This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
File: dhdGJegWMtON9iqDtXsDuiiH5vU.mft (raw, json)
Hash identifier: rLDTF/HSlkQypjz5NpRGBamNHYsxXNiNzkhrQOXjHa4=
Subject key identifier: A3:8E:0B:DE:92:21:FC:D0:CF:10:B3:09:CD:69:A2:ED:7D:5D:A7:1E
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Certificate issuer: /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial: 0836
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
Manifest number: 07F5
Signing time: Mon 08 Dec 2025 20:10:25 +0000
Manifest this update: Mon 08 Dec 2025 20:10:25 +0000
Manifest next update: Mon 15 Dec 2025 20:10:25 +0000
Files and hashes: 1: dhdGJegWMtON9iqDtXsDuiiH5vU.crl (hash: 68Q6o9CY/mnIV5r/1dZFrXkpPA9SpN4k3XTl8CkF+2Q=)
2: 84B9D0540E9711EB9A6C2B3CC4F9AE02.roa (hash: v6e1A53lOs4ttAFgNyyjZoCXEPeOi0GiecLMqc/MAn8=)
3: 857A6BC00E9711EB9A6C2B3CC4F9AE02.roa (hash: Ok9YVh7iJVfq5jAi1dUk84sBA5IsYOWabJTj7XjuXII=)
4: 824D5E300E9711EB9A6C2B3CC4F9AE02.roa (hash: ZDF/6Xw9ZE7b2+OVuWk9y1I5UDHjuJdR4+iTcEafgmY=)
5: 8433FF6A0E9711EB9A6C2B3CC4F9AE02.roa (hash: 5isKKj264kPgvcdF8hBz70YJR1jtU24tZnWCibLQbs8=)
6: 8068BF600E9711EB9A6C2B3CC4F9AE02.roa (hash: iqYDXGJezvbHsoQI5LOs/HpZOp9DdP6shWT091zXI/w=)
7: 21CF5E6C7AF111EF8BC4E684C4F9AE02.roa (hash: b1nalvR/eNXqTum+cSymzCLGQcxE1TXmTmkjmB0g0BY=)
8: A98668464EEB11EFB3305C85C4F9AE02.roa (hash: tWiWEgQiTh2MC49VXb2kimhBotEglhYAfcGxfEIxWjU=)
9: 1E5945A69E4111EDB7C9020EC4F9AE02.roa (hash: LsbxGQh0J4jRRvHUOzGfhoQnBu+EqX3+bxB0XHIwKEg=)
10: 830314BE0E9711EB9A6C2B3CC4F9AE02.roa (hash: eUQRjtj0tF+4ReuUVl4yzwgyQ7i/OO1b+JP4gilLkCk=)
11: 80F371780E9711EB9A6C2B3CC4F9AE02.roa (hash: BL4tECo9e+3ufRZK8OCt2j/Uj2lw36IymgWS2+ZdHFQ=)
12: 8197DA7E0E9711EB9A6C2B3CC4F9AE02.roa (hash: bczxjt2FwG7ZvqXhUNRx4J14OqU7vScZjaB3EzaWWXs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Dec 2025 20:10:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2102 (0x836)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110718, serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Validity
Not Before: Dec 8 20:10:25 2025 GMT
Not After : Dec 15 20:10:25 2025 GMT
Subject: CN=693730b1-29a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:81:70:c3:3b:fd:f6:d1:97:84:b4:89:b0:
64:39:02:cd:9f:ef:8f:38:c7:31:97:0b:69:fc:ec:
ec:35:9f:af:fa:fa:93:2b:9e:3c:bf:7f:92:3f:e8:
99:1e:03:c8:7e:7f:18:11:e7:55:a0:34:6c:ed:80:
d2:fb:85:9f:47:12:fc:cb:3e:b2:85:af:05:d6:4b:
36:40:27:c8:d2:b5:4e:9f:88:83:69:41:8a:77:53:
db:20:24:97:b5:25:69:6d:df:83:64:4f:09:b8:b4:
c9:f9:a5:3e:16:19:eb:e4:cf:eb:04:5e:36:f1:f1:
89:5a:0b:ca:6a:95:b6:14:dc:60:2c:ff:11:8a:80:
f4:5b:1d:4f:61:38:ec:42:ec:5a:67:2c:3d:e9:f4:
8a:c6:c3:ee:87:c3:ea:87:f3:16:09:c2:29:94:d3:
01:e2:28:52:1e:a8:c8:b5:ac:c9:84:91:17:c6:26:
fc:1d:48:59:75:5b:2d:57:e4:c0:a8:19:be:0e:be:
53:79:96:fb:10:92:6b:05:cd:08:14:56:b5:fc:3b:
49:58:84:ff:a4:ac:51:22:87:12:45:df:17:1f:ad:
d6:0e:83:42:ad:1a:94:43:8c:40:6c:78:57:e2:d1:
75:b4:6d:a7:be:46:2b:5c:6b:0b:5c:fc:1c:9f:60:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8E:0B:DE:92:21:FC:D0:CF:10:B3:09:CD:69:A2:ED:7D:5D:A7:1E
X509v3 Authority Key Identifier:
keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:f0:d4:a8:e7:e0:f1:f1:e9:85:78:06:23:9d:73:9b:7c:70:
f9:bd:57:97:dd:48:18:8c:16:63:38:3d:75:9e:62:86:98:18:
bf:e1:c3:8e:e5:44:3e:04:0d:39:ee:cb:73:05:cd:f5:46:0a:
51:22:ca:6f:96:48:c7:16:28:91:2a:d3:f8:fd:5a:76:b2:b4:
c3:a5:81:7b:3f:34:f6:71:60:66:3e:43:a2:f5:87:f9:be:0c:
27:42:e3:57:f3:06:73:5a:14:57:bb:38:30:ba:90:05:e7:58:
96:fe:40:e4:7e:2c:5b:35:87:d2:49:73:bd:03:27:f9:d6:a3:
8f:41:ff:5e:f9:8b:fd:b6:15:88:9b:57:54:2e:2d:33:a0:5d:
11:52:ab:fa:6e:81:23:05:02:4d:b0:41:6a:e5:c3:bd:f0:3f:
14:57:aa:c4:4b:25:8e:04:20:73:04:ae:62:85:4b:ef:84:df:
76:ee:c9:4f:39:bc:f0:68:b4:4f:9e:79:f5:6f:c6:c4:7d:cc:
8a:d1:67:c6:bd:7f:8d:04:35:f8:a9:dc:83:d5:d0:79:3e:b1:
31:23:c7:76:41:1a:41:f0:8b:be:69:23:e5:48:9b:ba:3b:1c:
8a:36:13:43:27:06:08:49:4b:bf:15:28:69:48:42:5c:c0:81:
f0:6a:36:4d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA3MTgxMTAvBgNVBAUTKDc2MTc0NjI1RTgxNjMyRDM4REY2MkE4M0I1N0IwM0JB
Mjg4N0U2RjUwHhcNMjUxMjA4MjAxMDI1WhcNMjUxMjE1MjAxMDI1WjAYMRYwFAYD
VQQDEw02OTM3MzBiMS0yOWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwKKBcMM7/fbRl4S0ibBkOQLNn++POMcxlwtp/OzsNZ+v+vqTK548v3+SP+iZ
HgPIfn8YEedVoDRs7YDS+4WfRxL8yz6yha8F1ks2QCfI0rVOn4iDaUGKd1PbICSX
tSVpbd+DZE8JuLTJ+aU+Fhnr5M/rBF428fGJWgvKapW2FNxgLP8RioD0Wx1PYTjs
QuxaZyw96fSKxsPuh8Pqh/MWCcIplNMB4ihSHqjItazJhJEXxib8HUhZdVstV+TA
qBm+Dr5TeZb7EJJrBc0IFFa1/DtJWIT/pKxRIocSRd8XH63WDoNCrRqUQ4xAbHhX
4tF1tG2nvkYrXGsLXPwcn2B5EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOOC96S
IfzQzxCzCc1pou19XaceMB8GA1UdIwQYMBaAFHYXRiXoFjLTjfYqg7V7A7ooh+b1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDcxOC85MjgzRURFRTBF
OTQxMUVCOTY2OUUxMzNDNEY5QUUwMi9kaGRHSmVnV010T045aXFEdFhzRHVpaUg1
dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RoZEdKZWdXTXRPTjlpcUR0WHNEdWlpSDV2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDcxOC85MjgzRURFRTBFOTQxMUVCOTY2OUUxMzNDNEY5QUUwMi9kaGRHSmVnV010
T045aXFEdFhzRHVpaUg1dlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCW8NSo5+Dx8emFeAYjnXObfHD5vVeX3UgYjBZjOD11nmKGmBi/4cOO
5UQ+BA057stzBc31RgpRIspvlkjHFiiRKtP4/Vp2srTDpYF7PzT2cWBmPkOi9Yf5
vgwnQuNX8wZzWhRXuzgwupAF51iW/kDkfixbNYfSSXO9Ayf51qOPQf9e+Yv9thWI
m1dULi0zoF0RUqv6boEjBQJNsEFq5cO98D8UV6rESyWOBCBzBK5ihUvvhN927slP
ObzwaLRPnnn1b8bEfcyK0WfGvX+NBDX4qdyD1dB5PrExI8d2QRpB8Iu+aSPlSJu6
OxyKNhNDJwYISUu/FShpSEJcwIHwajZN
-----END CERTIFICATE-----
Generated at Wed Dec 10 15:53:55 2025 by rpki-client