This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
File: dpU2g0Agk0lSKX69t4GJNXsToUU.mft (raw, json)
Hash identifier: 8jnn9Exfdi+SXIQW/ZfLGECgLwnHQaunXg33KDDtprk=
Subject key identifier: 78:50:A4:77:BD:CF:31:F4:C5:56:18:CC:C5:BC:5F:15:C4:39:C4:28
Authority key identifier: 76:95:36:83:40:20:93:49:52:29:7E:BD:B7:81:89:35:7B:13:A1:45
Certificate issuer: /CN=A9111623/serialNumber=769536834020934952297EBDB78189357B13A145
Certificate serial: 0141
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
Manifest number: 013D
Signing time: Tue 23 Dec 2025 03:28:40 +0000
Manifest this update: Tue 23 Dec 2025 03:28:40 +0000
Manifest next update: Tue 30 Dec 2025 03:28:40 +0000
Files and hashes: 1: dpU2g0Agk0lSKX69t4GJNXsToUU.crl (hash: ddStrHFSAaWORjBY6lLOfoiayu8s4ZgF2u1A7hHLdm4=)
2: CAE74ADEFD4511EEA97C9D1CC4F9AE02.roa (hash: Fsngn3T1P2F9caL/353bXgiO502hh5tKTNXu5S+xNYY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.crl
rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111623, serialNumber=769536834020934952297EBDB78189357B13A145
Validity
Not Before: Dec 23 03:28:40 2025 GMT
Not After : Dec 30 03:28:40 2025 GMT
Subject: CN=694a0c68-1ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:84:5c:9c:af:ff:43:e0:e4:4e:b5:20:e9:3e:
94:d4:28:d7:75:7c:cb:59:c2:f3:e1:7b:c0:f5:33:
65:93:30:5e:ab:02:fc:d7:89:46:bb:bf:3c:97:47:
52:df:f6:62:dc:a7:0c:ad:40:72:88:48:b0:33:90:
b8:86:52:a2:36:4a:05:ee:dd:18:cb:07:cd:6e:32:
1d:35:45:de:f8:49:10:e9:90:8f:d0:e6:89:43:ef:
05:62:3a:66:9c:5b:59:95:11:ea:61:18:b2:f9:62:
73:55:1e:91:d0:5b:e8:93:00:2a:e2:7c:ab:d5:eb:
7c:83:06:02:05:aa:49:8f:58:fa:f3:04:7e:51:84:
03:f2:bb:88:57:74:b0:0b:aa:a3:a8:80:5c:c2:0d:
10:be:d0:6c:1c:70:ee:a1:42:d5:48:f6:d7:14:19:
4e:a3:57:ff:99:a4:b7:36:c0:35:0c:ad:ca:7a:fe:
21:66:16:9b:e4:a3:d2:96:30:7b:82:8a:47:d3:bb:
2a:2a:59:41:f4:64:0e:22:a8:a9:a7:e6:2c:84:1c:
3a:89:6a:9d:8b:05:7b:b2:1f:89:c7:a7:b4:dc:4e:
e9:0d:f1:c9:71:de:18:f4:d7:89:83:6b:70:a5:ea:
32:71:45:e7:07:4e:6a:03:2a:1c:a7:4f:32:27:c6:
11:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:50:A4:77:BD:CF:31:F4:C5:56:18:CC:C5:BC:5F:15:C4:39:C4:28
X509v3 Authority Key Identifier:
keyid:76:95:36:83:40:20:93:49:52:29:7E:BD:B7:81:89:35:7B:13:A1:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c8:53:3c:ef:11:7a:94:1a:8f:a2:6a:0a:18:da:69:85:05:
4f:98:1e:4d:8f:90:5c:94:14:88:29:ad:3f:cc:6a:4d:44:c2:
3f:02:73:5d:54:fb:04:c8:e1:51:ed:10:47:28:59:90:1b:ef:
d1:51:dd:02:32:e8:c0:3b:9e:77:e0:bb:d9:aa:ff:f9:0d:f1:
2e:b8:f3:58:a4:61:0c:bb:36:38:a1:67:80:19:83:35:e1:d8:
7c:ce:bd:8c:70:b8:bb:5e:bc:8f:d1:10:99:73:ad:63:9b:c5:
34:9b:e2:bb:16:5e:4f:f1:fa:26:c0:88:a3:ce:8c:e8:18:fe:
c6:4f:84:3f:f2:3c:7d:6c:ed:18:c0:6c:d3:22:e1:c1:3b:1c:
0a:d6:2b:b7:42:8f:bb:f7:ba:97:de:9f:5a:91:e0:c1:61:ab:
ee:b0:0a:b5:da:30:ba:21:8d:b9:17:17:60:40:41:68:5d:38:
c7:7c:e6:86:8a:94:1d:70:28:9f:b9:16:44:59:83:cf:96:e2:
9d:2b:b8:05:08:9c:97:bf:e3:97:97:29:61:88:61:b4:09:b8:
d6:6a:73:1d:5c:c2:4c:01:fd:72:e9:aa:b8:14:a5:40:fc:f1:
ae:e7:71:8c:b8:9b:cf:41:79:50:aa:a9:0f:8e:65:cd:81:6c:
27:23:dd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:45:00 2025 by rpki-client