This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
File: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft (raw, json)
Hash identifier: 3Zg1sFhi06uMUVcfhUP8wrdPn7hGS0X3UztTq7C5Pbg=
Subject key identifier: BC:8F:F4:F7:CA:14:27:5D:0A:07:8F:77:68:01:62:24:FA:5C:D8:68
Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Certificate serial: 0C00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
Manifest number: 0B8F
Signing time: Wed 10 Dec 2025 18:34:01 +0000
Manifest this update: Wed 10 Dec 2025 18:34:01 +0000
Manifest next update: Wed 17 Dec 2025 18:34:01 +0000
Files and hashes: 1: dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl (hash: ciMrcNHIk5npEbV288wmDJSpGwf8k7tkCVliA42Jtq0=)
2: 9E173D98C3A011F09FB4B135C4F9AE02.roa (hash: DDAK/bkV921U2mdTg9FWypKE0zQd9a81nWOpFoaGsxI=)
3: 9D060E183ED611ED8963B549C4F9AE02.roa (hash: 9HpfFO17Acvgd3bfoY1RRGMmr/S4lWCivU7zCXu99jQ=)
4: DC2FC844C39F11F0B36A6414C4F9AE02.roa (hash: Ic7Kgcc2/b9pbGsWyO2+erxvuMJUaVTKVZznOJTRUoU=)
5: 261A2BA2F39611EDA98C5D4DC4F9AE02.roa (hash: NmSN6VJwUZ9ydFpM44jw4neBA26CzfMXA6i3a7+JHjs=)
6: FC895C72C39F11F095CC9914C4F9AE02.roa (hash: uYEzCWLaVUrJF31Uyzd6mg/VgXA7JVYC2/J8xaXMb68=)
7: 50448A72911411EF9CAF3E55C4F9AE02.roa (hash: f8EbYStIGSB7T55NTXn1S3YpmHpX1HZLI2JBGQCdMmI=)
8: DCFFE916452611EDA4853E62C4F9AE02.roa (hash: Ctrd7yzaoKhPJ1SZfLY/mtqd2cD4Mo1aULu0wXYXeDQ=)
9: 305F24342A0811EE9D810010C4F9AE02.roa (hash: Z2pbtlXOSAO+jQlJKET8nsnjJlOh2Bme2k6kxjJMw0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Dec 2025 18:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3072 (0xc00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Validity
Not Before: Dec 10 18:34:01 2025 GMT
Not After : Dec 17 18:34:01 2025 GMT
Subject: CN=6939bd19-f8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c3:96:e8:33:6e:9c:0c:0b:90:62:1e:d0:2b:
ae:50:ed:36:6c:4c:3c:0d:ef:9b:31:2c:26:9e:dc:
8b:be:56:94:82:16:46:c2:c1:5e:d2:33:70:a1:c2:
e1:1d:25:3b:fa:10:d1:03:62:a6:e3:e1:ab:8a:c8:
6d:2c:d5:f9:a6:31:1d:27:d0:cb:42:9f:59:6e:c2:
a2:4e:f3:1b:c1:6d:9a:43:29:24:98:88:22:84:db:
ec:1f:a1:ee:15:36:fe:1a:ac:36:ac:3f:44:6f:ea:
08:78:ee:3e:94:26:03:ed:bb:86:ed:90:b3:8a:e0:
67:1d:8b:af:6b:cd:e4:70:71:53:92:f9:ca:de:57:
51:3e:a8:42:4d:48:85:33:38:43:4d:65:46:f8:0a:
26:e7:92:92:9b:68:c6:fe:33:5d:bc:4e:5e:2f:9c:
07:eb:5f:09:58:db:bf:60:2b:90:78:40:22:22:f3:
19:05:3c:00:89:67:7b:54:62:af:50:0f:44:c6:9e:
6d:9c:7a:57:46:90:c4:97:f9:84:8a:57:a7:fe:47:
28:14:03:9f:e1:ab:06:74:35:97:5c:93:a4:7c:0f:
ec:11:3a:ad:0c:a1:ec:37:60:dc:c6:7a:06:4c:2d:
34:f1:d4:79:5c:b1:42:32:a0:31:69:37:78:b7:8a:
b3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8F:F4:F7:CA:14:27:5D:0A:07:8F:77:68:01:62:24:FA:5C:D8:68
X509v3 Authority Key Identifier:
keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:51:62:73:02:73:f0:0e:3a:b3:2a:81:07:01:f6:01:fa:9e:
c8:cc:4f:bd:2f:e2:5a:6e:4e:60:44:7b:e0:cf:52:e1:17:65:
b6:1d:2e:7f:25:ab:92:4a:7e:fc:fb:48:e7:00:a3:cf:10:be:
b7:be:86:d2:de:03:69:d3:8d:70:2c:05:10:48:ee:c7:82:78:
4a:12:25:f1:65:f1:32:60:66:84:69:26:35:cf:63:0c:72:bd:
ed:72:10:be:11:77:58:f3:44:54:98:22:10:f2:5a:37:43:de:
eb:f9:67:da:b9:62:82:77:ec:77:6a:e7:4f:81:9c:a3:77:35:
a7:3e:86:10:e3:8d:40:e1:da:ad:43:97:2d:de:f8:d0:e6:f2:
46:a0:22:91:5b:bf:cd:7a:b1:e8:f5:41:6b:cb:b7:98:a7:27:
59:01:77:36:4e:b8:91:b5:c5:d5:ab:19:fc:9d:5b:5f:5b:ce:
c6:17:15:c9:ff:20:56:84:cb:bf:22:ce:d6:6c:df:ad:51:00:
6b:dc:b4:dd:da:18:5f:e0:44:b7:c7:3e:c5:db:be:9a:e5:9d:
d0:31:d8:72:3d:c6:d1:e8:41:ad:83:3f:9f:b4:9a:53:24:04:
39:fd:5e:f6:42:9c:98:50:b9:b4:ea:60:b7:e1:43:b3:65:9d:
ab:f4:18:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 03:01:32 2025 by rpki-client