This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft
File: DVYqrcHASY2u4mEMGn2odb5jXOo.mft (raw, json)
Hash identifier: PSZEFt0trraSjyTKr1Ck3TBlcSnTUgqLOzNTu1jJ5NY=
Subject key identifier: DB:CA:39:94:90:A9:3B:8D:D4:29:95:55:9B:9E:43:5A:DF:9E:5B:FB
Authority key identifier: 0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA
Certificate issuer: /CN=A911C756/serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA
Certificate serial: 032C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft
Manifest number: 0321
Signing time: Sun 21 Dec 2025 00:20:41 +0000
Manifest this update: Sun 21 Dec 2025 00:20:40 +0000
Manifest next update: Sun 28 Dec 2025 00:20:40 +0000
Files and hashes: 1: DVYqrcHASY2u4mEMGn2odb5jXOo.crl (hash: 2xgmGe4X/Rkxrh/0lmRrxj1/UbbWHkcSUNyIRThfqeg=)
2: ACC8D92C543611EEA8C54616C4F9AE02.roa (hash: TISzTSrE5qXOmFnb4u2BfIGDXSoPkQaTpa16UDl/rrY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl
rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 00:20:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 812 (0x32c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C756, serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA
Validity
Not Before: Dec 21 00:20:40 2025 GMT
Not After : Dec 28 00:20:40 2025 GMT
Subject: CN=69473d59-75cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:15:10:77:4c:6a:3e:9f:1d:0b:c1:0a:73:0f:
a4:f5:8d:fe:e8:d6:21:08:44:03:7e:3a:f8:ce:7e:
3e:aa:2d:d6:62:e8:4b:57:f3:43:51:94:e2:af:17:
80:90:c3:40:e4:5e:91:4e:e9:aa:9a:bb:a3:2e:52:
0c:d9:90:d1:62:39:a7:a0:65:b1:91:f4:d7:ae:9a:
73:06:a8:b6:5c:0a:15:f5:8f:78:89:17:72:2a:2c:
54:51:9f:78:e3:f7:98:17:e3:f3:3e:2a:d5:4d:0e:
e7:fd:f3:7e:e5:d5:9f:d4:67:d9:61:60:a3:15:a2:
9f:1e:21:20:b7:ee:e8:1b:91:e1:9a:89:9d:08:7d:
28:92:45:6c:e9:e9:89:4f:35:1c:0d:87:ad:7f:e2:
b7:64:54:b5:03:fc:7f:6d:e2:4a:5e:44:32:88:40:
a1:b1:43:f5:55:3c:f7:26:e4:49:c3:b7:01:dc:c6:
4b:e8:0b:fe:a4:30:0a:5c:32:2a:6c:ef:ac:d2:e0:
76:9d:32:92:ad:2e:f8:8a:94:1d:79:85:bb:d8:e4:
c1:9a:0e:98:11:3b:7a:13:cd:b1:86:68:31:01:9f:
44:a5:bb:71:fd:e9:71:03:49:89:64:ff:ba:42:45:
5f:f9:f8:48:aa:db:d8:da:2f:1d:89:3f:d9:b5:fe:
40:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CA:39:94:90:A9:3B:8D:D4:29:95:55:9B:9E:43:5A:DF:9E:5B:FB
X509v3 Authority Key Identifier:
keyid:0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c7:5d:56:8d:57:5c:e4:e6:9d:fa:da:db:d5:0f:9a:db:6b:
cd:c4:ab:3c:df:ed:6f:ef:96:09:d6:31:90:7b:81:5d:96:ae:
72:cf:9c:a9:9c:3b:86:51:86:a2:de:f8:5a:04:df:c8:4a:08:
9e:17:05:b2:16:d6:7a:94:9f:4b:c7:24:f7:6b:f1:12:98:7d:
36:f8:45:dc:89:72:dd:00:98:dd:97:2d:33:0d:1a:5a:a7:b5:
d9:ab:69:3c:db:d9:f0:f4:73:85:ae:07:0f:ed:e3:e1:28:39:
c8:0c:4d:5b:52:72:7f:cd:7c:9c:4c:a3:28:a0:df:91:7b:97:
12:99:b5:cb:9e:63:ac:8d:91:d3:d9:5a:af:00:a1:1d:a1:ab:
9e:0b:e1:40:29:f8:c0:3d:ac:05:48:11:07:ac:ac:64:0f:59:
44:e7:3a:56:cc:06:d3:29:ba:f9:df:88:64:29:34:58:ef:75:
8c:2d:e0:60:95:e8:f1:e9:b9:5f:04:a0:03:86:d4:09:38:d8:
74:d8:d3:2a:32:d8:0b:3c:52:92:77:09:dd:aa:15:2d:d3:ac:
fd:d1:4a:2a:e7:a7:a6:3b:4d:3b:f6:42:82:10:b2:c6:b6:4f:
ae:ac:05:75:fd:08:dd:f4:4f:8c:f8:fd:b7:9a:3b:d3:41:a5:
71:53:1c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 13:13:14 2025 by rpki-client