This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft
File: p3fkgYyg3MY4LlYlcG-YyB6TByA.mft (raw, json)
Hash identifier: MCU5lnymT4thwF4IfCCKa5miEVjnDwYq84MvxwCO2aU=
Subject key identifier: BE:69:2E:4F:53:A2:D3:2A:8D:95:BB:6E:1D:F3:A5:F1:DD:AE:93:B0
Authority key identifier: A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20
Certificate issuer: /CN=A918EF94/serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720
Certificate serial: 0E93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft
Manifest number: 0E8B
Signing time: Thu 18 Dec 2025 17:31:10 +0000
Manifest this update: Thu 18 Dec 2025 17:31:09 +0000
Manifest next update: Thu 25 Dec 2025 17:31:09 +0000
Files and hashes: 1: p3fkgYyg3MY4LlYlcG-YyB6TByA.crl (hash: +iZ4VuO5v4aZByUHyh3pFWlnYlYySz+7aj8Mc7gexgI=)
2: EE78BE36068611EDA1C2070DC4F9AE02.roa (hash: X7Dq3eZ/GJf+9yPNH4D4Wvo3ddILMQm0OljP2i+67DY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl
rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 17:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3731 (0xe93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EF94, serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720
Validity
Not Before: Dec 18 17:31:09 2025 GMT
Not After : Dec 25 17:31:09 2025 GMT
Subject: CN=69443a5e-de5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3f:40:e8:8c:e6:2d:47:a4:40:72:c7:58:5c:
80:0d:dd:de:32:1f:2d:dc:e9:be:97:6b:9c:e0:a0:
c5:d7:ab:e6:f2:46:ca:8a:b7:6c:46:d0:be:a6:fe:
f3:6e:51:7f:c0:9b:e2:9a:5e:15:90:c2:94:d7:4d:
60:ea:4f:35:65:42:55:e4:eb:69:56:43:a4:4d:bf:
50:5c:85:ff:21:9d:55:63:2e:85:95:e9:13:d8:5c:
8e:f1:b0:13:f1:30:44:08:66:63:11:b0:8c:56:18:
c6:14:d4:52:69:d7:54:b0:38:c1:9f:c5:a9:0a:6f:
bc:5d:7a:43:b3:f3:f0:98:c2:cc:f9:92:9a:46:48:
91:a2:80:c5:c1:7d:c6:8c:40:16:2c:33:21:80:14:
e2:9a:c8:a4:d2:fb:9b:c3:72:e5:de:88:c6:16:a4:
7d:dd:9f:92:57:c4:d4:75:7c:8b:64:13:b1:6c:53:
7c:f7:56:03:b8:49:30:99:52:a0:e2:01:19:12:7c:
84:01:a5:57:41:c4:af:4a:1c:99:6f:d3:12:65:b3:
d5:b4:ea:4c:bb:67:18:0a:68:6a:0a:29:ce:59:1c:
d8:ef:1a:14:6a:36:44:11:47:4d:e0:73:c2:11:4d:
ac:e4:bb:a4:2a:2a:ab:c6:aa:2b:07:12:33:67:f1:
8f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:69:2E:4F:53:A2:D3:2A:8D:95:BB:6E:1D:F3:A5:F1:DD:AE:93:B0
X509v3 Authority Key Identifier:
keyid:A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:f3:07:04:f6:1b:71:b9:9a:c0:e0:37:69:5a:84:41:22:28:
00:d3:d1:72:a5:41:72:46:b3:ff:56:98:6c:81:da:71:60:d9:
96:c3:1e:87:e1:50:e2:a2:3e:2c:3b:1e:85:98:38:2f:cb:4d:
8f:d6:46:3e:51:97:38:1f:72:81:f9:80:f7:70:0e:1f:f8:fa:
0e:87:82:dd:02:81:98:9f:fe:d3:c6:87:9d:b8:c9:91:13:c6:
5a:ab:86:79:a7:09:63:75:00:92:41:02:30:5d:49:dd:b3:fb:
17:ef:91:4c:2b:81:bf:17:3d:be:39:0c:52:12:f5:1e:0a:80:
33:51:a1:36:88:0a:65:80:c6:ac:88:8a:23:0d:af:f0:c3:81:
7c:20:6d:11:f7:8d:2a:cc:dc:17:b5:2b:b8:92:55:64:3e:9a:
ff:78:9a:2c:6f:14:57:96:f6:e3:ae:d4:b0:5b:c7:de:99:a7:
b9:d1:33:70:5b:c7:ca:41:20:a9:5e:46:43:da:45:78:b2:ef:
3b:d9:d4:cc:98:d2:47:28:33:c2:4c:7b:a6:f0:7c:64:f0:f6:
22:00:6a:34:da:e3:dc:b9:4e:23:dc:55:72:84:1d:c1:a2:48:
fa:8f:4e:db:3e:22:b8:5e:38:1a:78:87:03:b3:dc:b4:42:23:
88:fc:fc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 15:27:03 2025 by rpki-client