:2A:86:71:95:1A:B0:0F:E7:40:99:05:8B:ED:03:F2:2F:23
Authority key identifier: A6:E9:CB:A5:29:C0:5A:96:24:CA:60:35:48:A3:E3:14:91:75:8F:2B
Certificate issuer: /CN=A9189B41/serialNumber=A6E9CBA529C05A9624CA603548A3E31491758F2B
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
Manifest number: F1
Signing time: Wed 03 Dec 2025 03:42:50 +0000
Manifest this update: Wed 03 Dec 2025 03:42:50 +0000
Manifest next update: Wed 10 Dec 2025 03:42:50 +0000
Files and hashes: 1: punLpSnAWpYkymA1SKPjFJF1jys.crl (hash: w3QM3c857kAMrXtoexuClGOokfxmorJflrynyJZiKvU=)
2: 17AF252C605A11EFB7F45361C4F9AE02.roa (hash: IdTeZSdJYpvrv4PlLAcbyZ45qrh+mkn1A6fS8tzZ0GE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.crl
rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 03:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189B41, serialNumber=A6E9CBA529C05A9624CA603548A3E31491758F2B
Validity
Not Before: Dec 3 03:42:50 2025 GMT
Not After : Dec 10 03:42:50 2025 GMT
Subject: CN=692fb1ba-7bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:bc:ec:6c:0f:ea:f3:50:46:ce:7d:da:e9:
66:56:0d:8f:7e:28:e6:3b:9d:28:27:ea:e5:25:8f:
54:3a:2d:b9:0b:b4:e5:ea:70:31:f0:b8:f6:1a:2b:
5f:92:06:d3:2b:97:a3:90:91:c9:86:62:43:c3:9b:
ad:cf:85:e2:c7:4e:38:c7:69:89:b9:7e:41:c3:bf:
f4:34:1a:bf:32:d0:9c:1d:78:d4:e9:2d:97:ba:29:
02:d8:1c:3a:18:f8:9e:dd:08:20:36:ca:bd:77:1c:
90:9e:22:59:32:56:b0:1e:67:ce:75:2a:77:52:ba:
d6:25:bc:31:27:b9:fe:e7:e0:57:aa:05:57:4a:bc:
ce:1d:f9:8b:16:46:be:65:18:98:3a:0b:71:9e:3f:
93:c6:11:f9:86:ab:e2:24:37:55:a6:d8:52:26:65:
91:79:66:d8:53:49:72:f7:7c:2f:ce:27:c7:22:15:
c7:8c:37:2e:83:20:77:47:60:e0:5d:c7:32:08:f3:
ff:1a:e3:d9:04:db:c3:37:8c:e6:f2:87:85:b0:b5:
8b:47:71:58:02:c3:98:9d:38:ca:f4:99:b6:b3:49:
99:a4:b3:b6:82:81:c8:4c:25:b9:48:51:57:c3:f1:
27:ac:24:91:44:0c:61:13:7b:72:e3:1e:14:8c:03:
d6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C5:CE:2A:86:71:95:1A:B0:0F:E7:40:99:05:8B:ED:03:F2:2F:23
X509v3 Authority Key Identifier:
keyid:A6:E9:CB:A5:29:C0:5A:96:24:CA:60:35:48:A3:E3:14:91:75:8F:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:2c:26:f7:40:af:2c:c7:a4:56:0f:3e:91:fb:8d:ac:fd:b8:
ae:55:c9:37:c2:4b:d1:3d:07:de:83:57:90:ae:f6:ce:e3:b7:
5f:ec:d7:90:a1:2c:5c:2b:fd:f5:96:2c:fe:2d:cb:db:da:7f:
7b:d5:e1:d7:59:35:67:c2:71:1c:b5:67:ba:84:89:02:65:c4:
af:34:4e:cc:92:c1:b1:51:d6:40:3b:21:b6:c2:51:e5:14:4e:
29:fd:f0:d3:90:37:05:90:81:f7:7a:cc:90:84:97:f0:63:1c:
d4:8b:71:38:64:b5:16:06:3a:71:f5:f8:e0:d3:80:3e:96:4f:
12:31:3d:6a:a4:16:6a:62:fb:de:31:77:ac:6d:48:ce:3a:c3:
b0:22:ac:0f:51:f5:1a:ec:81:4d:70:23:9a:dd:e6:eb:9d:89:
03:75:00:b9:7f:ec:42:cd:cf:68:de:a4:6a:46:d4:ed:c8:1c:
1c:e5:73:3b:f1:bf:8b:8b:0a:d0:58:6d:11:12:13:e9:1d:63:
dd:14:9b:2d:69:78:f7:95:46:32:7d:a6:31:7b:fd:ae:49:e7:
23:d2:3b:04:84:d1:12:27:e4:af:35:fa:4d:7c:5e:84:72:d7:
c0:1f:ac:1a:c5:3a:3c:b1:a4:23:a7:c6:c3:b5:3e:5f:f4:32:
fa:a9:a1:c5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODlCNDExMTAvBgNVBAUTKEE2RTlDQkE1MjlDMDVBOTYyNENBNjAzNTQ4QTNFMzE0
OTE3NThGMkIwHhcNMjUxMjAzMDM0MjUwWhcNMjUxMjEwMDM0MjUwWjAYMRYwFAYD
VQQDEw02OTJmYjFiYS03YmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsuW87GwP6vNQRs592ulmVg2PfijmO50oJ+rlJY9UOi25C7Tl6nAx8Lj2Gitf
kgbTK5ejkJHJhmJDw5utz4Xix044x2mJuX5Bw7/0NBq/MtCcHXjU6S2XuikC2Bw6
GPie3QggNsq9dxyQniJZMlawHmfOdSp3UrrWJbwxJ7n+5+BXqgVXSrzOHfmLFka+
ZRiYOgtxnj+TxhH5hqviJDdVpthSJmWReWbYU0ly93wvzifHIhXHjDcugyB3R2Dg
XccyCPP/GuPZBNvDN4zm8oeFsLWLR3FYAsOYnTjK9Jm2s0mZpLO2goHITCW5SFFX
w/EnrCSRRAxhE3ty4x4UjAPWcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrFziqG
cZUasA/nQJkFi+0D8i8jMB8GA1UdIwQYMBaAFKbpy6UpwFqWJMpgNUij4xSRdY8r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUI0MS82OUI3Njk4RTYw
NTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9wdW5McFNuQVdwWWt5bUExU0tQakZKRjFq
eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3B1bkxwU25BV3BZa3ltQTFTS1BqRkpGMWp5cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OUI0MS82OUI3Njk4RTYwNTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9wdW5McFNuQVdw
WWt5bUExU0tQakZKRjFqeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBnLCb3QK8sx6RWDz6R+42s/biuVck3wkvRPQfeg1eQrvbO47df7NeQ
oSxcK/31liz+Lcvb2n971eHXWTVnwnEctWe6hIkCZcSvNE7MksGxUdZAOyG2wlHl
FE4p/fDTkDcFkIH3esyQhJfwYxzUi3E4ZLUWBjpx9fjg04A+lk8SMT1qpBZqYvve
MXesbUjOOsOwIqwPUfUa7IFNcCOa3ebrnYkDdQC5f+xCzc9o3qRqRtTtyBwc5XM7
8b+LiwrQWG0REhPpHWPdFJstaXj3lUYyfaYxe/2uSecj0jsEhNESJ+SvNfpNfF6E
ctfAH6waxTo8saQjp8bDtT5f9DL6qaHF
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:56:46 2025 by rpki-client