This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
File: UT3TCM11FCJ69R2AXlVApqn10zk.mft (raw, json)
Hash identifier: +yyV2K/zVdorbXeQ1PObE+V7cQ4JgPhaa1T+4umtzMQ=
Subject key identifier: FB:77:0F:74:C2:96:D1:3D:3B:48:BB:5D:F8:F6:14:80:A4:2C:8E:B9
Authority key identifier: 51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
Certificate issuer: /CN=A91F8119/serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Certificate serial: 1044
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
Manifest number: 103C
Signing time: Tue 02 Dec 2025 15:37:27 +0000
Manifest this update: Tue 02 Dec 2025 15:37:26 +0000
Manifest next update: Tue 09 Dec 2025 15:37:26 +0000
Files and hashes: 1: UT3TCM11FCJ69R2AXlVApqn10zk.crl (hash: 7yZA8cLK5AKmNaAOeW/IR4V68WWPzU1EN1zsaGBCRHI=)
2: 8BCB105015EA11EC86834E2FC4F9AE02.roa (hash: IX9d9TIKewpWNDigl1ZdHd+4/uZo37EA6gD3nX3eWyM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4164 (0x1044)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8119, serialNumber=513DD308CD7514227AF51D805E5540A6A9F5D339
Validity
Not Before: Dec 2 15:37:26 2025 GMT
Not After : Dec 9 15:37:26 2025 GMT
Subject: CN=692f07b7-f0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:50:aa:e9:e8:78:f0:1a:cd:71:e4:8c:fb:d2:
ec:e0:03:56:f3:1f:ec:bf:68:84:89:6c:ca:d0:b3:
d9:6b:ab:d6:b7:0b:c9:7e:b4:fd:08:0e:b4:e0:e7:
ba:d2:78:a9:5a:16:9c:b3:24:93:bc:ea:f5:81:be:
4e:93:81:32:7b:84:17:2e:eb:d4:ee:36:4f:23:c0:
48:17:6a:3e:2f:5a:c4:b9:1d:6a:13:b8:85:a3:c5:
9a:15:36:06:96:79:6b:05:10:07:63:08:ab:a3:04:
c9:69:4c:ea:c0:b5:df:12:9d:b3:ec:cc:2b:21:c6:
1d:a6:25:0d:fb:3a:a6:d7:57:ca:ff:1a:7b:62:4a:
4d:51:31:e9:06:df:e6:01:77:6a:ef:0c:44:7b:bf:
6e:bc:21:75:98:89:1c:c8:00:9a:49:6f:93:b6:47:
0e:18:66:ca:8c:f4:87:34:8b:7d:4c:ff:f0:06:24:
07:b2:b5:03:c2:e8:0e:05:ac:31:3d:8d:69:f7:09:
52:fa:88:26:bd:e8:0e:a1:03:84:f2:13:ea:5a:1c:
1a:2e:50:49:96:a1:ed:03:cd:ea:40:44:d1:3e:78:
32:1f:57:97:dd:f3:02:d5:4d:01:fe:30:29:01:be:
e2:05:81:71:63:e3:ab:5a:b6:1c:84:b5:16:25:dc:
5b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:77:0F:74:C2:96:D1:3D:3B:48:BB:5D:F8:F6:14:80:A4:2C:8E:B9
X509v3 Authority Key Identifier:
keyid:51:3D:D3:08:CD:75:14:22:7A:F5:1D:80:5E:55:40:A6:A9:F5:D3:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UT3TCM11FCJ69R2AXlVApqn10zk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/4E2D7A38514011E98D983B61C4F9AE02/UT3TCM11FCJ69R2AXlVApqn10zk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:2d:d5:6a:af:df:2c:b7:ce:8a:c4:52:d8:93:0c:fd:2f:66:
cf:f0:1c:2b:68:17:a0:d5:fb:d9:54:7c:07:91:06:23:19:7a:
a1:52:31:09:0b:6e:3e:df:f2:c8:ec:96:c7:a5:72:a5:31:d0:
28:0b:ee:6a:b5:cf:cb:f2:a0:20:5b:03:95:71:60:11:92:26:
12:13:21:a2:8a:5a:8c:e4:69:bd:b8:d3:a3:af:1c:10:e3:65:
e2:63:77:5b:6a:b4:cd:da:dc:d1:57:ea:61:28:91:93:bd:4b:
63:75:2e:6a:79:38:c9:e4:fe:ec:5b:1d:21:c8:19:53:b8:1a:
02:e8:6c:dc:30:14:2f:57:29:59:72:2e:23:a1:6e:cd:85:d2:
72:82:c0:c8:a3:ef:0c:25:8d:89:74:94:bc:37:b1:9a:b6:11:
37:a9:0f:24:6d:ba:04:74:1a:69:38:21:b5:3d:76:2d:e0:65:
d1:b0:2c:c6:01:41:fb:26:8e:2f:a7:c5:6a:51:a6:30:6a:78:
e8:75:da:de:fd:65:a0:f4:61:13:6d:22:39:5a:bd:a1:e0:db:
2d:16:e9:da:06:7e:1e:44:05:d9:79:27:05:c1:1b:e0:fb:eb:
c5:e5:d6:46:7e:1c:e0:02:b6:88:ee:f1:8e:8a:41:75:4a:a8:
1b:31:8e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:31:41 2025 by rpki-client