This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft
File: DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft (raw, json)
Hash identifier: Lco09A1/e95ClQGCTInI//FvnRgphLLgw59+zqajRNc=
Subject key identifier: FB:AE:9D:A5:E2:77:5E:61:7D:11:A3:17:2E:DC:F3:9F:44:53:CD:EE
Authority key identifier: 0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE
Certificate issuer: /CN=A9143078/serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE
Certificate serial: 03EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft
Manifest number: 03DD
Signing time: Mon 08 Dec 2025 23:01:27 +0000
Manifest this update: Mon 08 Dec 2025 23:01:26 +0000
Manifest next update: Mon 15 Dec 2025 23:01:26 +0000
Files and hashes: 1: DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl (hash: CQxFGjYwGc0FuN3GENlXdHy/EzD8Ln8DT3DgnV+WXTQ=)
2: 1332B7BCEC7211EFBA9EF77FC4F9AE02.roa (hash: EyHs5y7oE17xIkYVPklIvc2ZONwGgz4agYPg5DpPAPQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl
rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Dec 2025 23:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1002 (0x3ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143078, serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE
Validity
Not Before: Dec 8 23:01:26 2025 GMT
Not After : Dec 15 23:01:26 2025 GMT
Subject: CN=693758c6-2e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:bd:0d:a3:4e:8a:4a:e3:e8:58:28:bb:bb:
8f:c3:83:a7:8b:7c:e1:4e:7d:e7:7a:af:02:cb:01:
ab:16:04:19:79:af:d5:c1:65:79:ef:b5:c6:6d:8c:
2a:60:14:e7:04:73:4f:6b:ce:8b:2c:07:b0:f1:30:
4c:5e:20:cf:ab:65:a0:68:5b:1b:1b:3a:16:7a:03:
bf:40:37:db:8f:d6:ce:65:25:f9:00:78:58:c3:49:
a9:dc:eb:1d:07:00:52:e6:46:c5:1a:f9:da:71:74:
aa:03:8a:6b:f1:a3:81:7e:00:5c:01:23:88:ab:ae:
2c:23:dc:44:b1:c9:57:42:9a:fc:f7:52:68:a1:96:
e8:99:38:3d:82:05:c4:76:9f:69:02:35:c5:5a:85:
7c:67:f5:87:25:7a:a2:c7:a1:8e:79:e8:f3:ad:ea:
44:d8:5d:4a:4d:49:22:85:d0:bb:0e:b5:9e:49:e3:
83:ee:3e:1d:70:35:57:09:c3:52:0c:2b:44:0b:c3:
bc:bc:c5:f0:a5:76:07:d6:cb:89:61:01:cd:09:d1:
b1:c0:d8:90:87:f9:9d:7d:74:99:64:e2:da:aa:4f:
5f:ab:ce:5d:b5:4d:2a:15:09:5c:98:cc:ae:9b:2d:
11:7f:21:e7:c6:a3:3d:b4:e6:d4:10:96:4e:78:1e:
81:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AE:9D:A5:E2:77:5E:61:7D:11:A3:17:2E:DC:F3:9F:44:53:CD:EE
X509v3 Authority Key Identifier:
keyid:0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9c:4e:c8:c5:27:40:03:4c:37:39:4b:48:45:11:dd:ee:c4:
06:e0:2d:97:04:8b:13:b8:a0:d1:22:3c:38:89:da:e8:e4:d4:
de:83:71:ff:57:86:e0:a3:99:f0:e4:a0:77:0f:4c:a1:64:c7:
4c:2c:9b:36:7c:b0:40:9c:b3:a2:4e:d1:bf:d7:7c:0b:9e:73:
2f:9f:b5:36:a7:3c:61:80:52:2b:f6:6d:6c:c3:3d:75:4a:88:
ec:11:8f:b4:87:78:c5:9e:6b:e8:2f:46:1e:32:d6:6e:0b:bf:
48:52:95:8c:1a:a2:c6:95:c3:28:f6:b5:2d:04:79:db:ff:a3:
9b:9c:61:5c:9e:37:23:d0:24:06:fb:5b:5a:0d:2f:6c:29:57:
02:ab:81:21:39:54:47:a3:62:f1:b8:e1:40:2e:b0:38:a7:b2:
78:ed:19:ba:13:b8:c0:01:ba:65:dc:be:50:ff:2c:7a:80:98:
a5:27:92:63:50:31:2e:f1:07:12:b5:fe:f9:36:dd:e4:8b:e6:
d4:e3:9b:f6:cc:78:3f:91:08:c7:39:0c:7c:b3:0f:9d:ff:d0:
f9:68:a3:47:ec:43:91:e3:94:d0:a7:29:97:74:ef:f3:5d:9d:
f3:83:d5:6a:dd:75:27:3c:b2:ed:5a:7c:77:4e:63:c8:c4:06:
ba:13:d8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 18:24:39 2025 by rpki-client