This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft
File: dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft (raw, json)
Hash identifier: lJsKDIANznY8hCs9Dvj2DifT+f41Wmnd+dXseHRPU9s=
Subject key identifier: 3D:A6:1C:FA:55:6F:75:B0:95:AB:F7:B1:11:CA:CB:1D:5C:B0:C6:75
Authority key identifier: 75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97
Certificate issuer: /CN=A915060F/serialNumber=75C0717740E9187DD535116139012F0F31D84097
Certificate serial: 3502
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft
Manifest number: 34FA
Signing time: Wed 24 Dec 2025 14:17:01 +0000
Manifest this update: Wed 24 Dec 2025 14:17:01 +0000
Manifest next update: Wed 31 Dec 2025 14:17:01 +0000
Files and hashes: 1: dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl (hash: 0XwdMbqSw/sjFceis3k7QS4YoLRqIuVZOILuvd7fbaM=)
2: FAB5FE6E101811EA9A30176EC4F9AE02.roa (hash: RqmLY0UHvoPEXEGiA3IV9LD1IHtw4IdY4hkPn7NdXpA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl
rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 14:17:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13570 (0x3502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915060F, serialNumber=75C0717740E9187DD535116139012F0F31D84097
Validity
Not Before: Dec 24 14:17:01 2025 GMT
Not After : Dec 31 14:17:01 2025 GMT
Subject: CN=694bf5dd-4809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:48:df:51:ce:a1:9a:6a:66:f6:22:39:95:ac:
1f:08:3f:a8:2d:95:2a:b9:cd:63:70:61:cb:1c:90:
03:ee:47:67:36:1a:8f:0c:39:06:f8:e0:98:41:4a:
fc:6b:b8:29:d3:a9:c0:51:41:ea:6d:b4:82:4f:f7:
49:3d:02:a8:62:84:29:ee:e6:87:78:b7:5e:8f:04:
d5:05:e1:31:e3:1a:dd:20:84:a2:89:4c:d0:b4:ea:
b6:7c:19:49:88:57:5b:c7:d2:29:24:30:7d:5b:3a:
d5:d4:fc:ba:ab:36:8e:04:27:7a:a4:f0:71:14:0b:
eb:28:94:44:09:9e:2c:1d:c8:7b:37:c4:6d:79:07:
dc:c5:85:d8:35:08:c0:bb:5a:b0:9d:1f:d0:61:6f:
43:bf:32:98:35:02:c5:fa:1a:0c:11:4a:1f:b0:d4:
7c:11:2c:a2:4a:cb:1c:64:0d:a3:6e:12:c0:fd:4a:
2c:46:0a:77:03:6f:2e:ee:a7:1b:de:23:bf:7d:51:
9e:8d:73:ab:2b:92:9a:60:24:4a:9c:23:2f:7d:97:
de:22:8f:5e:2d:0a:b9:82:6c:d9:70:15:d1:1d:d1:
f0:01:2e:78:fe:b3:08:b6:28:2b:90:52:e2:b6:95:
3a:43:33:e5:a3:30:ca:4a:31:ee:6c:e0:62:ce:6f:
2d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A6:1C:FA:55:6F:75:B0:95:AB:F7:B1:11:CA:CB:1D:5C:B0:C6:75
X509v3 Authority Key Identifier:
keyid:75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:3e:ff:08:fe:10:80:b2:77:f1:37:45:1a:74:a7:67:b8:64:
5a:90:9e:d4:2f:a3:a2:ca:ab:94:7a:73:f5:b2:5c:c6:de:5b:
a2:63:cc:9d:7d:3a:3c:7f:d2:f8:ae:4a:7b:f7:85:49:8f:52:
21:d0:ec:c5:f8:0b:41:33:0a:15:a5:4b:00:b2:76:bb:3e:c2:
5a:44:ba:cb:e8:08:2a:55:07:8a:cd:17:12:1f:c8:b7:96:56:
d3:8e:97:39:4d:53:18:9b:d2:b9:0f:1f:4a:27:ee:13:86:91:
8f:f0:88:51:69:40:7f:03:c0:bf:4b:98:37:8c:cd:ff:fc:81:
32:aa:04:d3:f4:f1:4e:c4:39:81:85:80:de:4a:5b:10:d5:30:
5d:37:9e:d9:6e:33:06:0f:83:fb:71:db:6d:89:a3:0f:d6:4b:
f4:da:33:fa:ef:05:de:1b:c2:45:19:ee:71:32:30:f1:8b:01:
40:15:39:71:ee:3d:5a:95:84:49:3f:4f:aa:35:ac:8d:6b:df:
41:a7:88:93:1c:ea:69:d9:37:0e:fa:c2:52:b1:ab:ac:d0:0d:
30:3b:3c:3b:83:3a:5a:4e:42:f1:53:59:4a:69:8f:a1:36:ef:
d1:40:59:6d:34:c2:05:f1:39:17:35:e1:c3:1a:76:ea:f9:83:
c5:76:8f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:29:39 2025 by rpki-client