This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft
File: suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft (raw, json)
Hash identifier: rMnRqVJMDIaWb8ODWx0IMO1F9Qi6/L2AHgQG1y/GXo0=
Subject key identifier: CF:07:DD:A6:D5:6C:25:F6:84:4B:3D:E2:74:E0:A5:38:2D:58:56:65
Authority key identifier: B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24
Certificate issuer: /CN=A91FA69F/serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724
Certificate serial: 0117
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft
Manifest number: 0115
Signing time: Fri 19 Dec 2025 03:58:38 +0000
Manifest this update: Fri 19 Dec 2025 03:58:37 +0000
Manifest next update: Fri 26 Dec 2025 03:58:37 +0000
Files and hashes: 1: suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl (hash: noRrbASDL45h86XZs7hIBmdyKuXuHDtsXBsQLf/VG/k=)
2: 0D38E31833A411EF82E92524C4F9AE02.roa (hash: EPqvpxlJgwQtY4nw1cFwMuEYfLLzI7V4J9A9JpW8gvM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl
rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 03:58:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279 (0x117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA69F, serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724
Validity
Not Before: Dec 19 03:58:37 2025 GMT
Not After : Dec 26 03:58:37 2025 GMT
Subject: CN=6944cd6d-fdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:96:2f:a6:ac:30:cc:f9:24:9a:93:1c:86:
59:2a:6b:99:0b:3a:5b:fc:43:82:d4:30:b1:27:d3:
2f:51:cc:9f:46:f4:cb:a9:11:de:23:48:a8:66:b6:
25:9b:13:75:1e:5b:e3:8a:55:31:cc:9a:36:95:9b:
2d:09:2c:15:3e:56:f4:5d:d0:b9:de:60:82:70:15:
2d:39:54:81:fb:21:a9:5d:a3:0a:46:4c:51:c5:ca:
0f:d4:cd:ab:1f:5c:a9:ef:7b:75:40:ed:4c:43:45:
c7:87:31:22:9b:88:11:91:f4:07:e7:17:20:09:2b:
9c:a6:5c:7e:90:4b:e5:72:74:9e:9a:3c:8b:32:a5:
55:15:dc:53:2e:9b:f7:21:92:32:24:39:0b:bb:6f:
2c:a8:e6:96:1a:6d:1c:a1:4e:1b:a3:7e:67:ec:82:
e9:0d:06:ec:c4:97:e2:41:f9:e7:ae:95:94:22:1e:
e7:5a:8a:d0:06:db:ec:3d:4a:59:a6:e7:46:d6:be:
78:ec:9e:55:0d:3b:40:2d:53:a8:df:74:84:14:8a:
f2:a2:fd:4d:6d:87:6f:e3:71:99:97:2c:30:86:40:
88:8b:9d:8a:00:03:4b:f7:29:97:0d:7f:ef:17:b1:
ab:87:d2:c4:01:b6:45:46:b6:e8:2f:99:a5:41:ef:
73:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:07:DD:A6:D5:6C:25:F6:84:4B:3D:E2:74:E0:A5:38:2D:58:56:65
X509v3 Authority Key Identifier:
keyid:B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:3e:97:f2:46:fb:d6:c0:63:7e:0d:1e:ee:60:3f:40:2f:19:
44:54:b5:6f:d6:09:86:97:de:26:95:ca:61:af:3b:c9:35:04:
6c:e8:b0:8e:31:cd:32:36:69:2f:8a:fa:0c:cc:34:c0:80:b6:
10:0f:ed:73:4d:30:13:5e:e8:4c:8c:7d:3b:3c:2d:ca:47:c3:
a6:33:3e:40:60:0a:b2:40:3d:59:7b:6b:83:31:74:45:0b:ba:
cb:8f:7d:fc:a5:14:3b:3a:5e:fd:5a:5e:76:d1:fd:2c:4c:ca:
13:00:1f:f4:99:51:15:f9:82:9f:45:c1:5b:22:18:81:88:c9:
7b:7e:76:57:ec:e8:e5:71:2a:fb:18:de:7f:ee:d5:b0:35:44:
f9:ae:27:81:c8:95:57:ea:f3:2a:6f:78:5a:45:fb:a4:95:eb:
55:d1:df:d7:23:6b:ca:c1:66:57:a1:03:0c:8f:ac:f3:90:5a:
6e:c6:a6:50:54:e9:b1:94:ab:28:95:c8:65:d0:70:8e:28:06:
d8:be:67:55:bb:6c:7d:70:53:39:c0:54:e6:df:13:b9:1a:d2:
85:cb:97:7b:ac:9d:5e:94:8c:61:72:71:bb:9c:87:b0:35:36:
55:09:50:82:72:0d:c7:79:39:a9:7f:35:43:9a:74:20:1f:76:
6a:d5:f7:44
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkE2OUYxMTAvBgNVBAUTKEIyRTg4RUREMzYxQkNDNjE5NEM5N0Y2OEM0NzI1MTgw
RkYwMkY3MjQwHhcNMjUxMjE5MDM1ODM3WhcNMjUxMjI2MDM1ODM3WjAYMRYwFAYD
VQQDDA02OTQ0Y2Q2ZC1mZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtYOWL6asMMz5JJqTHIZZKmuZCzpb/EOC1DCxJ9MvUcyfRvTLqRHeI0ioZrYl
mxN1HlvjilUxzJo2lZstCSwVPlb0XdC53mCCcBUtOVSB+yGpXaMKRkxRxcoP1M2r
H1yp73t1QO1MQ0XHhzEim4gRkfQH5xcgCSucplx+kEvlcnSemjyLMqVVFdxTLpv3
IZIyJDkLu28sqOaWGm0coU4bo35n7ILpDQbsxJfiQfnnrpWUIh7nWorQBtvsPUpZ
pudG1r547J5VDTtALVOo33SEFIryov1NbYdv43GZlywwhkCIi52KAANL9ymXDX/v
F7Grh9LEAbZFRrboL5mlQe9z2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8H3abV
bCX2hEs94nTgpTgtWFZlMB8GA1UdIwQYMBaAFLLojt02G8xhlMl/aMRyUYD/Avck
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY5Ri9CRDg1OUY5NjMz
QTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9zdWlPM1RZYnpHR1V5WDlveEhKUmdQOEM5
eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3N1aU8zVFliekdHVXlYOW94SEpSZ1A4Qzl5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QTY5Ri9CRDg1OUY5NjMzQTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9zdWlPM1RZYnpH
R1V5WDlveEhKUmdQOEM5eVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQPpfyRvvWwGN+DR7uYD9ALxlEVLVv1gmGl94mlcphrzvJNQRs6LCO
Mc0yNmkvivoMzDTAgLYQD+1zTTATXuhMjH07PC3KR8OmMz5AYAqyQD1Ze2uDMXRF
C7rLj338pRQ7Ol79Wl520f0sTMoTAB/0mVEV+YKfRcFbIhiBiMl7fnZX7OjlcSr7
GN5/7tWwNUT5rieByJVX6vMqb3haRfukletV0d/XI2vKwWZXoQMMj6zzkFpuxqZQ
VOmxlKsolchl0HCOKAbYvmdVu2x9cFM5wFTm3xO5GtKFy5d7rJ1elIxhcnG7nIew
NTZVCVCCcg3HeTmpfzVDmnQgH3Zq1fdE
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:38:21 2025 by rpki-client